Privacy policy
Last updated: October 28, 2026
This policy explains what information Ntima collects, why, who it is shared with, how long it is kept and how to exercise your rights.
1. Who is responsible for your data
The Ntima app is operated by [TO FILL: legal name of the operator (you or your company)], [TO FILL: postal address] (“Ntima”, “we”). For any question about your data: privacy@ntimardc.com.
2. The information we collect
| Information | Why | Who sees it |
|---|---|---|
| Phone number | To create your account and sign you in by SMS; to keep one person per account. | Nobody on Ntima. It is never shown on your profile. It is only shared with someone if you both agree, after at least 12 messages each. |
| Profile: first name or nickname, date of birth, gender, intention, city and commune or country, bio, preferences | To present you and suggest compatible profiles. | Other members see your first name, your age (never your date of birth), your city and commune, your bio and your intention. |
| Photos | Your profile and verification. | Other members. Hidden information in photos (location, device) is removed before upload. |
| Verification selfie and, for the diaspora, ID document | To confirm you are a real person, that you look like your photos and that you have only one account. | Only our verification provider. Not other members, not our team. Ntima only keeps the result (verified or not). |
| Messages | To let two people who like each other talk. | The two participants. Our team only sees them if one of you reports the conversation. |
| Likes, passes, blocks, reports | To run discovery and protect members. | A like is only visible to the other person in “Coup de cœur”. Reports are seen by our moderation team. |
| Payments: pass type, amount, Mobile Money number, transaction reference | To activate your pass and keep our accounts. | Our team and the payment provider. We never see your PIN or your card number. |
| Notification token | To tell you about a new message or a mutual match. | The notification service. |
| Support requests | To answer your questions. | Our team. |
What we do not collect: your GPS location, your contacts, or advertising data. Ntima shows no ads and does not sell your data.
3. Legal bases
- Contract: to create your account, suggest profiles and run conversations and passes.
- Your consent: for selfie verification and, for the diaspora, ID verification, asked just before the check. You can withdraw it, but an unverified profile stays private.
- Our legitimate interest: member safety, fighting fake profiles and abuse, and limiting how many SMS are sent.
- Legal obligations: payment accounting and requests from authorities.
4. Providers that process your data
We work with providers that process data only to deliver their service to us:
- Convex: hosting of the app and database [TO FILL: production server region].
- Twilio: sending SMS codes.
- Didit: selfie verification, comparison with your photos, duplicate-account detection and, for the diaspora, reading the ID document.
- EasyPay: Mobile Money payments (M-Pesa, Orange Money, Airtel Money).
- Stripe: card payments.
- Expo: sending notifications.
Some of these providers are located outside the DRC or outside the European Union. In that case, the transfer is covered by their contractual data-protection commitments.
5. How long we keep your data
| Data | Period |
|---|---|
| Account, profile, photos | As long as your account exists. After a deletion request: access cut immediately, then erased within 30 days. |
| Messages | While the match is active. When either of you ends it, or the account is deleted, they are erased 30 days later. |
| Messages attached to a report | [TO FILL: number of days] days, to handle the report and any appeal. |
| Verification data at Didit | [TO FILL: period agreed with Didit], then deleted. |
| Payment history | [TO FILL: legal accounting retention period]. |
| Conversations kept on your phone for offline reading | Encrypted, 7 days at most, erased when you sign out. |
6. Your rights
At any time you can:
- view and correct your profile in the app (Profil → Modifier mon profil);
- ask for a copy of your data;
- delete your account (see Delete my account);
- object to processing or ask for it to be restricted;
- withdraw your consent to verification.
Write to us at privacy@ntimardc.com. We reply within 30 days. You can also contact the data-protection authority in your country (for example the CNIL in France or the APD in Belgium).
7. Minimum age
Ntima is for people aged 18 and over. We delete any account we learn belongs to a minor. See Child safety.
8. Security
Traffic between the app and our servers is encrypted. Our team’s access is limited to those who need it, with two-factor authentication. No system is perfect: if a breach affected your data, we would tell you as the law requires.
9. Changes
If this policy changes in an important way, we tell you in the app before the change applies.