Get the app

Privacy Policy

Operated by Zoluna Ltd (Nigeria) · Last updated: 11 October 2026

This Privacy Policy explains how Zoluna Ltd (“Zoluna”, “we”, “us”, or “our”), a company incorporated in the Federal Republic of Nigeria, collects, uses, shares, and protects your personal data when you use the Ansarr platform, website, and mobile application (collectively, the “Service”). We process personal data in accordance with the Nigeria Data Protection Act, 2023 (the “NDPA”) and applicable regulations. It should be read together with our Terms of Service and Acceptable Use Policy.

1. Who we are

Zoluna Ltd is the data controller responsible for your personal data. Ansarr is a two-sided research marketplace: Researchers publish and fund studies, and Participants (Respondents) complete them for cash rewards. You can contact us about this policy or your data at ask@ansarr.com.

2. Information we collect

  • Account & identity. Your name (if you take part in studies, as it appears on your bank account, so we can match your payout account), your Nigerian mobile number (your primary identifier, verified by one-time passcode), and an email address (optional if you take part in studies, required if you run them). To help enforce one account per person, we record a device identifier when you create your account: in the mobile app this is the identifier your phone's operating system issues to our app (not a hardware serial number; on Android it stays the same if you reinstall the app and changes after a factory reset); on the web it is a random identifier stored in your browser together with general browser characteristics (such as browser type, screen size, language and time zone). It is used only to detect accounts that share a device. A match doesn't stop you signing up. Until we've reviewed the accounts on a device, their cash-outs are on hold and each study can be taken from only one of them. If we find that one person holds more than one account, we keep one and close the others.
  • Profile & targeting data. If you take part in studies: details you give us to match you to studies, namely your date of birth, gender, ethnic group (optional: you can choose “Prefer not to say”), place and country of birth, state of residence, languages, education (including student status and institution), work details (such as employment status, job type, role, sector and years of experience) and any optional notes you add. If you run studies: your organisation or institution, whether it is academic or a company, your job title and industry.
  • Verification evidence. Your answers to the qualification check; if you choose, a short voice clip, deleted once it has been reviewed; and, where identity verification is available, your NIN and a selfie checked through our identity-verification provider and not stored by us, or a photo of an ID document, deleted once it has been reviewed. It is used solely to confirm eligibility and is never shared with Researchers.
  • Financial data. The Nigerian bank account details you provide for payouts, and a record of your Wallet balance and transactions. Card and bank-collection data is handled by our Payments Partner, not stored by us.
  • Activity data. If you take part in studies: studies you view, start and complete, the answers you submit to surveys in the Service, how long a response takes, and signals from our automated speed check; for earlier Studies that used an external survey link, the completion code you entered. If you run studies: the projects, studies and surveys you create, and your review decisions (including any reason you give for a rejection).
  • Device & technical data. On the mobile app, a push-notification token (Firebase Cloud Messaging) if you enable notifications. On the app and the website, standard technical data such as your IP address and browser or device type, which our servers and providers receive with each request. We use your phone number and IP address to limit repeated attempts (for example, how many sign-in codes can be requested in an hour), and our bot-check provider checks your browser or app when you request a sign-in code.
  • iPhone list. If you ask to be told when the iPhone app is ready, your name and email address.
  • Messages to us. Feedback you send from the app, with your account ID so we can reply.

3. How we use your data

  • To create and secure your account and verify your identity and eligibility.
  • To match you to studies you qualify for, and to run study funding, the rewards held for each study, and payouts.
  • To show Participants the organisation running each study, and to let Researchers review and download the responses to their studies.
  • To take payments through our Payments Partner (Paystack), and to pay withdrawals to your bank account.
  • To detect and prevent fraud, multiple accounts, and abuse (including automated and manual review).
  • To send you service messages and, where you allow them, push notifications about your studies, responses, and payouts. We use SMS only to send your sign-in code.
  • To comply with our legal and regulatory obligations.

4. Legal basis for processing

We rely on the following legal bases under the NDPA: performance of our contract with you (to provide the Service and pay you); your consent (for example, optional verification tiers and push notifications, which you may withdraw at any time); our legitimate interests (such as fraud prevention and securing the Service); and compliance with legal obligations.

