Privacy policy
Effective 4 November 2026 · version 2026-11-04
In short
- InLine keeps an honest list of the order people arrive at CDS. It is not the official NYSC attendance.
- We collect what that needs: your account details, your location only when you check in, and your face, to make sure the person checking in is really you.
- Your face is turned into a "face print" on our own server. We never sell it, never use it for anything else, and never send it to a face-recognition company.
- Check-in selfies are deleted after 7 days. Exact locations are cleared after 30 days.
- You can see, correct or delete your data at any time. Deleting your account erases your personal data.
1. Who we are
InLine is run by Kayode Adewonise John, Lagos, Nigeria ("we", "us"). We decide how the personal data in InLine is used, so we are its data controller under the Nigeria Data Protection Act 2023 (NDPA). You can reach us at kayodeadewonise@gmail.com.
InLine is an independent project. It is not run, endorsed or approved by the National Youth Service Corps (NYSC). Its arrival list is not the official CDS attendance taken by your Local Government Inspector, and it doesn't affect clearance, allowances or any NYSC decision.
2. What we collect, why, and for how long
| Data | Why we need it | How long we keep it |
|---|---|---|
| Account details: full name, NYSC state code, email address, phone number, state and LGA, and your password (stored only as a one-way scrambled "hash", never as the password itself) | To create your account, sign you in with your state code, place you in the right CDS group, send your sign-up code and security emails, and contact you about your account | Until you delete your account |
| Group details: your CDS group, any exco role, and when you joined | To show the right group, arrival list and exco tools | Until you delete your account |
| Face print and face setup photo (sensitive personal data; see section 3) | To check that the person checking in is the account holder, and that one person's face isn't set up on two accounts. The setup photo is your photo on the arrival list | Until you delete your account or an exco resets your face check |
| Check-in selfies: the live photo from each face check at check-in (and from a face setup that was refused) | Evidence for your group's excos: shown on the arrival list and used to decide appeals | 7 days |
| Face-check records: the moves you were asked to make, whether the check passed, and the measurements behind it (no photos) | To run the check, look into disputes and tune it so honest people aren't refused | 90 days |
| Location at check-in: your phone's position, its accuracy, and whether a fake-location setting was on, read only when you check in, host or confirm you're still there | To check you're at the venue. Excos see how far from the venue you were | Exact position: 30 days. The distance and the result stay with your arrival record |
| Arrival records: the date, your time and position on the list, and its status | This is what InLine is for | While your group uses InLine. If you delete your account, your place stays as "Deleted member" with none of your details, so nobody else's position changes |
| Appeals: what you wrote and the excos' decisions | To put you on the list when an automatic check failed | With the arrival record; your text is removed if you delete your account |
| Phone identifiers: a security key the app creates on your phone, the type of phone, and a random notification ID | One account per phone, so nobody can use your account from another phone; and to send you notifications | While your account is linked to that phone |
| Security records: IP addresses at sign-up and check-in, wrong-password attempts, and an activity log of actions in your group (for example "approved an appeal") | To stop abuse and cheating, and so excos' actions can be checked | IP addresses: 30 days. Sign-up and password-reset codes, and wrong-password records: 1 day. Activity log: 2 years |
We don't access your contacts, your other photos or files, or your location outside the moments listed above. Server backups are kept for 30 days, so deleted data can remain in a backup for up to 30 days before it's gone for good.
3. Your face data
Face data is sensitive personal data under the NDPA. We only process it with your explicit consent, which you give when you create your account and set up the face check.
- Setting up: the app takes a few photos while you look at the camera and make simple moves (smile, turn, look up). This proves a live person is there, not a photo or video. Our server turns the straight-on photo into a face print: a list of numbers, not a picture.
- Checking in: each check-in compares a new live selfie with your face print.
- One face, one account: a new face setup is compared with face prints set up in the same LGA in the last 400 days. If it looks like a face already on another account, it is refused and a person reviews it: an exco of your group (never one of the two people involved) or us. They see your setup photo next to the other account's photo, and decide whether you're two different people.
- Where it happens: on our own server, using open-source face models. Your face is never sent to a face-recognition company and never used to identify you anywhere else.
- Withdrawing consent: ask an exco to reset your face check, or delete your account. Your face print and setup photo are then deleted. If your group requires the selfie check, you'll then need an exco to approve each check-in.
4. Our legal reasons for using your data
- Consent: your face data and your location at check-in. You can withdraw it at any time (section 9).
- Providing the service you signed up for: your account, group and arrival records.
- Legitimate interests: keeping InLine secure, stopping cheating and abuse, and keeping the list accurate and accountable. We only rely on this where it doesn't override your rights.
- Legal obligations: if the law requires us to keep or share something.
5. Who can see your data
- Members of your CDS group (and of groups sharing the same CDS day): your name, state code, setup photo, and your time and position on the arrival list.
- Your group's excos, depending on their role: also your check-in selfies, how far from the venue you were, the GPS accuracy, your appeals, and your face-check status.
- Us, the platform admin: your account details, including email and phone number, to support you and stop abuse.
- Service providers who run parts of InLine for us and may only use the data to do so (section 6).
- Authorities, only when the law requires it.
We don't sell personal data, and we don't use it for advertising.
6. Service providers and international transfers
| Provider | What they do for InLine | Where |
|---|---|---|
| InterServer | The server that runs InLine and its database | United States |
| Cloudflare (R2) | Private storage for photos and backups | United States |
| Zoho | Sends our emails (sign-up codes and account notices) | Zoho's data centres |
| OneSignal and Google Firebase | Deliver notifications to your phone | United States |
| Google Maps | Shows the venue on a map in the app | Google's data centres |
This means your data is stored and processed outside Nigeria. We use providers with recognised security standards, send everything over encrypted connections, keep photos in private storage, and give each provider only what its job needs. You agree to these transfers when you create your account.
7. How we protect it
- All traffic is encrypted (HTTPS). Passwords are stored as Argon2id hashes, which can't be turned back into the password.
- Photos are in private storage and open only through links that expire after a few minutes.
- Our server accepts administrator logins by security key only, behind a firewall, with automatic security updates.
- Each account works on one phone at a time, and moving to a new phone triggers an email to you.
No system is perfectly secure. If a breach puts your data at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.
8. Retention in one place
- Check-in selfies: 7 days
- Exact check-in positions and IP addresses: 30 days
- Face-check records (no photos): 90 days
- Sign-up and password-reset codes, and wrong-password records: 1 day
- Activity log: 2 years
- Account, face print and setup photo: until you delete your account (face data also when an exco resets it)
- Backups: 30 days
9. Your rights
Under the NDPA you have the right to be told how your data is used (this page), to get a copy of it, to have it corrected, to have it deleted, to object to or restrict some uses, to receive it in a portable format, and to withdraw consent at any time without affecting what was done before.
- See and correct: your details are in the app under Profile. Ask us to fix anything you can't change yourself.
- Delete: Profile → Delete my account in the app, or the delete-account page. A President hands the role to another member first.
- Everything else (a copy of your data, objections, questions): email kayodeadewonise@gmail.com. We reply within 30 days.
- Complaints: you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
10. Age
InLine is for NYSC corps members, who are adults. It isn't meant for anyone under 18.
11. Changes to this policy
If we change this policy, we'll update the date and version above. If a change matters, for example a new use of your data, we'll tell you in the app first and, where the law requires, ask for your consent again.
12. Contact
Kayode Adewonise John, Lagos, Nigeria. Email: kayodeadewonise@gmail.com.