1. Who We Are & What This Covers
FlumoxIQ ("we", "us") operates the FlumoxIQ platform and installable web app, including quizzes, Naija ARENA, the rewards store and partner vouchers, wallet and deposits, Community Chat, Direct Messages, FlumoxIQ Music and Artist Distribution, and AI support. This policy explains what personal data we collect, why, who receives it, how long we keep it, and your rights. It applies together with our Terms and Conditions, and we handle personal data in line with the Nigeria Data Protection Act 2023 and other applicable law. By using FlumoxIQ you agree to this policy.
2. Information We Collect
- Account data: Username, email address, hashed password, and optional two-factor authentication settings. If you create a Transaction PIN it is stored only as a one-way hash, and one-time codes are also stored only as hashes, so neither can be read or recovered by us.
- Profile data: Profile picture, bio (up to 90 characters), and optional details you choose to add.
- Activity and balances: Quiz results, scores, streaks, XP, coins, reward points, badges and achievements, ranks, leaderboard activity, referral links and referral rewards, and coupon codes you use.
- Wallet and payment data: Deposit amounts, transaction references, status, time, payment method, bank-transfer receipts you upload, and transaction history, including entry fees, prizes, refunds, gifts and purchases. We do not receive or store your full card number, card PIN, CVV or online banking password. Those are handled only by the payment provider.
- Naija ARENA data: Queue entries and times, matches you joined, your seat, answers, correct counts, placements, prizes, refunds when you leave before a match starts, and a short-lived presence signal while you are in or watching a match. Your username, profile picture, score and result are visible to the other players, to watchers and in rankings.
- Voice data: If you use Arena voice, your browser asks for microphone permission, and your live audio is transmitted to the other participants. We also handle technical connection data (such as connection signals and network addresses) needed to set up the call. FlumoxIQ does not set out to record or keep Arena voice calls, and you must not record them either.
- Reward and shipping data: If you redeem a physical reward: full name, delivery address and WhatsApp/phone number, shared only with our delivery partners (GIG Logistics or Kwik) for that delivery.
- Partner voucher data: The voucher codes generated when you claim a partner voucher, the claim and redemption times, the voucher value and its status. Partner staff see only what they need to redeem the code and settle with us.
- Community and messaging data: Chat messages, voice notes, images, reactions, @mentions, coin gifts, reports you make or that are made about you, FlumoxShield violation counts and lock times, and Direct Messages (including who you message, blocks, and the unlock purchases).
- Music data: Songs you play, like, save or report; artist profile details (name, stage name, email, phone, bio); uploaded audio, artwork and lyrics files; submission fee payments and receipts; and artist status, bans and credits.
- Support data: Messages you send to AI Support and to human agents, and the replies, with the time and your username and rank title.
- Advert submissions: If you use Run Advert, the title, description, image and link you submit, the duration and coins paid, and the review result. Once approved, your advert is shown to other users.
- Advertising data: Which ads were shown to you and which rewarded ads you completed (for reward limits and fraud checks). The ad networks themselves may collect their own data (see Section 8).
- Technical and security data: IP address, device and browser type, session data, failed login attempts, quiz attempt logs and rate-limiting counters, collected automatically for security and fraud prevention, and files cached on your device by the installed web app.
3. How & Why We Use Your Information
- To run your account and every feature you use, and to keep your balances, rewards and transactions accurate
- To take payments and credit deposits (we send the payment provider your email, the amount and a reference, then verify the result directly with them)
- To match players, run Arena matches, apply prizes and refunds, and publish results and rankings
- To deliver physical rewards, and to issue and redeem partner vouchers and settle with partners
- To enforce our Terms, FlumoxShield and community standards, handle reports, and review chats, Direct Messages and Arena voice reports when abuse, fraud, scams or safety issues are suspected
- To review artist submissions and payments, and to handle copyright complaints
- To provide support, including through AI, and to improve the platform
- To send service emails such as one-time codes, security alerts and important notices
- To detect, investigate and prevent fraud, multiple accounts, chargebacks, money laundering, bots, ad fraud and other abuse
- To meet legal, tax, accounting and regulatory obligations, and to respond to lawful requests
Our lawful bases are performing our agreement with you, our legitimate interests in running and securing the platform and preventing fraud, compliance with legal obligations, and your consent where we ask for it (for example microphone access).
4. Community Chat, Direct Messages & Voice
Community Chat messages and voice notes are stored on our servers and may be viewed by our moderation team. Chat messages are automatically deleted after 35 days (default), and voice notes are subject to automatic purging, except where kept for moderation or legal reasons. FlumoxShield automatically scans chat content for contact details, external links and restricted words, and keeps your violation count and lock times. Direct Messages are private conversations intended for the people taking part in them. Message data is stored and processed to provide the messaging service and apply the safeguards described in this policy. Voice calls in Naija ARENA are live, and other players and watchers can hear what you say if your microphone is on. If a direct device-to-device connection is used for voice, the other participants' devices may be able to see your network (IP) address. No technical measure against copying, recording or screenshots is absolute.
