1. Who we are
SeniorBrother is a Nigerian service that lets you book verified shortlet stays, search flights, and pay bills such as airtime, mobile data, electricity and cable TV. It is operated by SeniorBrother Technologies (“SeniorBrother”, “we”, “us”).
This policy covers both the website at seniorbrother.online and the SeniorBrother Android app, which is a secure wrapper around that same website. Because the app and the website are the same service, everything described here applies to both. We are the data controller for the information described below.
2. Information we collect
We only collect what a booking, flight search or bill payment actually needs to work.
2.1 Information you give us
| What | When we collect it | Why |
|---|---|---|
| Full name, email address, mobile number, password | When you create an account | To identify you, secure your account and contact you about your activity |
| Guest name, phone, email, check-in and check-out dates, number of guests, and any note you write | When you request a booking | To send the request to the host and confirm your stay |
| Recipient phone number and network | When you buy airtime or data | To deliver the top-up to the right line |
| Meter number, meter type and electricity distributor | When you pay an electricity bill | To verify the meter and deliver your token or receipt |
| Smartcard / IUC number and chosen package | When you renew cable TV | To verify the decoder and apply the subscription |
| Origin, destination, travel dates and passenger count | When you search for flights | To return fares and, if you continue, to hand you over to the airline or travel partner |
| Property title, type, area, city, state, size, nightly price, description and a contact phone number | When you submit a property to list | To review the listing, reach you about it, and publish it if approved |
| Messages you send us | When you contact support | To answer you and keep a record of the issue |
2.2 Information we receive from our service providers
When you enter a meter number or smartcard number, our bill provider returns the registered customer name and, for electricity, the service address. We show this to you so you can confirm you are paying the right account, and we store it on the transaction record as proof of what was delivered. Successful electricity payments also return a prepaid token and the units purchased.
2.3 Information collected automatically
- Transaction and wallet history — a record of every payment attempt, its reference, amount, status and the resulting wallet balance, so receipts, refunds and disputes can be resolved.
- Session cookies — a sign-in cookie, and, only if you tick “keep me signed in”, a longer-lived cookie so you are not signed out between visits. See section 7.
- A one-way hash of your IP address — used for rate limiting and abuse prevention. We store the hash, not the address itself, so the original IP cannot be read back from our records.
- Security and activity logs — sign-ins, sign-in failures, registrations and administrative changes, with timestamps, to detect account takeover attempts.
- Push notification token — if you allow notifications, a device token that lets us send you booking and payment updates. It identifies a device installation, not you personally.
3. What we do not collect
The SeniorBrother Android app requests a single Android permission: internet access. In particular:
- We do not collect your GPS or precise location.
- We do not read your contacts, SMS messages, call logs or installed apps.
- We do not access your camera, microphone or photo library, and the app never asks you to upload a file.
- We do not collect your advertising ID, and we do not run advertising or cross-app tracking SDKs.
- We do not ask for, receive or store your card number, CVV, bank password, transaction PIN or one-time codes. Wallet top-ups are completed on a licensed payment provider's own secure page, and only the outcome — amount, reference and status — comes back to us.
- We do not sell your personal information, and we do not share it with data brokers.
4. How we use your information
- To create and secure your account, and to sign you in.
- To deliver what you asked for: send a booking request to a host, top up a line, verify a meter or decoder, complete a subscription, or return flight fares.
- To keep your wallet ledger accurate, issue receipts, and process refunds or reversals when a payment fails at the provider.
- To contact you about a booking, payment or account matter, including by push notification if you enabled it.
- To prevent fraud, abuse and automated attacks — for example, by limiting repeated failed sign-in attempts from the same source.
- To understand which parts of the service are used, so we can improve them. This is done from our own transaction and search records, not from third-party tracking.
- To meet our legal, tax and regulatory obligations, and to resolve disputes.
We do not use your information for automated decision-making that produces legal effects for you.
