Privacy Policy

Effective 14 August 2026. This policy is written to comply with the Nigeria Data Protection Act 2023 (NDPA).

Tempo is a platform that helps people in Lagos find and book football pitches and join games. This policy explains what personal data we collect, why we collect it, what we do with it, and the rights you have over it. We've tried to write it in plain language rather than legal fog.

1. Who we are

Tempo is the data controller for the personal data described here. You can reach us at privacy@tempo.ng for any question about your data, or to exercise any of the rights in section 7.

2. What we collect

We do not store your card details. Card payments are handled entirely by our payment processor. Tempo never sees your full card number, CVV or bank credentials.

3. What is public

Some information is visible to other users by design, because a marketplace for team sport only works if people can see who they're playing with:

• Your name, handle, profile photo and area
• Your position, preferred foot and bio, if you fill them in
• Your games played, punctuality score, streak, traits and peer rating
• Which upcoming games you have joined

Your email address, phone number, payment records and exact location are never shown to other users.

4. Location data

When you tap “Near me”, your browser asks your permission and returns approximate coordinates. We use them once, in your browser session, to sort pitches by distance. We do not write them to our database, we do not build a location history, and declining costs you nothing except distance sorting.

5. Who we share data with

• Venues — when you book a pitch, that venue receives your name and booking reference so they can let you in.
• Hosts — when you join a game, the host sees your public profile.
• Payment processor — to take payment and issue refunds.
• Infrastructure providers — hosting and database providers acting under contract as data processors.

We do not sell your personal data. We do not share it with advertisers. If any of our processors store data outside Nigeria, we ensure an adequate level of protection as required by the NDPA.

6. How long we keep it

• Account and profile data — until you delete your account
• Booking and payment records — 6 years, to meet accounting obligations
• Ratings and attendance — anonymised when you delete your account
• Waitlist entries — until we launch in your area, or you ask us to remove them

7. Your rights

Under the NDPA you have the right to:

• Ask what personal data we hold about you, and get a copy
• Correct anything inaccurate
• Delete your account and the data attached to it
• Object to processing based on legitimate interest
• Withdraw consent (for your phone number or photo) at any time
• Receive your data in a portable format
• Lodge a complaint with the Nigeria Data Protection Commission if you think we've got it wrong

Email privacy@tempo.ng and we will respond within 30 days.

8. Security

Passwords are hashed, never stored in readable form. Data is encrypted in transit. Access to the production database is restricted, and every table enforces row-level security so one user's data cannot be read by another even if application code has a bug. If a breach occurs that risks your rights, we will notify the Commission within 72 hours and tell you directly.

9. Children

Tempo is not intended for anyone under 18. If you are under 18 and want to play, a parent or guardian must create and manage the account. If we learn we hold data about a child without consent, we delete it.

10. Changes

If we change this policy materially, we will email registered users at least 14 days before it takes effect. The date at the top always reflects the current version.