Privacy Policy

You can check a code without an account. When you do, we record:

• the code you entered, the result, and when you checked it;
• a random identifier stored in a cookie on your browser, which lets us tell a repeat check from a new one and limit abuse. We store only a scrambled (hashed) form of it, and it says nothing about who you are. If your browser does not keep cookies, we use a hashed form of your IP address instead;
• your approximate location, only if you allow it. Your browser shares its position with us, we work out the state and local government area it falls in, and we keep only those two names. We never store your coordinates.

The manufacturer of the product sees how many times its codes were checked and in which states and local government areas. They do not see who you are.

If you report a suspicious product, we collect what you choose to give us: where and when you bought it, the price, the store, a photo, notes, and your email address if you would like us to follow up. We share the report with the product's manufacturer so they can investigate, and we may share it with a regulator where a product may be unsafe.

To run your company's account we collect:

• your name, email address, phone number and password (stored only in a one-way hashed form), and two-factor authentication settings;
• company details, including registration and regulatory numbers, and the documents you upload so we can review your company;
• product information and images, and the codes you generate;
• delivery details, including a contact name, email and phone number, if you ask us to print codes for you;
• a record of actions taken in the account (an audit log), for security and accountability.

• to provide verification results and run manufacturer accounts (performing our contract with you);
• to detect repeated, suspicious or abusive use and keep the service secure (our legitimate interest in protecting consumers and manufacturers);
• to review companies before they can use Float, and to meet our legal obligations;
• to send service emails, such as account verification, security codes, review decisions and code deliveries.

We do not sell personal data, and we do not use it for advertising.

We use a small number of service providers to run Float, under contracts that require them to protect the data: cloud hosting and file storage (Cloudflare R2) and email delivery (Resend). Some of these providers may process data outside Nigeria; where they do, we rely on the safeguards the Nigeria Data Protection Act 2023 requires. We also share data with a product's manufacturer as described above, and with authorities when the law requires it.

Float uses only the cookies it needs to work: the verification identifier described above, and sign-in cookies that keep manufacturer accounts logged in and protect them against forged requests. We do not use advertising or third-party tracking cookies.

We keep personal data only as long as we need it for the purposes above: account data while the account is open and for a period afterwards to meet legal obligations, and verification records for as long as they help protect a product's codes. Data is encrypted in transit, sensitive values are encrypted or hashed at rest, and access is limited to people who need it.

Under the Nigeria Data Protection Act 2023 you can ask to access, correct or delete your personal data, object to or restrict how we use it, withdraw consent you have given (for example, to location), and receive your data in a portable form. You can also complain to the Nigeria Data Protection Commission.

To exercise any of these rights, email support@askfloat.com. Because we deliberately do not know who checked a code, we may be unable to link a verification record to you.

We may update this policy. When we do, we will change the date at the top of this page. Use of Float is also governed by our Terms of Use. Questions about this policy can be sent to support@askfloat.com.