Privacy Policy

Applies to: ezysphere.com and every Ezysphere application · Version: 3.1 · Effective: 9 October 2026 · Last updated: 26 October 2026

This Privacy Policy explains how Ezysphere Limited ("Ezysphere", "we", "us", "our") handles personal information when you visit our website, download or use one of our applications, or contact us. It is written to be read in plain English, and it is the policy we hold ourselves to.

1. Who we are

Ezysphere Limited is a software studio incorporated in the Federal Republic of Nigeria, registration number RC 9229333, with its registered office at Enugu, Nigeria.

For all personal information described in this Policy, Ezysphere Limited is the data controller (the entity that decides why and how your information is processed), except where a third-party platform acts as an independent controller in its own right - see section 9.

Our contact point for all privacy matters, including requests to exercise your rights, is apps@ezysphere.com. We have not appointed a Data Protection Officer, as we are not required to do so; privacy requests are handled directly by the people who build and maintain the products.

2. Scope of this Policy

This Policy applies to:

• the website at ezysphere.com and every page on it;
• every mobile, desktop and web application published by Ezysphere, including Build Estimate, EzyNotify, EzyPlayer, WeSynk Player, Grid Finder, ShareOps, AI Trivia, Grid Shooter, Snap Pattern and Assist Scholar (each, an "App"); and
• any email, form or support conversation you have with us.

App-specific supplements

Individual Apps do different things with different data, so several have their own privacy supplement that adds detail on top of this Policy. A supplement never gives you fewer rights than this Policy does; it only describes that App's processing more precisely. Where a supplement and this Policy genuinely conflict, the supplement prevails for that App only. Where an App has no supplement, this Policy applies in full and on its own.

Every supplement is listed on our legal index.

3. Information we collect

3.1 Information you give us

3.2 Information collected automatically

Next.js website pages use Vercel Web Analytics; signed-in website features use Supabase authentication cookies. See section 8.

3.3 Information from third parties

• App stores. Google Play, the Apple App Store and the Microsoft Store may give us aggregated, non-identifying install, crash and review data. Purchases you make through a store are confirmed to us by the store.
• Payment providers. Flutterwave and Paystack confirm to us whether a payment succeeded, its reference, amount and currency.
• Authentication providers. If you sign in through a third-party identity provider, we receive the identifiers that provider releases to us.
• Publicly available sources. Assist Scholar aggregates scholarship listings from public web sources. That data is about funding opportunities, not about you.

3.4 Information we deliberately do not collect

• We do not collect precise GPS location in any App.
• Picker features access selected items; a media-player library can scan local media when you grant library access. The relevant app supplement explains any upload or sharing. We do not request contacts, call logs or SMS for the features described here.
• We do not request financial account credentials. Files you choose to upload may contain identity information; do not include information unnecessary for the requested feature.
• We do not buy personal information about you from data brokers.

4. Sensitive information

Some Apps necessarily handle material that is personal in nature. We call this out rather than burying it:

• Snap Pattern processes photographs of your body in order to calculate garment measurements. The app sends those photographs to its measurement engine; consult its supplement for details. Snap Pattern does not perform facial recognition, does not attempt to identify anyone from a photograph, and is designed for garment dimensions rather than identity verification. Sensitive-data laws may still apply to photographs and measurements. See the Snap Pattern privacy supplement.
• Assist Scholar provides a document vault in which you may choose to store application materials such as transcripts, identity documents and financial statements. Those files are held on your own device by default. See the Assist Scholar privacy supplement.
• Build Estimate transmits floor-plan images you upload to our processing service to generate a bill of quantities. See the Build Estimate privacy supplement.

We do not ask for, and ask that you do not send us, information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, health data, or data concerning sex life or sexual orientation. If you send such information to us unprompted - for example in a free-text support message - we will process it only to answer you and will delete it when the matter is closed.

