Privacy policy

1. Who we are

Readi is run by Readi ("we", "us"). If you have a question about your information or want to use any of your rights below, email hello@readi.mooo.com.

We follow the Nigeria Data Protection Act 2023 and, where it applies to you, other data protection laws such as the GDPR.

2. Two kinds of people use Readi

Organisers have an account. They belong to an organisation (a chamber, church, club, team…), upload designs and share flier links. For their account and billing information, we decide how it is used.

Members open a flier link and fill in a short form, usually without an account. The organisation that shared the link decides what the form asks and what the fliers are for. For that information we act on the organisation's behalf. If you have a question about a flier made with an organisation's link, you can ask the organisation, or ask us and we will help.

3. What we collect

Your account

• Your name, email address and password. We store the password scrambled (hashed); nobody at Readi can read it.
• Your organisation's name and web address, who belongs to it and each person's role.
• When you last signed in, and whether your email address is confirmed.

Your designs

• The designs, pictures, logos and fonts your organisation uploads or makes, and every published version of them.
• Flier pictures you upload to turn into a design (both the flier and the emptied copy). If the upload never becomes a design, we delete it after 7 days.

What members type into a flier link

• Answers (a name, a date, a message…) are stored with a record of each flier made, so the organisation can see what was made and count it against its plan.
• Photos are used to draw the flier and then thrown away. We do not store them.
• The finished flier is stored only if the organisation's plan includes history, and is deleted after 90 days. Otherwise it goes straight to the person's phone and we don't keep a copy.
• Bulk runs (a spreadsheet of names plus a ZIP of photos, run by an organisation's owners or admins): the uploads and the finished ZIP are deleted after 7 days.

Payments

• Card and bank payments through Paystack happen on Paystack's pages. We never see or store card numbers. Paystack tells us whether the payment worked, the amount and a reference.
• For a bank transfer, we keep the proof of payment you upload so that we can check it.
• We keep a record of every payment (amount, reference, plan, the period paid for, the payer's email and the organisation's name), even after an organisation is deleted, because tax and accounting rules require it.

Technical information

• IP address and browser, stored with your session while you are signed in.
• Abuse protection: flier links limit how many fliers one IP address can make each minute. When a request is turned away, we count it for that day against the IP address, and delete those counts after 90 days.
• Sign-in protection: repeated wrong passwords are counted briefly against your email and IP address to slow down guessing.
• Server logs with errors, used to fix problems.

4. Why we use it

What we do	Our legal basis
Run your account, your designs and your flier links	To provide the service you signed up for (contract)
Draw fliers from members' answers and photos	On the organisation's instructions
Read an uploaded flier with Google's Gemini	Your consent, given each time you upload
Take payments and keep payment records	Contract, and the law (tax and accounting)
Send emails about your account: confirming your address, invitations, payment receipts, plan reminders	Contract
Stop abuse, spam and break-ins	Our legitimate interest in keeping the service safe

We don't send marketing emails. If we ever want to, we will ask first.

5. Who else sees it

We share information only with the companies that help us run Readi, and only what each one needs:

• Google (Gemini) reads the flier pictures you upload to make a design. Nothing else is sent to Google. Google handles that picture under its own Gemini API terms. Depending on the kind of Gemini service we use, those terms can let Google keep what was sent and use it to improve its products, including review by people. Don't upload a flier with anything on it you would not want Google to see.
• Paystack takes card and bank payments. See Paystack's privacy policy.
• Our hosting and storage providers run the servers where your information is kept.
• Our email provider delivers the emails we send you.
• Bunny Fonts serves the fonts our pages use, so your browser asks their servers for them. Bunny says it sets no cookies and doesn't log IP addresses.

We may also share information if the law requires it, to protect people from harm, or as part of selling or merging the business (we would tell you first). We never sell personal information.

Inside an organisation, owners and admins can see every flier made with its links, and the answers typed in. Other members see only their own.

6. Information outside Nigeria

Some of these providers (Google in particular) may handle information outside Nigeria. When that happens we rely on the safeguards the Nigeria Data Protection Act allows, such as the provider's contract terms.

7. How long we keep it

What	How long
Your account and your organisation's designs	Until you delete them
Photos used on a flier link	Not kept
Finished fliers (plans with history)	90 days
Record of each flier made, with the answers typed in	As long as the organisation exists
Bulk run uploads and the finished ZIP	7 days
Flier uploads that never became a design	7 days
Daily counts of turned-away requests per IP address	90 days
Payment records	As long as tax and accounting law requires, also after the organisation is deleted

When you delete your account, any organisation you own alone is deleted too, with its designs, fliers and records.

8. Cookies

We use only the cookies the site needs to work: one that keeps you signed in, one that protects forms from forgery, and a "remember me" cookie if you tick that box when signing in. No advertising or analytics cookies, so there is no cookie banner.

9. Your rights

You can ask us to:

• give you a copy of the information we hold about you;
• correct anything that is wrong (you can change your name and email yourself on your profile page);
• delete your information (you can delete your account yourself on your profile page);
• stop or limit using it, or send it to you in a format another service can read;
• withdraw your consent, for example to Gemini reading your uploads. This doesn't undo a reading that already happened.

Email hello@readi.mooo.com. We will answer within 30 days. If information was given through an organisation's flier link, we may pass your request to that organisation, since it decides what happens with it.

If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission, or to the data protection authority where you live.

10. Keeping it safe

Pages are served over an encrypted connection, passwords are hashed, each organisation's information is kept apart from every other organisation's, and only the few people who run Readi can see across organisations, for support and safety. Every change they make there is logged. No system is perfect; if a breach puts your information at risk, we will tell you and the regulator as the law requires.

11. Children

Accounts are for adults (18 and over). Organisations sometimes make fliers about children, such as a child's birthday. An organisation that does so is responsible for having a parent's or guardian's permission to use the child's name and photo.

12. Changes to this policy

If we change this policy, we will update the date at the top. If a change matters, for example a new kind of information or a new company that sees it, we will email account holders before it takes effect.