D8 uses information to run accounts, listings, nearby search, conversations, property requests, leases, payments, receipts, support, disputes and platform security. We do not use an advertising SDK or sell personal information for third-party advertising. Some transaction and safety records remain after account deletion because changing a profile must not rewrite a receipt, signed lease or dispute history.
1. Who is responsible
D8 LTD is the company responsible for D8 and is the data controller for the processing described in this notice, unless another organisation determines its own purposes for processing, such as a payment provider.
Privacy enquiries and requests may be sent to privacy@directhousing.app. Do not email passwords, one-time codes, full card details or other unnecessary sensitive information.
2. Where this notice applies
This notice applies when you use the D8 app or website, contact support, list or seek property, make a rent transaction, respond to a sale advert or use another D8 service that links to it.
Banks, payment providers, sign-in providers, app stores, map apps and other services have their own privacy notices.
3. Information we use
Account and profile
Name, email address, email-verification state, phone number, account type, profile and cover photographs, biography, account settings, legal-name confirmations, name-change history and authentication identifiers. If you choose a third-party sign-in option, we receive the account details that provider makes available for authentication.
Property listings
Property title, description, category, address, state and area, coordinates, photographs, price, fixed charges, availability, unit details, lease terms, authority information you submit, and listing status. Listing information is intended to be visible to other users.
New profile and property photos are processed to remove embedded camera details, including GPS metadata, before they are published. This does not hide anything visible in the photo or remove the location you add to a listing.
Premium subscriptions
Premium purchase is not currently enabled. If it becomes available, we may receive subscription entitlement, product, store, environment, renewal status, current-period end, transaction reference and subscription-event information from the app store and our subscription infrastructure. D8 would not receive your full app-store payment-card details.
Tour messages are checked for explicit insults, threats and hateful language before they are sent. These checks may miss harmful messages; you can still report a user.
Location and maps
With your permission, D8 uses your current location to show nearby listings and calculate distance. D8 does not save this location to your profile, keep a history of it or use background location. Other users cannot see it.
A property location is different. An address or coordinate chosen for a listing is saved with that listing and may appear on its map. Google Maps provides address and map features and handles information under its own Privacy Policy.
Requests, agreements and records
Saved and toured homes, tours, booking-specific tour-code verification records, code version, issue and expiry times, failed-attempt counts, lock and completion status, rent requests, sale enquiries, acceptances, cancellations, notices, renewals, current and future rent, charges, duration and lease terms, lease versions, drawn signatures, confirmed names, consent records, timestamps, audit events, property and unit snapshots, transaction status, receipts and related identifiers. Protected records are not rewritten by later profile or listing changes.
Rent payments and landlord payment setup
Rent amount, listed fees, D8 charge, transaction and payment references, generated transfer-account details, payment status, timestamps, provider responses and receipt information. For landlords, we may process bank name, bank code, account number, account name and payment-provider subaccount identifiers, and compare the names in the bank record with the legal profile name. D8 does not collect property purchase money.
Communications, support and safety
Chat messages, voice notes, attachments, contact history, FAQ feedback, property-deletion feedback, tour-safety acknowledgements and reminder preferences, reports, disputes, evidence, support tickets, reviews, moderation decisions and enforcement records. Messages are available to their participants. Authorised D8 personnel may access relevant content for support, safety, dispute review, legal compliance or enforcement.
Device, session and notification information
A device-generated identifier, device name or model, operating system, session timestamps, sign-in activity, IP address where available, password-security attempt and lock records, security-email status, push-notification token, notification preferences and delivery status. This supports active-session controls, security and notifications. Push delivery records include retry times, provider ticket identifiers and delivery or error status. A provider acceptance does not establish that you saw or heard an alert. Tour codes are not included in notifications.
Recommendation activity and saved searches
Privacy-conscious events such as a listing impression, open, save, share, gallery, map or lease view, tour request or rent request; the property involved; feed type; position; category; selected filters; time; and, when signed in, an account identifier. Premium landlords can see aggregate activity for their own active listings. These stats exclude guest activity and the landlord's own visits and do not show who viewed a listing. When Personalise from searches is on, D8 remembers preferences such as property type, location, budget and bedrooms, along with how often and how recently you use them. This helps us recommend similar homes. We do not save your exact search words, precise device location or device identifier with these preferences.
