Privacy Policy

Last Updated: February 13, 2026

---

1. Introduction

Welcome to Spruce ("we," "us," or "our"). We are committed to protecting your privacy and ensuring a secure experience when using our services.

This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

Account Information

• Full name, email, phone number
• Password (securely hashed)
• User role and profile photo
• Biometric authentication (device-only)

Facility Information

• Apartment/unit details
• Facility name and location
• Emergency contacts

Transactions

• Payments via Monnify
• Bookings and schedules
• Complaints and reports

Communications & Content

• Voice notes sent to facility administration (used for support, complaints, and incident reporting)
• Uploaded files including images, videos, PDFs, and other attachments
• Messages related to bookings, complaints, and service requests

Security & Access Data

• QR code scans used for visitor access verification at facility gates
• Entry and exit logs for security monitoring

Automatically Collected

• Device information & IP address
• Usage activity

3. How We Use Your Information

• Provide and manage services
• Process payments
• Send notifications
• Improve performance and security
• Process voice notes, file uploads, and QR-based security verification

4. Data Sharing

We only share data when necessary:

• Facility role-based access
• Service providers (Monnify)
• Security verification systems (QR access validation)
• Legal obligations

We do not sell your data.

5. Data Security

• HTTPS/TLS encryption
• Access control systems
• Secure infrastructure

6. Data Retention

• Account data: Duration + 2 years
• Transactions: 7 years
• Logs: 30–90 days

7. Your Rights

• Access your data
• Request updates or deletion
• Withdraw consent

Contact: info@thesprucesolution.com

8. Children’s Privacy

Not intended for users under 18.

9. Third-Party Services

Includes Monnify for payment processing and security verification systems for QR-based access control.

10. NDPR Compliance

We comply with Nigeria Data Protection Regulation (NDPR).

11. Updates

We may update this policy and notify users.

12. Governing Law

This policy is governed by Nigerian law.

---