Tippified Privacy Policy

Effective Date: July 2026

Welcome to Tippified, a creator tipping platform owned and operated by Grundex Limited.

At Tippified, protecting your personal information is one of our highest priorities. We are committed to handling your personal data responsibly, transparently and securely in accordance with the Nigeria Data Protection Act (NDPA) 2023 and all other applicable laws and regulations.

This Privacy Policy explains how we collect, use, disclose, protect, retain and process your personal information whenever you use Tippifieds website, creator dashboard, fan tipping services, wallets and other related products.

By accessing or using Tippified, you acknowledge that you have read and understood this Privacy Policy.

Tippified is owned by:

Grundex Limited

No. 15 Lawrence Egbor Close,
Iyana Isashi,
Ojo,
Lagos State,
Nigeria.

Throughout this Privacy Policy, Tippified, we, our or us refers to Grundex Limited.

Tippified is intended solely for individuals who are at least 18 years old.

We do not knowingly permit minors to register creator accounts or submit personal information through our platform.

Information collected from Creators

• Full name
• Email address
• Date of birth
• Country of residence
• Username
• Profile information
• Bank name
• Bank account number
• Verified account holder name

Information collected from Fans

• Name
• Email address
• Wallet information (where applicable)
• Gift purchases
• Tipping history

Automatically collected information

• Device type
• Browser type
• Operating system
• IP address
• Login timestamps
• Security logs

We currently do not collect biometric data, selfies, fingerprints or facial recognition information.

To protect creators against identity fraud, Tippified performs Bank Verification Number (BVN) verification during creator onboarding.

BVN verification is performed by our licensed verification provider:

Provn (CloudEye)

Tippified does not store creators BVNs.

The BVN is transmitted securely to our verification provider solely for identity verification. Once verification is completed, only the verified account holders full name returned by the provider is retained in our database.

We process personal information to:

• Create user accounts.
• Authenticate users securely.
• Verify creator identities.
• Process creator payouts.
• Process fan tips.
• Provide wallet services.
• Send OTP verification emails.
• Respond to customer support requests.
• Prevent fraud and financial crimes.
• Comply with Nigerian laws and regulatory obligations.

Under the Nigeria Data Protection Act (NDPA), Tippified processes personal information based on one or more of the following lawful grounds:

• Your consent.
• Performance of a contract.
• Compliance with legal obligations.
• Legitimate business interests.
• Fraud prevention and platform security.

Tippified is a creator tipping platform. We are not a payment processor, payment gateway or licensed financial institution.

All payments made by fans are securely processed through Paystack, our licensed payment processing partner.

When a fan submits a payment, payment card details and banking information are transmitted directly to Paystack through secure, encrypted channels.

Tippified never stores debit card numbers, CVV numbers or complete payment credentials.

Creator payouts are settled into a dedicated creator settlement account maintained with our settlement banking partner.

Funds belonging to creators are segregated from Grundex Limiteds operational funds.

Grundex Limited cannot arbitrarily withdraw creators funds from the settlement account.

Platform revenue (our service fee) is automatically separated during settlement by our payment processor before settlement occurs.

We never sell personal information.

We only disclose information where necessary to operate Tippified or where required by law.

We may share information with:

• Paystack (payment processing)
• FCMB (creator settlement services)
• Provn (CloudEye) for BVN verification
• Resend for transactional email delivery
• Nigerian regulators where legally required
• Law enforcement agencies where required by law

Tippified maintains internal fraud detection procedures designed to protect creators, fans and the financial ecosystem.

We continuously monitor platform activity for unusual behaviour, including but not limited to:

• Rapid repeated tipping activity.
• Abnormal wallet behaviour.
• Suspicious payment patterns.
• Potential identity fraud.
• Money laundering indicators.

Where suspicious activity is detected, Tippified reserves the right to:

• Suspend creator or fan accounts.
• Delay payouts.
• Request additional verification.
• Report suspicious transactions to the appropriate authorities.

Our payment processor, Paystack, also performs its own independent risk assessment and regulatory monitoring of payment transactions.

We implement administrative, technical and organisational safeguards to protect personal information against unauthorised access, disclosure, alteration or destruction.

Security measures include:

• Encrypted HTTPS connections.
• Django Authentication.
• Password hashing.
• Secure database authentication.
• Role-based access control.
• Audit logging.
• Continuous server monitoring.

Although we employ commercially reasonable safeguards, no online system can be guaranteed to be completely secure.

Tippified is hosted using Render.

Our application infrastructure includes:

• Render cloud hosting.
• Managed PostgreSQL database.
• Encrypted HTTPS communication.

Access to production infrastructure is restricted to authorised personnel only.

Tippified uses Resend to deliver transactional emails.

Examples include:

• Account verification emails.
• Withdrawal verification codes.
• Password reset emails.
• Security notifications.

We do not currently send marketing newsletters.

We retain personal information only for as long as it is necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable laws and regulations.

Creator financial records, payout records, transaction history and related accounting information may be retained for up to seven (7) years after a creator closes or disables their account, in accordance with applicable financial and tax obligations.

Where retention is no longer necessary, personal information will be securely deleted, anonymised or otherwise disposed of in accordance with our internal data retention procedures.

Subject to the Nigeria Data Protection Act (NDPA), you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information where legally permitted.
• Object to certain processing activities.
• Request restriction of processing.
• Withdraw consent where processing is based on consent.
• Request information regarding how your data is processed.

Some requests may be declined where we are legally required to retain certain records, particularly financial records.

Tippified may use essential cookies and similar technologies required for authentication, session management and platform security.

We do not currently use advertising cookies or behavioural tracking technologies.

Some of our service providers may process information outside Nigeria.

Where international transfers occur, we take reasonable steps to ensure that appropriate contractual, organisational and technical safeguards are implemented to protect personal information.

Such transfers are carried out only where necessary for the operation of the platform.

Creators may request closure of their accounts at any time.

Closing an account does not automatically require immediate deletion of financial records, transaction history or information we are legally required to retain.

Following expiry of applicable legal retention periods, eligible personal information will be securely deleted or anonymised.

We may revise this Privacy Policy from time to time to reflect changes in our services, legal obligations or security practices.

Where significant changes are made, we will update the last updated date shown at the top of this page.

Questions, requests or complaints relating to this Privacy Policy may be directed to:

Grundex Limited

No. 15 Lawrence Egbor Close

Iyana Isashi

Ojo

Lagos State

Nigeria

Email:support@tippified.com