5. How and why we use your information

• To deliver the feature you asked for - generate an estimate, calculate a measurement, draft a pattern, transfer a file, run a page watch, deliver a reminder.
• To operate accounts and sync - authenticate you, and make your saved data available on your other devices when you sign in.
• To operate points, rewards, streaks, referrals and subscriptions - grant allowances, record spends in a ledger, verify purchases, and prevent double-spending and fraud.
• To take payment - pass the necessary details to a payment provider and record the outcome.
• To keep the products working - diagnose crashes, reproduce faults, monitor capacity and rate-limit abuse.
• To keep the products safe - detect and prevent fraud, abuse of free tiers, referral manipulation, credential stuffing and unauthorised access.
• To communicate with you - answer support requests, send service messages such as security or policy notices, and send notifications you have enabled.
• To show advertising in the Apps that carry it, and to reward you for watching an ad where that is offered.
• To improve what we build - understand which features are used and where they fail, using aggregated or de-identified information wherever that is sufficient.
• To meet legal obligations - keep transaction records for tax and accounting purposes, respond to lawful requests, and establish, exercise or defend legal claims.

6. Legal bases for processing

Where the EU or UK General Data Protection Regulation applies to you, we rely on the following legal bases. Similar reasoning applies under the Nigeria Data Protection Act 2023.

Where we rely on consent, refusing or withdrawing it costs you nothing except the feature that depends on it, and withdrawal does not affect the lawfulness of processing carried out before you withdrew.

7. Advertising and analytics

Build Estimate and AI Trivia integrate Google AdMob. Advertising can involve device/ad identifiers, IP addresses, approximate location inferred from network information, and ad interactions. Availability varies by app and platform; not every app uses every provider.

Build Estimate also integrates Firebase Analytics, Crashlytics and AppsFlyer for usage measurement, diagnostics, campaign attribution and purchase events, including an account identifier when configured. EzyNotify uses Firebase analytics and crash reporting. ShareOps sends update requests and rating feedback with an installation identifier. WeSynk uses OneSignal for notifications and has optional diagnostics and cloud features. Read each supplement for details.

Where consent is required for non-essential storage, identifiers, analytics or advertising, it must be obtained before that processing starts. Accepting terms or continuing to use an app is not that consent. Device permissions, advertising-ID controls and in-app choices control different processing; non-personalised ads may still process device information. Contact us to object or withdraw consent for processing based on it.

See Google's partner-site data disclosure. Advertising and attribution providers may act as independent controllers for some purposes. Pseudonymous identifiers are not necessarily anonymous.

Ezysphere website short links record the redirect-link ID and timestamp for each click so we can display click totals in the admin. The click event table does not retain IP addresses, browser identifiers or referrer URLs, and known preview crawlers are filtered using their request headers.

8. Cookies and similar technologies

Next.js website pages use Vercel Web Analytics to measure visits. Signed-in website features use Supabase authentication cookies to maintain sessions. Static pages can load Google Fonts and Cloudflare cdnjs resources; those providers receive IP addresses and browser request information. Web3Forms receives information entered in forms it delivers to us. External app-store and payment links use the destination's privacy practices.

Browser controls can restrict cookies and storage, although blocking authentication cookies may stop sign-in working. Essential authentication and optional measurement have different purposes; this notice is not consent to non-essential tracking.

9. Who we share information with

We share personal information only with the service providers that make the products work, and only to the extent each one needs. Their roles depend on the service and applicable arrangements; some advertising, payment and store providers act as independent controllers for their own legal or service purposes. Provider terms alone do not establish that every recipient is solely our processor.

We may also disclose personal information:

• to professional advisers such as lawyers, auditors and accountants, under a duty of confidentiality;
• where we are required to do so by law, by a court, or by a competent regulator - and where we are legally free to tell you, we will;
• where necessary to establish, exercise or defend a legal claim, or to protect the rights, property or safety of Ezysphere, our users or the public; and
• to a successor entity in connection with a merger, acquisition or sale of assets, in which case we will require the successor to honour this Policy and will notify you before your information becomes subject to a materially different policy.

This list describes providers across the suite; the relevant app supplement identifies its processing. Enabled integrations vary by app and deployment. If we add a provider that materially changes how your information is handled, we will update this table and, where required, notify you.

10. International transfers

Ezysphere is based in Nigeria. Hosting, backend, advertising, payment and other providers can process information internationally, including in the United States and Europe. Deployment regions and subprocessors determine actual destinations.