5. Legal basis for processing
Under the Nigeria Data Protection Act 2023 — and, where it applies to you, the UK/EU GDPR — we rely on:
- Performance of a contract — to run your account and complete the bookings and payments you request.
- Legitimate interests — to secure the service, prevent fraud and improve the product, balanced against your privacy.
- Consent — for push notifications, which you can withdraw at any time in your device settings.
- Legal obligation — to keep financial records and respond to lawful requests.
8. How long we keep information
- Account details — while your account is open, and then deleted or anonymised as described in section 11.
- Bookings, bill payments and wallet entries — retained for up to 7 years after the transaction, because Nigerian tax and financial record-keeping rules require it. These records are kept even after account closure, with your name and contact details removed where the law allows.
- Failed sign-in records — automatically purged after 7 days.
- Security and activity logs — up to 12 months.
- Push tokens — until you turn notifications off, uninstall the app, or delete your account.
9. How we protect your information
- All traffic between your device and our servers uses HTTPS. The Android app is locked to
seniorbrother.onlineand refuses insecure or mixed content. - Passwords are stored only as a salted one-way hash. Nobody at SeniorBrother — including our administrators — can read your password.
- IP addresses in our security records are stored as one-way hashes rather than in the clear.
- Every database query uses prepared statements, and every state-changing request is protected by an anti-forgery token.
- Sign-in and registration are rate limited, and administrator access is separated from ordinary user access with its own login.
- Payment provider and API credentials live only on our server. They are never included in the Android app, so they cannot be extracted from an installed copy.
No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the Nigeria Data Protection Commission as required by law.
10. Your rights
You can ask us at any time to:
- Access a copy of the personal information we hold about you.
- Correct anything inaccurate — you can edit your name, email, phone and password yourself from your dashboard.
- Delete your account and data — see section 11.
- Restrict or object to how we use your information.
- Receive your data in a portable, machine-readable format.
- Withdraw consent for push notifications, without affecting anything done before.
Email privacy@seniorbrother.online from the address on your account and we will respond within 30 days. There is no charge. If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission, or to your local data protection authority if you are outside Nigeria.
11. Deleting your account and data
You can ask us to delete your SeniorBrother account and the personal data attached to it at any time.
How to request deletion
- Email privacy@seniorbrother.online from the email address registered on your account.
- Use the subject line “Delete my SeniorBrother account”.
- We verify the request against your account and confirm by email before anything is removed.
What gets deleted
Your name, email address, phone number, password, saved properties, push notification tokens and any property listing submissions are permanently deleted, and your account can no longer be used to sign in.
What is kept, and for how long
Records of completed bookings and bill payments — the reference, amount, date and status — are kept for up to 7 years to satisfy Nigerian tax and financial record-keeping obligations, and to resolve any chargeback or dispute. They are detached from your identity where the law allows, so they can no longer be used to contact or identify you. Nothing is retained for marketing.
How long it takes
Deletion is completed within 30 days of us verifying your request. Backups are overwritten on their normal rotation and are fully cleared within 90 days.
Uninstalling the app does not delete your account. Send the email above so your data is actually removed.
12. Children
SeniorBrother is intended for adults aged 18 and over, and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, email privacy@seniorbrother.online and we will delete it.
13. International transfers
Our servers and some of our service providers are located outside Nigeria. Where your information is transferred abroad, we only use providers that offer an adequate level of protection or that are bound by contractual safeguards requiring them to protect it to the standard set out in this policy.
14. Changes to this policy
We may update this policy as the service changes. The “last updated” date at the top always reflects the current version. If a change materially affects how we use your information, we will tell you in the app or by email before it takes effect. Continuing to use SeniorBrother after that means you accept the updated policy.
15. Contact us
Questions, requests or complaints about privacy:
- Privacy and data requests: privacy@seniorbrother.online
- General support: support@seniorbrother.online
- Website: seniorbrother.online
- Operated from Nigeria by SeniorBrother Technologies
- Android app ID:
com.suntech.seniorbrother