Legal

Privacy Policy

Last updated June 23, 2026

This policy should be reviewed by a qualified lawyer before the platform processes real user data in production.

1. Who this policy covers

Narriva and Kekere are run on the same underlying platform and share one account system — if you have an account with one, the data practices described here apply to both. This policy explains what we collect, why, and what rights you have over it.

2. Information we collect

We collect the following categories of information:

  • Account information: your name, email address, and password (stored as a salted hash, never in plain text).
  • Payment information: when you buy a book, top up a wallet, or pay for a publishing service, our payment processor (Paystack) handles your card details directly — we never see or store your full card number. We retain the transaction reference and amount for our own records.
  • Reading and purchase activity: which books you've bought, your reading progress within them, and your submission history if you're an author.
  • Technical data: IP address, browser type, and basic usage analytics, collected automatically when you use the site.

3. How we use your information

We use the information above to:

  • Create and manage your account, and authenticate you when you log in.
  • Process payments and deliver the content or service you've paid for.
  • Track reading/writing progress so the app can pick up where you left off.
  • Send you transactional emails (purchase confirmations, submission updates, account notices).
  • Send you marketing emails about new releases, competitions, or features — only if you've opted in, and you can unsubscribe at any time.
  • Detect and prevent fraud, abuse, and security incidents.

4. Who we share your information with

We don't sell your personal data. We share limited information with the following third-party service providers, strictly to operate the platform:

  • Paystack — processes payments for book purchases, wallet top-ups, and publishing services. Paystack receives your payment details directly; we receive only a transaction reference and status.
  • Resend — sends transactional and marketing emails on our behalf. Resend receives your email address and the content of the email being sent.
  • Cloudflare R2 — stores ebook content, submitted manuscripts, and other file uploads. Files are stored privately and are not publicly accessible.

We may also disclose information if required by law, or to protect the rights, property, or safety of Narriva, our users, or the public.

5. Data retention

We retain your account data for as long as your account is active. Financial records (orders, transactions, submission records) are retained for at least 7 years to meet legal and tax obligations, even after an account is deleted. Other personal data is deleted within 30 days of a confirmed deletion request — see your account deletion rights below.

6. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data (most of this you can edit directly in your profile).
  • Request deletion of your account and personal data — you can start this from your account settings.
  • Withdraw consent to marketing emails at any time.

To request deletion, go to Account settings.

7. Cookies and tracking

We use essential cookies to keep you logged in and to remember basic preferences (like your reading settings). We use lightweight, privacy-respecting analytics to understand how the site is used in aggregate — this does not involve cross-site tracking or selling data to advertisers.

8. Contact

Questions about this policy or your data can be sent to our support address listed on the site.