5. How we share your data

We do not sell your personal data. We share it only as needed to run the Service:

  • Researchers. For each of your responses, the researcher sees an anonymous code (a different one in each study), your gender, state and education level, and the answers you give in their study, which they can download. Because only people who match a study's targeting can take it, they also know you match it (for example, an age range or ethnic group they chose). They never see your name, phone number, email, bank details, or verification evidence.
  • Participants. If you run studies, Participants see your organisation or institution's name, and a verified mark if we have verified it, on your studies. They never see your name, phone number or email.
  • Payments Partner. Our licensed payment processor, Paystack, to collect study funding (card and bank details you enter at checkout go to Paystack, not to us) and to look up the name on your bank account. With each payment, Paystack also receives your Ansarr account ID and the ID of the study it is for, so we can match the payment to you. Withdrawals are currently paid by bank transfer from our own bank account.
  • Service providers. Providers who help us run the Service, under obligations of confidentiality: Termii (sign-in codes by SMS), Cloudflare Turnstile (bot checks when you request a sign-in code), Google (Firebase Cloud Messaging for push notifications, and Google Analytics on our public web pages, see section 6), Resend (email), Vercel (hosting), Supabase (database and file storage) and, when identity verification is switched on, Dojah (identity checks).
  • Legal & safety. Where required by law, regulation, or lawful request, or to protect the rights, safety, and property of Zoluna, our users, or others.

6. Analytics and cookies

On the public pages of our website (our home page at ansarr.com/download, About and these legal pages) we use Google Analytics 4 to understand how people find and use ansarr.com. We don't use it on the account-deletion page, inside your Ansarr account or in the Ansarr mobile app.

  • What it measures. The pages you visit, the page or site that sent you, general device and browser information, an approximate location (such as country and city) that Google works out from your IP address, and a few actions on the page: tapping a Google Play link, using the price calculator, joining the iPhone list, and which parts of the product tour you scroll to. We never send your name, email address or phone number to Google Analytics.
  • Cookies, only if you accept. If you choose Accept, Google Analytics sets first-party cookies (named _ga, and _ga_ followed by an ID) so it can recognise repeat visits. They expire 13 months after your last visit. Before you choose, and if you choose Reject, no analytics cookies are set or read.
  • Measurement without cookies. Until you accept, and after you reject, our pages still send Google a basic signal for each page view and action, with no cookie or identifier for your device. Like any web request it includes technical data such as your IP address and browser type. Google uses these signals to estimate overall visit numbers.
  • No advertising. We don't use Google Analytics for advertising: Google signals and ad personalisation are turned off, and we don't sell your data.
  • Google as our processor. Google processes this data on our behalf as a service provider, which may include processing outside Nigeria.
  • Changing your choice. Use Cookie settings at the bottom of any of these public pages. Choosing Reject also deletes the analytics cookies from your browser.

7. Data retention

We keep your personal data while your account is open. When you delete your account, we delete it and the personal data in it from our database straight away. We keep a record of the money that moved through it: study payments and our fees, rewards and the study each came from, refunds, withdrawals with their fees and any tax withheld, and any balance you gave up. That record holds amounts, dates and statuses. It doesn’t include your name, phone number, email address, bank details or account ID, and we keep it for as long as we need it to meet our legal, accounting and tax obligations. Copies in our backups, and records held by our service providers (such as Paystack, Termii and Google), may remain for a limited time after that.

8. Your rights

Subject to the NDPA, you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request erasure, to object to or restrict certain processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at ask@ansarr.com. You can also delete your account yourself in the app (Profile, then Delete account) or at ansarr.com/delete-account. Deleting it removes your answers from researchers' results in Ansarr, but not copies a researcher downloaded before then. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

9. Security

We apply technical and organisational measures to protect your data, including encryption in transit, row-level access controls in our database, and strict internal limits on who can access personal data and verification evidence. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

10. Children

The Service is intended only for people aged 18 and over. Everyone confirms they are 18 or over when they sign up, and we don't let anyone under 18 finish a Participant profile or store a date of birth under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by other reasonable means, and the date above will be revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact us

For any question about this policy or how we handle your data, contact us at ask@ansarr.com, or by post to Zoluna Ltd, Ibadan, Oyo State, Nigeria.

Zoluna Ltd · Ibadan, Oyo State, Nigeria · ask@ansarr.com