Privacy Policy

When you use ComfyTag, we collect information needed to provide our services:

• Account information — email address and phone number used to create and identify your account.
• Face biometric template — an encrypted mathematical representation of your face, generated on your device. We never store raw face images (see Face Data Protection below).
• Payment information — card details and bank account numbers, processed securely by Paystack. ComfyTag does not store raw card numbers.
• Event preferences — events you view, follow, or purchase tickets for, used to personalise your experience.
• Device and usage data — browser type, IP address, and in-app actions used for security and analytics.

• Event ticketing — to issue, validate, and transfer tickets to events.
• Face check-in — to match your face template at venue gates so entry is frictionless and secure.
• Notifications — event reminders, ticket confirmations, and platform updates sent via push notification, email, or SMS.
• Platform improvement — aggregate, anonymised usage analytics that help us improve the app and discover new features.
• Legal compliance — fraud prevention, identity verification, and regulatory requirements under Nigerian law.

Your privacy is our highest priority when it comes to biometric data:

• We never store raw face photographs on our servers.
• Face templates are encrypted on your device before any data leaves it. The server receives only the encrypted template — never the underlying image.
• Encrypted templates are stored solely for the purpose of event check-in and are deleted when you close your account or withdraw consent.
• Face data is never sold, shared with third parties, or used for advertising.
• You may delete your biometric data at any time from Account Settings → Face ID.

ComfyTag uses Paystack to process all ticket payments. When you pay for a ticket, your card and bank details are handled entirely by Paystack under their own Privacy Policy. ComfyTag only receives confirmation of a successful charge and the last four digits of your card for display purposes.

Under the Nigeria Data Protection Regulation (NDPR) and applicable law, you have the right to:

• Access — request a copy of all personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request deletion of your account and all associated data, including biometric templates.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — opt out of face recognition at any time; QR tickets remain available.

To exercise any of these rights, contact us at the address below.

For privacy questions, data requests, or to report a concern, email us at [email protected]. We aim to respond within 5 business days.