5. Music & Artist Data
Listener play history, likes and favourites are stored to personalise your experience and power trending lists. Artist profiles, uploaded audio, artwork, lyrics files and payment records are kept while the content is on the platform and afterwards as needed for audit, accounting and copyright or dispute handling. Rejected submissions may be kept for a limited time for the same purposes. Your artist name and song details are public once a song is published.
6. AI Support & AI-Prepared Questions
Our support assistant runs on a third-party AI service. To answer you, your recent support messages and limited non-sensitive context (your username and rank title) are sent to that service. We instruct the assistant never to handle passwords or balances, but you should never type passwords, PINs, one-time codes or card details into support chat. Support chats are stored and may be reviewed by our team, and a human agent can take over. Quiz and Arena questions may be generated with AI services, using subject categories and instructions that do not include your personal data. AI replies can be inaccurate and are not decisions about you that have legal effect.
7. Payments & Other Third-Party Services
We use trusted service providers to operate FlumoxIQ. They receive only the data needed for their role and process it under their own privacy policies:
- Payment providers: Flutterwave, Paystack, Monnify, BACHS and Credo Central process online card, bank and transfer payments. They receive your email, payment amount and reference, and whatever you enter on their secure pages. Bank transfers pass through your bank and ours.
- Voice providers: Real-time audio for Naija ARENA may run through LiveKit or Agora, or a direct (peer-to-peer) connection with relay servers.
- AI providers: For support answers and question preparation (including Groq and, where enabled, Google Gemini).
- Delivery partners: GIG Logistics and Kwik receive shipping details for your redemption only. Voucher partners (such as Krislaw) receive voucher codes when you present them.
- Email delivery services send our one-time codes and notices, and hosting, content-delivery and security services keep the platform running. Our lyrics-sync tool recommendation (QuickLRC) is an independent website we do not control.
Some of these providers are located outside Nigeria, so your data may be transferred and processed in other countries. Where that happens we take reasonable steps to ensure it stays protected. We do not sell your personal data to anyone for advertising or commercial purposes.
8. Advertising
FlumoxIQ may display ads and rewarded ads from third-party networks (such as Adsterra, Google AdSense and Start.io). These networks can set their own cookies or identifiers and collect device, browser, IP and ad interaction data, under their own policies, to show ads and prevent ad fraud. We do not give them your name, email or wallet details.
9. Security
We use security measures including hashed passwords and PINs, encryption of stored API keys and secrets, CSRF protection, input and output sanitising, IP-based rate limiting, signed or server-verified payment confirmation, session management and access controls. Payment confirmations are verified directly with the provider before any credit is applied. No system is completely secure, so you must also protect your own credentials. If a personal data breach occurs that is likely to harm you, we will notify you and the regulator as required by law.
10. Cookies, Sessions & Device Storage
We use server-side sessions and first-party cookies only to keep you logged in and to protect against cross-site request forgery. The installed web app stores files on your device so pages load fast and some content works offline, and a service worker manages that cache. Third-party ad networks may use their own cookies (Section 8). We do not use behavioural advertising cookies of our own.
11. Data Retention
- Account and profile data: kept while your account is active.
- Transactions, payments, Arena results, vouchers and settlement records: kept for as long as needed for accounting, audit, dispute handling, fraud prevention and legal requirements, which can continue after your account is deleted.
- Community chat: deleted automatically after 35 days (default) unless held for moderation or legal reasons. Voice notes are purged on a schedule.
- Direct Messages, support chats, moderation and fraud records: kept for as long as needed for safety, dispute resolution and legal purposes.
- Security logs (failed logins, rate limits, attempts): kept for a limited period for security.
- Backups may keep deleted data for a short time before it is overwritten.
12. Your Rights
Subject to the law, you can:
- Ask for access to the personal data we hold about you, and for a copy
- Correct inaccurate information, mostly through your profile settings
- Delete your account and personal data instantly from Profile > Danger Zone (this is permanent, clears your balances and cannot be undone)
- Object to, or ask us to restrict, certain processing, and withdraw consent you have given (for example, by turning off microphone permission in your browser)
- Ask for your data in a portable format where it applies
- Complain to the Nigeria Data Protection Commission if you believe your data has been mishandled
Some data cannot be deleted on request where we must keep it for legal, accounting, security or fraud-prevention reasons, or where it is part of other users' shared history in anonymised form (such as past chat messages or Arena results). To use any of these rights, contact us through the Support section of the platform. We may verify your identity first.
13. Children's Privacy
FlumoxIQ is not intended for children under 13, and we do not knowingly collect their data. If we learn that a user is under 13, we will suspend the account and may delete the data. Users aged 13 to 17 should use FlumoxIQ with a parent or guardian's knowledge, and paid features are intended for adults (see our Terms). Parents or guardians can contact Support to ask about or delete a minor's data.
14. Changes to This Policy
We may update this policy as we add features, providers or payment methods, or as the law changes. Significant changes will be communicated through the platform, and the new version applies from the date shown. Continued use of FlumoxIQ after an update means you accept the revised policy.