Your information. Your choices.

Privacy at Dinki.

A clear guide to what we collect, why we use it and how you can manage your information.

Effective

The essentials

We use your account and outfit activity to run Dinki and improve the service. Payments are handled by your payment provider. We do not sell your personal information or send it to advertising networks. You can delete your account in the app.

01

Who we are

Dinki.Fashion is operated by CYCLESQUAD LTD, No. 8 Umasha Road, Navy Estate, Karshi, Abuja, Federal Capital Territory 900101, Nigeria. We are responsible for the personal information processed to operate Dinki.

This policy covers Dinki’s Android and iOS apps, dinki.fashion, our API and authorised administration and support services. A platform’s own policy also applies when you use Apple, Google Play or another service outside Dinki.

02

Information we use

Account & sign-in
The name, email address, phone number and gender you provide; your Dinki account identifier; password hashes, sign-in sessions and recovery records. We do not store your password as readable text.
Outfit activity
Outfits you open, free-preview usage, fabric choices, ratings, Wardrobe saves, paywall and checkout interactions, and sharing actions. This activity is linked to your account while it exists and helps us measure free-view use, paid conversion and product performance.
Purchases & access
Plan and product identifiers, payment or store transaction references, amounts, currencies, purchase status, access periods and refund or recovery information. Store purchase tokens and account bindings help verify and restore the correct account’s access. Dinki does not receive the payment-card details entered with Apple, Google Play or Paystack.
Support & requests
Contact information, messages and other information you choose to provide when asking for help or submitting an available outfit request. Please do not send passwords or payment-card details.
Website & technical activity
Website visit and click events described below, plus network and request information handled by our servers and security providers. Password recovery uses a protected value derived from the request’s IP address to limit abuse.
Administration & catalogue content
Authorised administrators’ contact details, roles, invitations, account changes and audit records. If an administrator uploads a reference image or design instructions, we process that content to prepare catalogue designs, including through our configured AI generation providers.

Ordinary browsing and fabric swapping do not upload photos of you. Dinki’s catalogue contains AI-generated fashion inspiration; the app does not provide personal body scanning or a virtual fitting service.

03

Why we use it

We use information to create and secure accounts, deliver the catalogue and Wardrobe, enforce free-preview allowances, verify purchases, restore access, respond to support requests and send service or security notifications.

We also use first-party activity to understand which outfits and features people use, how free browsing leads to paid access, and whether sharing and website download buttons are useful. We investigate failures, prevent abuse and keep necessary operational and financial records.

Our lawful bases, as applicable, are providing the service you request and performing our contract with you; legitimate interests in security, fraud prevention and improving Dinki, balanced against your rights; and complying with legal obligations. Where a particular optional use requires consent, we will ask for it. This notice itself is not a request for consent.

04

Outfit sharing & measurements

When you share an outfit, Dinki creates a branded image on your device and opens the operating system’s share sheet. The download caption may include an opaque, random share identifier. We record the requested share and the outcome the operating system reports, such as selected, dismissed or unknown. This does not tell us who received it, the contents of your private conversations or whether a message was delivered.

On the public website, our own measurement code records a random identifier for that page visit, an event identifier, a landing-page view or store-button click, the selected store, the button’s position and an optional share identifier. It does not send your name, email, the full page URL or a persistent device identifier in that event.

A share identifier can connect a website visit or store click to the originating app share. Because that app event is account-linked while the account exists, this attribution is not described as fully anonymous. A store click does not prove an installation or purchase.

The website’s measurement code does not use cookies or third-party advertising or analytics scripts. It respects browser Do Not Track and Global Privacy Control signals. Hosting and security providers may separately process network information and use necessary security mechanisms. The current mobile app does not have a separate switch for first-party activity reporting.

The app you choose for sharing receives the image and caption and handles them under its own terms and privacy policy.

05

Service providers & transfers

We use hosting and delivery providers, including DigitalOcean and Cloudflare; email delivery services; and payment providers such as Google Play, Apple when available, and Paystack where offered. They process the information needed to deliver, secure or reconcile those services. Required catalogue reference images and instructions may be sent to our AI service provider, currently OpenAI, when an authorised administrator requests generation.

We do not sell personal information or provide it to data brokers, advertising networks or external consumer-analytics services. We may disclose necessary information to comply with lawful requests, protect people or the service, resolve disputes, or in connection with a business transfer subject to applicable privacy requirements.

Our providers operate internationally, so information may be processed outside Nigeria or your country of residence. The relevant destination depends on the service being used. Contact us for information about the processors and transfer arrangements applicable to your information.

06

Your device & permissions

The app may keep sign-in credentials in protected device storage, cached outfit images, saved viewing preferences and temporary share images. Your operating system and app-storage controls govern these local copies.

Normal outfit browsing and sharing do not require Dinki to access your contacts, microphone or precise location. Opening a share sheet lets you choose another app; it does not give Dinki access to that app’s messages or contacts. An external app or store may request its own permissions.

07

Retention & account deletion

We keep account information while your account is active and retain other records according to their purpose, including providing access, resolving support or payment disputes, preventing fraud and meeting legal obligations. The period can differ by record: a purchase-reconciliation record or abuse-prevention marker can need to outlast a sign-in session or temporary recovery code. Contact us about the retention of a particular record.

You can request permanent account deletion in the app: Profile → Delete account. We verify the request before removing the account. See our account-deletion help page if you need assistance.

Deletion removes profile information, sessions, Wardrobe entries, ratings, preview usage and account-linked outfit requests. We remove the account link from product-activity records and redact customer-linked support messages, while retaining limited support lifecycle and audit evidence. Catalogue designs and fabrics are shared service content and are not deleted with an individual account.

Limited payment-reconciliation, purchase-recovery and security records can remain after deletion. Some protected transaction identifiers or account bindings remain to prevent an old purchase being claimed by a different account. Deleting the app from your device does not itself delete your Dinki account.

Restricted backups are retained for recovery and are not rewritten immediately for every deletion. Deleted information must not be returned to active service without reapplying the deletion. Copies you shared through other apps are controlled by their recipients and providers.

08

Your rights & choices

Subject to applicable law, you can ask to access or receive a copy of your information, correct inaccurate information, delete it, restrict processing, object to processing based on legitimate interests, or withdraw consent where consent is the basis. We may need to verify your identity and explain any lawful reason we cannot fulfil part of a request.

Use the contact details below for privacy requests. You can also complain to the Nigeria Data Protection Commission or your competent local data-protection authority. Contacting us first does not remove that right.

We use automated rules to verify payments, manage access and limit abuse. We do not use your information to make decisions about employment, credit or other similarly significant eligibility. If an access or fraud-prevention decision appears wrong, contact support for review.

09

Security

We use encrypted connections, password hashing, protected credentials and role-based access to help protect information. Access to customer and administrator records is limited according to the service task. No system can guarantee absolute security; contact us promptly if you suspect an account or privacy problem.

10

Children & guardians

Dinki is a fashion-inspiration service and is not designed specifically to collect children’s information. If you believe a child has provided personal information without permission required by applicable law, please contact us so we can investigate and take the appropriate action.

11

Contact & updates

For privacy, account-deletion or support requests, email [email protected]. Include enough information to locate your account, but never send your password or payment-card details.

Write to CYCLESQUAD LTD at the business address above if you prefer. We may update this policy as the service or applicable requirements change. The effective date at the top identifies this version; material changes will be communicated through an appropriate service channel.