Privacy policy
Effective 29 October 2026
Korrekt helps you check whether a price is fair before you buy, and find verified shops. This policy covers the Korrekt website (korrekt.ng), the Android app and the iPhone app. "Korrekt", "we" and "us" mean the team that runs Korrekt in Nigeria. We follow the Nigeria Data Protection Act 2023 (NDPA). Our terms of use cover the rules for using Korrekt.
- You can check prices without an account. We only ask for your phone number when you sign in.
- Screenshots you check are read on your phone. The picture is never uploaded.
- We don't sell your data, and Korrekt has no ads.
- Shops never see your phone number from Korrekt. They only see it if you message them yourself.
- You can delete your account and its data at any time in Korrekt: Account → Delete my account.
1. What we collect and why
When you check prices (no account needed)
What you type or paste is matched against our product list on your device. We don't receive your screenshots or the prices you enter, and we only learn what you searched for if usage sharing is on (see "Optional" below). The state you pick ("Lagos", "All of Nigeria") and your recent checks are saved only on your device. Like any website, our hosting provider records basic technical details of each visit, such as your IP address and browser, to keep the service running and secure.
When you sign in
| What | Why |
|---|---|
| Your phone number | To sign you in with a code sent by SMS, so your watchlist, alerts and offers stay with you. |
| Your watchlist | The items you watch and the best price you've seen, so we can tell you when a price drops or an item is listed. |
| Offers you make | The item, your offer and the shop's answer, so the shop can answer and you can see where it stands. |
| Your notifications | Your inbox in Korrekt: alerts, offer news and account updates. |
| A push token | In the apps, if you allow notifications: the address your phone gives us so alerts can reach it. |
| "Did you buy it?" answers | If you message a shop through Korrekt, we later ask whether you bought and whether the shop honoured the price. Your answer is saved to that shop's track record without your name or number. |
When you run a shop on Korrekt
| What | Why |
|---|---|
| Shop name, area and state, WhatsApp number, Instagram page, whether you sell online and where you deliver | To check your shop is real and to show it to buyers once it's verified. |
| Shop-front photo | Taken with the camera at your shop, to verify it. Buyers see it once your shop is verified. |
| Your prices and item photos | To show buyers what you sell and to work out fair price ranges. |
| Stock confirmations | When you tap "Everything listed is in stock", buyers see "In stock today" on your items for 48 hours. |
| Price-list lines we can't match | When a line in your price list isn't a product Korrekt covers yet, we keep that line with your shop so we can add the product and let you know. |
| CAC certificate and registration number (optional) | To confirm your business registration. Only you and our admins can see the certificate. Buyers only see "CAC registered" and the registered name, after we've checked it. |
| Video call (online sellers) | We may verify an online seller with a WhatsApp video call. We only note that the call happened. We don't record it. |
Phone checks (IMEI)
If you pay for a phone check on the website or the Android app, we send the IMEI you enter to our checking provider, IMEI.info, and show you the result. The full IMEI is deleted as soon as the check finishes, or after a day if you don't pay; we keep only its last four digits with the result. Payments are made on Paystack's own page. We never see your card or bank details, only whether the payment went through and how much it was.
Reports about shops
If you report a shop, we keep the reason, what you wrote, the date and, if you're signed in, your account, so we can look into it. The shop isn't told who reported it. We also flag shops that use the same WhatsApp number or Instagram page as another shop, to stop impersonation.
Optional
- Usage sharing (off unless you turn it on, when you first open Korrekt or at any time in Account): which features get used, which products and shops are opened, and the result of each price check (for example "fair" or "high"). It also counts what people search for, without who searched: the product Korrekt found, or for a search it couldn't match, the words searched, with long numbers (such as phone numbers and prices), links and email addresses removed. This tells us which products to add and where we need more shops. Usage sharing never includes your phone number or your screenshots.
- The short survey and "Ask us to cover it" requests: your answers and the product you asked for.
Crash and error reports
If Korrekt crashes or hits an error, it sends us a technical report so we can fix it: what went wrong, where in the app, the app version and the type of device. On Android this uses Firebase Crashlytics. Reports don't include your phone number, and we take long numbers, email addresses and links out of error messages.
We don't use your location from GPS, your contacts or your photo library, other than a photo you pick yourself.
2. Why we're allowed to use it
- To provide what you ask for (contract): sign-in, watchlist, alerts, offers, phone checks and shop listings.