Website information and suggestions
Our hosting provider may process normal request and security logs, such as IP address, browser type, requested page, time and diagnostic information. If you use the suggestion box on the What’s New page, we process your suggestion, the optional email address you provide and a keyed, pseudonymous value derived from your network address for abuse prevention and rate limiting. We do not store the raw network address in the suggestion record. Suggestions are available to authorised D8 administrators and are used to review feedback, improve the service and, if you supplied an email address, contact you about the suggestion. This website does not intentionally set advertising cookies or load an advertising tracker.
4. Why we use information
| Purpose | Typical information | Legal basis |
|---|---|---|
| Create and secure an account | Identity, contact, authentication, device and session data | Contract; legitimate interests in security |
| Publish and find property | Listing, profile, property coordinates, filters and current location | Contract; consent where device permission is required; legitimate interests |
| Enable messages, requests, tours and agreements | Communications, requests, leases, signatures and audit records | Contract; steps requested before a contract; legal obligations |
| Manage Premium when available | App-store subscription and entitlement records | Contract; steps requested before providing Premium access |
| Process and record rent payments | Transaction, bank setup, references, amounts and receipts | Contract; legal obligations; legitimate interests in accurate records and fraud prevention |
| Rank and improve feeds and provide listing stats | Recommendation events, aggregate listing activity, normalized saved-search criteria, listing quality, freshness and selected filters | Contract for Premium stats; legitimate interests in useful, fair and reliable discovery |
| Send chosen notifications | Push token, preferences and relevant account events | Consent where required; contract for service messages; legitimate interests |
| Handle support, safety and disputes | Tickets, reports, evidence, communications and transaction records | Contract; legal obligations; legitimate interests in protecting users and the platform |
| Review website suggestions | Suggestion text, optional email and pseudonymous rate-limit value | Consent for optional follow-up; legitimate interests in improving and protecting the service |
| Comply with law and defend rights | Information relevant to a lawful request, claim, audit or investigation | Legal obligation; legitimate interests; establishment, exercise or defence of legal claims |
Where we rely on consent, you may withdraw it for future processing. Withdrawal does not make earlier lawful processing invalid and may prevent a feature that needs the information from working.
5. How recommendations and listing stats work
D8 uses rules to order listings using relevance, listing quality, freshness, useful engagement and selected filters. Near You also uses distance. Personalise from searches is on by default. It helps show homes that match your earlier searches higher in the results, without hiding other homes.
You can turn Personalise from searches off in Profile > Settings > Properties Settings and save the change. This deletes your saved search preferences and stops D8 remembering new ones. Other property preferences and recommendation settings still apply.
Premium listing stats use aggregate signed-in activity for the selected period. Repeated events are limited, guest activity and the landlord's own visits are excluded, and figures may take a short time to update.
Ranking changes display order. It does not decide whether you may rent a property, contact a seller or complete any property arrangement. We limit repeated impression events to reduce manipulation and give relevant listings a fair opportunity.
6. Who may receive information
We disclose only what is reasonably needed for a service, instruction, safety issue or legal requirement.
- Other users: listing and profile information, messages sent to them, requests, agreements, future renewal changes and transaction details relevant to their side of a transaction. After a completed sale tour, the buyer can receive the seller's account email and profile phone number to make direct contact.
- Cloud infrastructure providers: account authentication, database services, file storage, network request information and secure server-side operations.
- Payment providers and participating financial institutions: payment collection, transfer-account generation, landlord payout setup, transaction verification and financial compliance.
- Google Maps: address search, location matching and property map images where those features are used.
- Notification-delivery providers: Expo and the applicable platform push services (such as Google Firebase Cloud Messaging on Android and Apple Push Notification service on iOS) process device tokens, notification titles and bodies, and limited event references to deliver enabled alerts. Depending on your phone settings, notification previews may be visible on the lock screen.
- Sign-in providers: authentication and account details when you choose an external sign-in option.
- Network and security service providers: abuse prevention, service protection and security logs.
- Website hosting providers: website delivery, request processing and security logs.
- Professional advisers and authorities: where reasonably necessary for legal advice, auditing, fraud prevention, a valid legal process, public safety or the defence of rights.
- A successor organisation: as part of a genuine merger, financing, reorganisation or sale, subject to appropriate confidentiality and applicable law.
