Privacy Policy

GIGS Labs (“we”, “us”, “onWard”) is a software company based in Lagos, Nigeria, and the publisher of the onWard app and website. We are the data controller for the personal data described in this policy.

Questions, requests or complaints about privacy can reach a human at privacy@gigslabs.example.

We keep collection to the minimum a feature genuinely needs:

• Account data — your name or handle, email address, chosen role, and profile details you add.
• Content you create — tasks, notes, onWards, streaks and portfolio entries. This is the heart of the product.
• Device & sync data — device type, app version, and the technical identifiers needed to sync across your devices.
• Usage data — aggregate, product-improvement signals such as which features are used. We aim for privacy-preserving, cohort-level analytics rather than individual profiling.
• Billing data — plan and payment status. Card numbers are handled by our payment provider; we do not store full card details on our own servers.

We use it to:

• Run, secure and sync the onWard app across your devices.
• Generate the streaks, insights and portfolio you asked for.
• Provide support and answer the messages you send us.
• Improve the product using aggregate, de-identified trends.
• Send essential service notices (billing, security, major changes).

We do not sell your personal data, and we do not use your private content to train third-party AI models.

Where laws such as the GDPR or Nigeria’s NDPA apply, we process data on the basis of (1) performance of our contract with you — providing the app; (2) your consent, which you can withdraw at any time; (3) our legitimate interests in securing and improving the product; and (4) legal obligation where required.

onWard is offline-first: your content is written to your device first and synced to our servers when you are connected and signed in. Synced data is stored encrypted at rest on infrastructure in vetted regions. You can use the app without an account, in which case your data stays on-device and never reaches us.

We only share data in these limited situations:

• Service providers — hosting, email and payments who process data on our instructions under contract.
• Links you create — a portfolio or streak you explicitly share becomes visible to whoever holds the link. You can revoke any share link at any time.
• Legal requests — if compelled by law, after we challenge anything we reasonably can.
• Business transfer — in a merger or acquisition, with notice before your data moves.

The website uses essential cookies to function and privacy-respecting, aggregate analytics to understand which pages help people. We avoid cross-site advertising trackers. You can clear or block cookies in your browser at any time; the app itself relies on local storage rather than cookies.

We keep account and content data for as long as your account is active. If you delete your account, we remove your content from our systems within 30 days, except where we must retain limited records for legal or accounting obligations. Aggregate, de-identified statistics may persist.

You can, at any time and free of charge:

• Access and export your full history from within the app.
• Correct or update your profile and content.
• Delete your account and all associated content.
• Revoke any share link you have created.
• Object to or restrict certain processing, and withdraw consent.

To exercise a right, use the in-app controls or email us. We respond within 30 days. You may also complain to your local data-protection authority.

We use encryption in transit and at rest, least-privilege access, and privacy-by-default product design. See our Security page for the full picture. No system is perfectly secure, but we take reasonable, proportionate measures and disclose material incidents promptly.

onWard is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Because we are a global, remote-first product, data may be processed outside Nigeria. Where we transfer data to another jurisdiction, we rely on appropriate safeguards such as standard contractual clauses and reputable providers located in recognised regions.

If we make a material change, we will update the date above and, where it affects you meaningfully, notify you in-app or by email before it takes effect.