Privacy Policy

1. Who we are

Zoluna Limited is the data controller responsible for your personal data. Ansarr is a two-sided research marketplace: Researchers publish and fund studies, and Participants (Respondents) complete them for cash rewards. You can contact us about this policy or your data at ask@ansarr.com.

2. Information we collect

• Account & identity — your Nigerian mobile number (your primary identifier, verified by one-time passcode), and an optional email address. A device fingerprint may be recorded at signup to enforce one account per person.
• Profile & targeting data — self-declared demographics (such as age band, location, student status, and institution) used to match you to eligible studies.
• Verification evidence — where you opt into higher verification tiers, this may include qualification answers, a short voice sample, or an identity or matriculation document. It is used solely to confirm eligibility and is never shared with Researchers.
• Financial data — the Nigerian bank account details you provide for payouts, and a record of your Wallet balance and transactions. Card and bank-collection data is handled by our Payments Partner, not stored by us.
• Activity data — studies you view and complete, completion codes, and signals from our automated speed and attention checks.
• Device & technical data — on the mobile app, a push-notification token (Firebase Cloud Messaging) if you enable notifications, plus standard technical data such as app version and general device information needed to operate and secure the Service.

3. How we use your data

• To create and secure your account and verify your identity and eligibility.
• To match you to studies you qualify for, and to operate the study, escrow, and reward flow.
• To process payments in and payouts out through our Payments Partner.
• To detect and prevent fraud, multiple accounts, and abuse (including automated and manual review).
• To send you service messages and, where enabled, push or SMS notifications about your studies, responses, and payouts.
• To comply with our legal and regulatory obligations.

4. Legal basis for processing

We rely on the following legal bases under the NDPA: performance of our contract with you (to provide the Service and pay you); your consent (for example, optional verification tiers and push notifications, which you may withdraw at any time); our legitimate interests (such as fraud prevention and securing the Service); and compliance with legal obligations.

5. How we share your data

We do not sell your personal data. We share it only as needed to run the Service:

• Researchers — see only an anonymised code and the demographics a study targets. They never see your name, phone number, email, bank details, or verification evidence.
• Payments Partner — our licensed payment processor(s), including Paystack, to collect study funding and disburse payouts, and to verify your bank account name.
• Service providers — providers who help us operate the Service, such as our SMS/OTP provider (for verification), push-notification delivery, cloud hosting, and database infrastructure, under obligations of confidentiality.
• Legal & safety — where required by law, regulation, or lawful request, or to protect the rights, safety, and property of Zoluna, our users, or others.

6. Data retention

We keep your personal data for as long as your account is active and as needed to provide the Service, and thereafter only as long as necessary to meet legal, accounting, fraud-prevention, and dispute-resolution obligations, after which it is deleted or anonymised.

7. Your rights

Subject to the NDPA, you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request erasure, to object to or restrict certain processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at ask@ansarr.com. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

8. Security

We apply technical and organisational measures to protect your data, including encryption in transit, row-level access controls in our database, and strict internal limits on who can access personal data and verification evidence. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

9. Children

The Service is intended only for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by other reasonable means, and the date above will be revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact us

For any question about this policy or how we handle your data, contact us at ask@ansarr.com, or by post to Zoluna Ltd, Ibadan, Oyo State, Nigeria.