- Legitimate interests: verifying shops, keeping track records honest, preventing fraud and abuse, keeping Korrekt working, and crash and error reports.
- Your consent: usage sharing, push notifications and the survey. You can withdraw it at any time; this doesn't affect what we did before.
- Legal obligations: where the law requires us to keep or share information.
3. Who can see what
- Buyers see verified shops only: their name, area, WhatsApp number, Instagram page, photo, prices, track record and CAC status. Shops waiting for review can't be seen. A verified shop's page (its name, area, prices, track record and how Korrekt checked it) is on the open web at korrekt.ng, and search engines such as Google can show it in their results. Item price pages there show verified shops' prices, never anything about buyers.
- Shops see offers made to them (the item and amount, not who you are), "Did you buy it?" answers, and how many buyers are watching an item, rounded and never fewer than five, so no one can be picked out. Shops also see how many times each of their items was searched on Korrekt in the last week, as a total. When you message a shop on WhatsApp, the shop sees your WhatsApp number, as with any WhatsApp message.
- Our admins see shop sign-ups and CAC certificates, to review them, and can look at an offer to sort out a problem with it.
- No one else can see your watchlist, your offers or your notifications.
4. Who we share it with
We use these services to run Korrekt. They process data for us under their own terms and privacy policies:
- Google Firebase (Google LLC): hosting, sign-in, our database, server functions, usage statistics (Google Analytics for Firebase) and push notifications.
- Apple: delivers push notifications to iPhones.
- Paystack: takes payments for phone checks.
- IMEI.info: runs phone checks. It receives the IMEI only.
When you choose to message a shop, the conversation happens on WhatsApp (Meta), under WhatsApp's own privacy policy.
We share information with the police or regulators only when the law requires it. If Korrekt is ever sold or merged, your data would move with it under this policy, and we'd tell you first.
5. Where your data is stored
Our providers store data on servers outside Nigeria, for example in the United States. When we send data abroad, we rely on our providers' safeguards, such as standard contractual clauses, as the NDPA allows.
6. How long we keep it
- Your account, watchlist, offers and notifications: until you delete your account. You can also remove watches and notifications yourself at any time.
- Push tokens: until you sign out or delete your account.
- Shop details, prices and photos: while the shop is on Korrekt. Buyers see only prices confirmed in the last 7 days.
- Phone check IMEIs: deleted when the check finishes, or after a day if unpaid. Results stay with your account.
- "Did you buy it?" answers: kept as part of the shop's track record. They don't contain your name or number.
- Weekly price history: kept as one price per product and week, with no personal data.
- Searches: each one is added to that day's totals and then deleted straight away. The daily totals have no personal data.
- Crash and error reports: error totals by day; Crashlytics keeps Android reports for 90 days.
- Usage statistics and hosting records: kept by Google for a limited time under its retention settings, then deleted.
- Survey answers and "Ask us to cover it" requests: for as long as they help us decide what to add.
7. Your rights
Under the NDPA you can ask us to:
- tell you what we hold about you and give you a copy;
- correct anything that's wrong;
- delete your data;
- stop or limit how we use it, or object to it;
- send your data to you or another service in a common format.
Email privacy@korrekt.ng and tell us the phone number on your account so we can find it. We may ask you to confirm it's you. We'll reply within 30 days. If you're not happy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
8. Deleting your account
In the app or on the website, go to Account → Delete my account → Delete everything. Within a few minutes we delete your sign-in, watchlist, offers, notifications, push tokens and phone checks, and, if you run a shop, the shop with its prices, photos, CAC certificate and shop link. "Did you buy it?" answers you gave about other shops stay in their track records, without your details. You can also ask us by email.
9. Keeping it safe
Data travels encrypted (HTTPS) and is stored with Google's security. Our database rules stop anyone reading another person's watchlist, offers, notifications or a shop's private documents, apart from our admins as described in section 3. No system is perfectly safe; if a breach puts your data at risk, we'll tell you and the Nigeria Data Protection Commission as the law requires.
10. Children
Korrekt is meant for adults. If you're under 18, use it only with a parent's or guardian's permission. If we learn that we hold a child's data without that permission, we'll delete it.
11. Changes to this policy
If we change this policy, we'll update the date at the top. If a change matters, we'll also tell you in Korrekt before it takes effect.
12. Contact
Questions about your data or this policy: privacy@korrekt.ng.