Pavictek Digital Limited ("Pavictek", "we", "us") builds and operates Daabbo. This policy explains what personal data Daabbo collects from students and campus security staff, how it is used, who can see it, and the choices you have. It covers the Daabbo mobile apps, the web dashboards, and this website.
Daabbo was previously called Aegixo. It is the same service run by the same company, and nothing about who holds your data or how it is used changed with the name. Your account, your data and your subscription carry over.
- Your location is only ever tied to a specific alert or Walk with Me session. We do not keep a general history of where you have been.
- If you turn it on, Daabbo records a single voice clip of about 15 seconds when you trigger an SOS and sends it with your alert, so responders can hear what is happening. It is off until you agree, and it records at no other time.
- Your campus security team, and Pavictek's response staff when they assist, can see your details during an alert you trigger. Other campuses cannot.
- We do not sell your data, and we do not use it for advertising.
- You can ask us to access, correct or delete your data at any time. See Data retention & your rights.
1. Who is responsible for your data
Pavictek Digital Limited, a company operating in Nigeria, is the data controller for the personal data described here. You can reach us at hello@daabbo.com.
2. What we collect
| Data | What it includes | When we collect it |
|---|---|---|
| Account details | Full name, username, phone number (verified by an SMS code), email address, your institution, and optionally your matric number. Your password is stored only as a one-way hash. | When you register. |
| Profile and medical details (optional) | Department, level, blood type, medical conditions and allergies. These are optional and you can skip them. Health information is sensitive personal data and we process it only on the basis of your consent. | If you choose to add them. |
| Emergency contacts | The name and phone number of each contact you add. If you pick a contact from your phone we receive only the one you select, not your address book. | When you add a contact. |
| Location | Your precise location when you send an SOS or silent alarm (and while that alert is active), your latest position during a Walk with Me session, and your current position when you look up nearby emergency services or choose to attach a location to an incident report. | Only for those actions. |
| Voice clip (optional) | About 15 seconds of audio from your phone's microphone, recorded once when you trigger an SOS or silent alarm and attached to that alert. It may include other people's voices and background sound. It is off until you agree in the app, and you can turn it off again in Settings. Your phone shows its microphone indicator while it records. | Only when you trigger an alert, and only if you have turned it on. |
| Alert records | The type, time and status of each alert, its location trail, which staff member handled it, and their resolution notes. | When you trigger an alert. |
| Incident reports | Category, description, optional location and optional photo or video evidence. See "Anonymous incident reports" below. | When you submit a report. |
| Walk with Me details | Companion usernames, meetup point, destination, and each participant's latest position while the walk runs. | When you start or join a walk. |
| Payment records | The amount, status, reference and dates of your subscription payment. Card and bank details are handled by Nomba and never reach us. | When you subscribe. |
| Notifications | A device token used to deliver push notifications, and the history of notifications shown in your inbox. | When you allow notifications. |
| Technical and security logs | IP address, device and app version, request timestamps, and an audit trail of sign-ins and staff actions. | Automatically, when you use the service. |
Anonymous incident reports
Reports are designed to be anonymous to campus security: the security dashboard shows the report but never who sent it. The report is still linked to your account in our database so that you can follow its status and so that we can limit abuse. That link is not shown to campus security and is used only to prevent abuse or to comply with the law.
3. How we use your data and why
| Purpose | Basis under the Nigeria Data Protection Act 2023 |
|---|---|
| Running SOS, silent alarm and Walk with Me, and connecting you to campus security in real time | Performance of our contract with you, and protecting your vital interests in an emergency |
| Showing medical details to responders during an alert | Your consent (you choose whether to add them) |
| Recording and sending the short SOS voice clip | Your consent (you choose whether to turn it on, and you can turn it off in Settings), and protecting your vital interests in an emergency |
| Receiving and reviewing incident reports, including photo or video evidence | Your consent when you choose to submit a report, and our legitimate interest in helping your institution keep its campus safe |
| Offering Pavictek Academy courses and issuing certificates | Your consent, which you give when you choose to enrol in or pay for a course |
| Showing emergency services near you | Performance of our contract with you |
| Verifying your phone number and keeping your account secure | Performance of our contract and our legitimate interest in security |
| Processing your subscription and confirming access | Performance of our contract; legal obligations for financial records |
| Sending safety and account notifications | Performance of our contract |
| Investigating misuse such as repeated false alarms, and keeping an audit trail | Our legitimate interest in keeping the platform safe and accountable |
We do not make decisions about you using automated profiling, and we do not use your data for advertising.