We select providers that support the relevant service and require them to handle information consistently with their role and applicable law. You may contact us for further information about the providers involved in processing your information, subject to security, confidentiality and legal limitations.
Some providers may process information in other countries. We use contractual, organisational and legal measures appropriate to the transfer and the sensitivity of the information, as required by applicable data-protection law.
7. What other people can see
A property listing may show its description, media, price, fees, availability, location and the lister's profile. A map can reveal the saved property location, but not your current device location. Publish only information you are authorised to share.
Rent transaction, payment, lease and dispute information is not public. It is limited to relevant participants, authorised D8 personnel and providers or authorities with a valid need. Information may be shared when needed to investigate fairly, obtain a response, comply with law or protect rights.
8. How long information is kept
We keep information only for as long as reasonably necessary for the purpose collected, the parties’ records, security, dispute resolution and legal obligations. Retention depends on the category and context:
- Your current device location is not saved by D8 after it is used to show nearby listings.
- Raw, account-linked recommendation events are designed to be removed or de-identified after no more than 90 days. Anonymous aggregate statistics may be kept longer.
- D8 remembers up to 50 recent search preferences. A preference stops influencing recommendations after 180 days without use and is removed when your saved preferences are next updated. To clear them immediately, turn off Personalise from searches and save.
- Push-delivery diagnostics are scheduled for deletion after 30 days. Device tokens are removed from completed or permanently failed delivery jobs; the current registered token remains with the account until replaced or removed. This does not delete the separate in-app notification history.
- Session, notification, saved-home and other preference data is kept while needed for the feature or until removed, replaced or deleted with the account.
- Listings and communications remain while active and may be retained for a reasonable period after removal where needed for transaction history, reports, fraud prevention or claims.
- Payment, receipt, transaction, signed and future lease versions, consent, audit, dispute and safety records may be retained after account deletion where necessary to preserve a reliable record, comply with financial or legal duties, resolve claims or protect users.
- Website suggestions and their optional contact details are kept while reasonably needed to review, act on or document the feedback, then deleted or anonymised. Pseudonymous rate-limit values are used only for abuse prevention.
- Backups and security logs may remain for a limited cycle before deletion or overwriting.
When information is no longer needed, we delete it, anonymise it, or restrict it from ordinary use, subject to technical and legal constraints.
9. How we protect information
We use measures appropriate to the nature of the service, including authenticated access, role-based database rules, private storage for voice notes, transport security, protected server-side payment operations, session controls, audit records and restrictions on changing transaction snapshots.
No internet service can promise absolute security. Protect your password and one-time codes, review active sessions, keep your device secure, and notify us promptly if you suspect unauthorised access. D8 will assess suspected personal-data breaches and notify affected people or the relevant data-protection authority where applicable law requires it.
10. Your privacy rights
Subject to applicable data-protection law, including the Nigeria Data Protection Act 2023 where it applies, you may ask to:
- receive information about our processing and access personal data we hold about you;
- correct inaccurate or incomplete information;
- delete information that no longer has a lawful reason to be kept;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive eligible information in a portable format;
- withdraw consent for future processing where consent is the basis; and
- raise a concern about solely automated decisions with legal or similarly significant effects, if any are introduced.
Use in-app profile controls for ordinary edits and account deletion. For a formal request, email privacy@directhousing.app from your account email and describe the request. We may verify identity and may retain or withhold information where disclosure would affect another person’s rights, privilege, security, legal obligations or a valid exemption.
You may complain directly to the relevant data-protection authority, including the Nigeria Data Protection Commission where it applies. Contacting D8 first is optional.
11. Children
D8 accounts are for people aged 18 or older. We do not knowingly offer accounts to children. If you believe a child has created an account or provided personal information, contact us so we can investigate and take appropriate action.
12. Changes to this notice
We may update this notice when the product, our providers or the law changes. The effective date will be revised. For a material change, we will provide reasonable notice through the app, website, email or another appropriate channel before the change takes effect where required.
13. Contact
D8 LTD
22 Armoured Brigade, Sobi Barracks
Ilorin, Kwara State, Nigeria
Email: privacy@directhousing.app
Phone: +234 708 637 1762
For transaction support, disputes or reports, use Help & Support inside the app so the request stays linked to the correct account and record.