Privacy Policy

1. Information We Collect

We collect information you choose to provide when using our website or mobile apps, including when you:

• Submit a report or tip (incident details, optional evidence such as photos, videos, documents, or voice notes, and optional contact details for rewards).
• Place a bounty (case details, reward amount, and related materials you upload).
• Create tracking credentials (a tracking ID and password you set so you can follow your submission later).
• Contact support or use partner/organization accounts where applicable.

We may also collect limited technical and device information needed to operate and improve the service (for example browser or app type, device platform, approximate diagnostics, and push notification device tokens when you opt in).

2. Mobile App Permissions

On WhistleBlowerNG, device permissions are requested only when you start a relevant action:

• Camera, microphone, and photo library — to attach evidence or record a voice report.
• Location — only for optional emergency-state contact lookup.
• Face ID / biometrics — only to unlock tracking credentials saved locally on your device.
• Notifications — only if you enable public alerts or tracker updates on that device.

Optional voice anonymization tools are designed to help reduce the risk of voice-based identification; they do not guarantee absolute anonymity in all circumstances.

3. How We Use Your Information

Your information is used to process reports and bounties, route submissions to the relevant receiving organizations or authorities, enable secure tracking and follow-up messaging, process verified rewards and payments, send the push or in-app alerts you opt into, manage partner accounts, maintain platform security, and improve product reliability and public-safety features.

4. Analytics

We use privacy-conscious analytics (including Google Analytics / Firebase Analytics) to understand aggregate product usage, such as public screen views and content engagement. We design analytics to avoid logging sensitive report contents, tracking passwords, chat messages, evidence details, or similar confidential submission data. Analytics helps us improve performance and public features; it is not used to identify anonymous reporters.

5. Push Notifications

If you enable notifications, we store a device push token and your alert preferences so we can deliver public alerts or tracker-status notices. Notification payloads are designed not to include sensitive report content, passwords, paycodes, evidence names, or private chat text. You can disable notifications in device settings or in-app preferences.

6. Data Security

We use industry-standard encryption in transit, access controls, and secure infrastructure to protect data. We design the platform so reporter identity is kept confidential from the public and from reported parties, except where you choose to share contact details (for example for rewards) or where disclosure is required by law. No online system is perfectly secure, and you should avoid including unnecessary personal identifiers in submissions.

7. Data Sharing and Disclosure

We do not sell your personal data. Information may be shared with relevant receiving organizations or authorities for review and investigation, with service providers who help us operate the platform (for example hosting, payments, analytics, and push delivery) under appropriate safeguards, or when required by law. Public bounty details may be published after review, but the identity of the bounty placer remains anonymous by design. News, bounty, and wanted listings shown publicly are platform-managed editorial or public-interest content.

8. Your Rights and Tracking Credentials

You can track your submission using the ID and password you created. Passwords cannot be recovered if lost. For integrity reasons, anonymous reports and bounties generally cannot be deleted or rewritten by users after submission, but you may be able to add updates through the secure tracker. Optional credentials saved on a mobile device stay on that device and can be removed from the app.

9. Changes to This Policy

We may update this policy periodically. We will post the updated policy on this page with a revised “Last Updated” date. Continued use of the website or mobile apps after changes means you accept the updated policy.

10. Contact Us

WhistleBlower.ng / WhistleBlowerNG is operated by ExpressCreo Limited. If you have any questions, please contact us at privacy@whistleblower.ng.