Restricted transfers require a lawful basis under the applicable rules, such as adequacy or appropriate contractual safeguards and any required assessment. A privacy notice or acceptance of terms is not itself a transfer safeguard. Contact apps@ezysphere.com for the destinations and safeguards applicable to your data and a copy or explanation where required by law.

11. How long we keep information

Retention depends on the data and purpose:

• Accounts, handles and saved cloud work: while needed for the account or feature, then removed when no longer needed or following a valid deletion request, subject to limited legal exceptions.
• Processing inputs and generated files: temporary inputs, hosted output images, saved results and provider logs have different lifecycles. Build Estimate can retain output images after a response and use an external image host. WeSynk clips have expiry/cleanup, while resume metadata is stored separately. Not all data disappears when a request returns; read the app supplement.
• Leaderboard entries, feedback and support: while needed to operate the relevant board, respond, improve the service or resolve an identified dispute. You can request removal.
• Payment and fraud records: for applicable statutory recordkeeping and the period necessary to resolve transactions, claims or investigations. These can survive account deletion.
• Logs, analytics and attribution: according to the purpose, provider settings and necessary security/investigation periods. Website short-link click events are removed when the corresponding redirect link is deleted.
• Local files: until removed on the device; exported files, recipient copies and operating-system backups may survive uninstalling.

We explain lawful retention exceptions and any backup expiry delay when responding to deletion requests. We cannot delete independent copies held by another recipient. De-identified statistics may be retained only where they cannot reasonably be associated with you.

12. How we protect information

Protections depend on the feature, including account authentication, access controls, encrypted internet connections where supported, and provider protections. Local discovery, browser transfers and casting are distinct from authenticated cloud traffic and may expose information on the local network. Do not assume every protocol uses TLS or every record is end-to-end encrypted.

No system is absolutely secure. Keep credentials and devices secure, use trusted networks, verify recipients and maintain independent backups. Report suspected unauthorised access to apps@ezysphere.com. This notice does not remove our security obligations under law.

13. Your rights

You may make the following requests. Their availability, scope and lawful exceptions depend on the applicable law and processing:

• Access - a copy of the personal information we hold about you, and an explanation of what we do with it.
• Correction - have inaccurate or incomplete information put right.
• Deletion - have your information erased, subject to applicable lawful exceptions, which we will explain.
• Portability - receive the information you gave us in a structured, commonly used, machine-readable format.
• Restriction - ask us to pause processing while a dispute about accuracy or lawfulness is resolved.
• Objection - object to processing based on our legitimate interests, and to any direct marketing, at any time and absolutely.
• Withdraw consent - where processing is based on consent, withdraw it at any time.
• Non-discrimination - we will not unlawfully discriminate against you for exercising rights; a feature may stop working if you ask us to delete information needed to provide it.

How to exercise them

Use our data request page, or email apps@ezysphere.com stating which App and which right. We will:

• Acknowledge your request promptly;
• Verify that the request comes from you - usually by confirming control of the account email address. We ask for the minimum needed to verify, and use it for nothing else;
• Respond within 30 days. If a request is unusually complex we may extend this by a further period permitted by the applicable law and will tell you why; and
• Charge nothing, unless a request is manifestly unfounded or repetitive, in which case we may charge a reasonable fee or decline, and will explain why.

An authorised agent may make a request on your behalf where the applicable law allows it, provided they supply proof of authorisation.

14. Region-specific rights

14.1 Nigeria

We process personal data in accordance with the Nigeria Data Protection Act 2023 and other applicable data-protection requirements. You have the rights set out in section 13 above, and the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

14.2 European Economic Area, United Kingdom and Switzerland

You have the rights described in section 13 as they are set out in Articles 15 to 22 of the GDPR and the UK GDPR. You also have the right to lodge a complaint with your national supervisory authority - in the UK, the Information Commissioner's Office - although we would appreciate the chance to resolve the matter first.

Contact us for representative details applicable to your region. Whether an EU or UK representative is required depends on our activities and the law; acceptance of this policy does not create an exemption.

14.3 California

Under the California Consumer Privacy Act as amended by the CPRA, Where that law applies to our processing, California residents have the right to know, delete and correct personal information, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising those rights.

