Privacy Policy

When you use Baalot, we collect only what is necessary to run a secure election. This includes: • Account information — name, email address, phone number, and a member or student ID where required, provided during registration. • Organisation data — the institution, organisation, or community you belong to (and details such as faculty, department, or group), used to assign you to the correct election. • Authentication data — we use Firebase Authentication (Google) to manage sign-in. We do not store passwords. • ID card images — when you scan an ID for membership verification, the image is processed for text extraction only and is not stored after processing. • Location data — optional approximate location shared only when you enable the live voter map. We do not track your location in the background. • Usage logs — app interactions and error reports used to improve the platform (via Sentry and Firebase Analytics). We do not collect payment card details. We do not build advertising profiles. We do not sell data.

We use the information we collect for one purpose: running trustworthy elections. Specifically: • To create and manage your account. • To verify your identity and enrol you in the elections you are eligible for. • To display real-time election results and voter maps. • To send election notifications you have opted into. • To detect fraud and maintain election integrity. • To diagnose technical issues and improve platform reliability. • To comply with legal obligations and respond to valid regulatory requests. We will never use your information for marketing purposes without explicit opt-in consent.

Baalot is built on infrastructure from the following third-party providers: • Firebase (Google) — authentication, Firestore database, and analytics. • Vercel — API hosting and serverless functions. No personal data is logged beyond standard access logs. • Sentry — error reporting. Error logs contain no personally identifiable information. • Prembly IdentityPass — ID card OCR processing for membership verification. Images are not retained after text extraction. • Google Sign-In — optional social login using your Google account (email and profile only). Each provider operates under standard data protection agreements.

You have the following rights over your personal data: • Access — request a copy of all data we hold about you. • Rectification — request correction of inaccurate data. • Erasure — request deletion of your account and associated personal data within 30 days. • Portability — receive your data in a machine-readable format. • Objection — object to processing based on legitimate interests. • Restriction — request we limit how we process your data while a complaint is resolved. To exercise any of these rights, email us at adoledaniel111@gmail.com. We will respond within 30 days.

We retain personal data only as long as necessary: • Account data — retained while your account is active, then deleted within 30 days of a deletion request. • Voter identity records — retained for the duration of the election plus 90 days for dispute resolution, then deleted. • Election audit logs — retained for 7 years to comply with electoral record-keeping standards. • Aggregate election results — retained indefinitely as anonymised public records.

Baalot is intended for voters aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, please contact us and we will delete the account promptly.

If you have any questions about this Privacy Policy or how we handle your data, please contact: Developer: Adole Daniel Email: adoledaniel111@gmail.com Website: https://baalot.site If you are unhappy with our response, you have the right to lodge a complaint with the Nigeria Data Protection Bureau (NDPB) or your local supervisory authority. This policy was last updated: June 19, 2026.