4. Who can see your data
| Who | What they can see |
|---|---|
| Your campus security team (staff of your own institution only) | For alerts you trigger: your name, phone number, live location and trail, the voice clip if you recorded one, medical details, emergency contacts, and your alert history for that incident. They also see incident reports from their own campus, without the reporter's identity. |
| Pavictek response staff | Pavictek's own super admins and dispatchers can open and take over alerts from any partner campus in order to assist, and see the same alert information. Their access is limited by role and every view and action is recorded in an audit log. |
| Walk with Me companions | Your name, username and live position, but only after they accept your invitation, and only while the walk is running. |
| Your emergency contacts | They are contacted only by campus security during an active alert. If your phone has no signal when you send an SOS, the app opens a pre-written text message to your contacts that you send yourself. |
| Service providers | See the next section. |
| Authorities | We may disclose data where the law requires it or where it is necessary to protect someone's life. |
Security staff at one institution cannot see another institution's students or alerts. We enforce that on the server, in the live alert channels, and in automated tests. We do not sell your personal data.
5. Service providers
| Provider | What it does | Data it receives |
|---|---|---|
| Nomba | Takes subscription payments | Payment details you enter at checkout; shares only a reference and status with us |
| Google Firebase | Verifies phone numbers by SMS and delivers push notifications | Your phone number (for the code) and your device token |
| OpenStreetMap (Overpass API and map tiles) | Finds nearby police, hospitals, fire and ambulance services, and draws maps in the dashboards | For maps, the area being displayed and your IP address. For nearby services, our servers ask for a wider area of about 2 km around the position (for an alert on a dashboard, or when you open Nearby emergency services in the app), never the exact position or your IP address |
| Cloudflare | Stores your SOS voice clip and any incident photo or video in private storage (Western Europe), and passes our web traffic through its network | Those files and the requests you make to our service. Files are never public and are only opened by authorised staff through our service |
| Pavictek Academy | Runs the courses, lessons, quizzes and certificates offered in the app | When you enrol in a course: your full name (printed on your certificate) and an internal code that identifies your account to the Academy. When you pay for a course: also your email address and phone number, so the Academy can send your receipt. Your progress, quiz results and payment record are then kept there, together with what you choose to write in a live class chat (shown to the others in the class with your name) and the assignments you hand in. Payment is made on the Academy's own secure payment page, so we never see your card or bank details. We do not send your school or location |
| Our hosting provider | Runs our servers and database | All data described in this policy, stored on our behalf |
These providers act under their own terms and policies. Some, such as Google and Cloudflare, process data outside Nigeria. Where personal data is transferred abroad we rely on the safeguards the Nigeria Data Protection Act allows.
6. How long we keep it
Retention differs by type of data. The full schedule is on the Data retention & your rights page. In brief: location trails and voice clips are deleted 30 days after an alert closes, and your account information is kept while your account is active.
7. Your rights
Under the Nigeria Data Protection Act 2023 you can ask to access the personal data we hold about you, have inaccurate data corrected, have your data deleted, restrict or object to certain processing, and withdraw consent where we rely on it. You can delete your account yourself in the app (Settings, then Delete account). If you enrolled in a Pavictek Academy course, your name, progress and any certificates are held by the Academy, and deleting your Daabbo account does not remove them; a certificate stays verifiable by its number. Email us and we will pass your request to the Academy. For anything else, email hello@daabbo.com with the subject "Data request". You also have the right to complain to the Nigeria Data Protection Commission (NDPC). Details of how requests work are on the Data retention & your rights page.
8. Who Daabbo is for
Daabbo is built for currently enrolled tertiary students. It is not directed at children. If you believe someone under the age of 18 has registered without appropriate authority, tell us and we will look into it.
9. Security
We protect your data with encrypted connections, hashed passwords, per-campus access controls, role-based staff permissions and an audit trail. No system is completely immune to risk. See our Security page for details.
10. Cookies
This website sets no cookies. Our Cookie Policy explains the browser storage used by the web dashboard.
11. Changes to this policy
We may update this policy as Daabbo changes. We will update the "Last updated" date above, and for material changes we will also tell you in the app or by another reasonable means.
12. Contact
Questions about this policy or your data: hello@daabbo.com or our contact page.