• We do not exchange personal information for money. Whether advertising or attribution disclosures constitute a regulated sale or sharing depends on the applicable law and provider arrangements; the applicable opt-out rights remain available. We do not sell the personal information of anyone we know to be under 16.
• Sharing for cross-context behavioural advertising. In Apps that carry AdMob advertising or campaign-attribution integrations, the use of an advertising identifier to serve personalised ads may constitute "sharing" under the CPRA. You can opt out at any time by declining ad personalisation in your device settings, using available in-app privacy controls, or by emailing us - subject to applicable law; device controls alone may not stop all processing.
• Sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those permitted without a right to limit under the CPRA.
• The categories of personal information we collect, the purposes, the categories of recipients and the retention periods are set out in sections 3, 5, 9 and 11 above. This section, read with those, is our notice at collection.

14.4 Other United States states

Where applicable to our processing, a comprehensive consumer privacy law in your state - including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana - gives you rights to access, correct, delete and obtain a copy of your personal data, and to opt out of targeted advertising, sale and certain profiling. We do not exchange personal information for money or engage in profiling that produces legal or similarly significant effects. You may appeal a refusal of a request by replying to our decision; we will respond to an appeal within the period your state's law allows.

15. Children and young people

Our Apps are not directed to children, and the minimum age to use them is set out in our Terms of Service. In summary:

• You must be at least 13 to use an Ezysphere App, and at least 16 if you are in the EEA or the UK, unless a parent or guardian consents on your behalf where the law allows.
• Assist Scholar is aimed in part at secondary-school students. If you are under 18, you may use it only with the consent and involvement of a parent or guardian, and you should not upload identity or financial documents without their agreement.
• Snap Pattern is restricted to adults aged 18 or over, and its Terms prohibit photographing anyone other than yourself.

We do not knowingly collect personal information from a child below the applicable minimum age. If you believe a child has provided us with personal information, contact apps@ezysphere.com and we will delete it and close the account promptly.

16. Automated decisions and profiling

We do not make decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing.

Some Apps compute things automatically - a match score against your stated study preferences, a bill of quantities from a floor plan, a set of measurements from a photograph. These are informational outputs that you review and act on yourself. They are estimates, they can be wrong, and nothing about you is decided by them. Automated checks are also used to detect fraud and abuse; if such a check restricts your account, you can ask a person to review it by emailing us.

17. Security incidents

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority - including the NDPC where Nigerian law applies - within the period required by law, generally 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to you, we will notify you directly and without undue delay, describing what happened, what it means for you, and what we are doing about it.

18. Third-party sites and services

Our website and Apps link out to third-party destinations - app stores, payment pages, and in Assist Scholar the official websites of scholarship providers. We do not control those destinations and are not responsible for their content or their privacy practices. Once you leave our website or App, this Policy no longer applies. Read the policy of any site you land on.

19. Store privacy disclosures

Store Data Safety and App Privacy disclosures must match the distributed app version and its third-party SDK processing. This policy does not override or excuse an inaccurate store disclosure. Contact us if you find a discrepancy.

20. Changes to this Policy

We may update this Policy as our products and the law change. When we do:

• we will change the "Last updated" date and increment the version number at the top of this page;
• for material changes - a new category of data, a new purpose, a new class of recipient, or a reduction in your rights - we will give reasonable advance notice in the App or by email to the address on your account before the change takes effect; and
• where a change requires your consent under applicable law, we will ask for it rather than assume it.

This notice does not obtain consent through continued use. Where a new purpose requires consent, it must be obtained separately before that processing starts. Previous versions are available on request.

21. Complaints

If you are unhappy with how we have handled your personal information or a request, write to apps@ezysphere.com with "Privacy complaint" in the subject line. We will investigate and reply within 30 days. If you remain unsatisfied you may complain to the Nigeria Data Protection Commission, to your national supervisory authority in the EEA, to the Information Commissioner's Office in the UK, or to your state Attorney General in the United States. Nothing in this Policy limits your right to do so.

22. How to contact us

Ezysphere Limited
Registered in the Federal Republic of Nigeria, RC 9229333
Enugu, Nigeria
Email: apps@ezysphere.com
Web: ezysphere.com