Privacy Policy
Pentfield Technologies ("Pentfield", "we", "us", "our") is dedicated to protecting the privacy and personal data of every member, association administrator, and visitor who uses FamilyHub 247 ("the Service", "Platform", or "App"). This Privacy Policy explains our data collection, usage, sharing, security, and deletion practices across our web portal (familyhub247.com) and our native mobile applications for Android and iOS.
By accessing or using FamilyHub 247, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein, in conjunction with our Terms of Service.
01 Data Controller & Data Processor Roles
FamilyHub 247 is an enterprise multi-tenant association and community management platform. In providing this Service:
We act as the Data Controller for platform authentication credentials (email, hashed password, phone number), billing records for association platform subscriptions, security audit logs, and technical telemetry necessary to maintain the integrity and security of the Service.
Each independent association, chapter, union, or community hosted on FamilyHub 247 acts as an independent Data Controller regarding the membership data, directory information, committee appointments, and dues/levy assessments it collects. Pentfield Technologies processes this data strictly as the Data Processor on behalf of the association.
02 Information We Collect
We collect information to provide, maintain, and enhance our community and association management features:
A. Information You Provide Directly
- Account Registration & Profile: Full name (first name, last name, other names), email address, mobile telephone number, gender, date of birth, residential address (city, state/province, country), and corporate/professional occupation. You may also provide a profile photograph (avatar) and biographical details.
- Association Membership Data: Association affiliation, chapter, branch, join date, member category, and committee assignments.
- User-Generated Content & Communications: Direct chat messages, group messages, announcement comments, community event notices, shared documents, and photo attachments exchanged within your association.
- Safety Reports & Inquiries: Information submitted through our in-app reporting tools, child safety reports, support tickets, and email inquiries.
B. Payment & Financial Transaction Information
When you pay association dues, levies, or event fees, our licensed payment processing partner (Paystack) securely collects and processes payment details.
Pentfield Technologies does not receive, process, or store raw credit/debit card numbers, bank account PINs, or CVV/CVC security codes on its servers. All payment transactions are handled through PCI-DSS Level 1 compliant gateways. We receive only transaction confirmation records, including payment reference IDs, amounts paid, currency, timestamp, and status.
C. Automatically Collected Technical Information
- Device & Usage Data: Device model, hardware manufacturer, operating system version, unique device identifiers, app version, language preference, and IP address.
- Push Notification Tokens: Firebase Cloud Messaging (FCM) device tokens required to deliver real-time chat alerts, association broadcasts, and emergency notifications.
- Diagnostic & Performance Data: Anonymous error logs, crash traces, and connection latency metrics to optimize app reliability.
03 Mobile Device Permissions & Transparency
The FamilyHub 247 mobile application requests only the minimal device permissions strictly necessary to deliver its core features:
- Photos & Media (Android Photo Picker): On Android 13+ (API 33+) and modern devices, we utilize the native system Android Photo Picker. This grants the app temporary, secure access only to the specific photo or document you select for your profile avatar or chat attachment. We do not request or require broad storage permissions (`READ_MEDIA_IMAGES` or `READ_EXTERNAL_STORAGE`).
- Camera (Optional): Used only when you choose to take a live photo within the app for your profile avatar or chat message.
- Push Notifications: Used to deliver real-time notifications for incoming direct messages, group chats, executive announcements, and security alerts. You may adjust or disable notifications at any time in your device system settings.
- Network State: Used to monitor online/offline connectivity to manage offline caching and message queue synchronization.
04 How We Use Your Information
We process your personal information for specific, legitimate business purposes:
- To authenticate your identity and administer your association membership account;
- To enable member-to-member and executive-to-member communication via direct chats, group forums, and official broadcasts;
- To generate association membership directories, registers, and executive administrative dashboards;
- To verify and record member dues, levy payments, and event registrations;
- To detect, prevent, and respond to security incidents, fraudulent activities, harassment, and policy violations;
- To fulfill legal obligations, assist law enforcement, and protect the safety and welfare of children and vulnerable individuals;
- To enforce our Terms of Service.
05 Directory Privacy & Member Visibility Controls
We believe you should have control over your personal contact visibility within your community:
- Phone Number Visibility: Through Settings → Privacy & Visibility, you can choose whether your mobile telephone number is visible to fellow association members or restricted to verified association administrators.
- Residential Address Visibility: You can similarly control whether your home address is displayed in the association directory.
- Executive Access: Verified principal administrators (President, Secretary, Financial Secretary) have access to official member contact details strictly for administrative, emergency, and official governance purposes.
06 Sharing & No-Sale Commitment
We do not sell, rent, monetize, or trade your personal data with third-party advertisers or data brokers under any circumstances.
We share information only under the following limited, lawful circumstances:
- Within Your Association: Your profile, announcements, and messages are shared with other authorized members and administrators of your specific association according to your privacy settings.
- Trusted Service Providers: With vetted cloud infrastructure providers (Google Cloud, Firebase) and payment gateway partners (Paystack) who operate under strict confidentiality and security agreements.
- Child Welfare & Law Enforcement: Where we discover Child Sexual Abuse Material (CSAM) or severe harm, we are legally and ethically obligated to immediately report such data to relevant law enforcement agencies and child protection organizations (including NCMEC).
- Legal Compliance & Subpoenas: When required by a valid court order, search warrant, statute, or regulatory requirement under Nigerian law or applicable international law.
- Corporate Reorganization: In the event of a merger, acquisition, or sale of Pentfield Technologies' assets, user data may be transferred to the acquiring entity subject to the commitments in this Privacy Policy.
07 Child Safety & Protection of Minors
FamilyHub 247 maintains an uncompromising commitment to child safety. Minors under 18 years of age may use the Service only with the consent and supervision of a parent, legal guardian, or authorized community leader.
We maintain a ZERO TOLERANCE policy regarding Child Sexual Abuse Material (CSAM) and Child Sexual Exploitation and Abuse (CSAE). We deploy in-app reporting tools, prompt human moderation, and immediate reporting protocols. For complete details, review our published Child Safety Standards & CSAE Policy or contact our child safety team directly at childsafety@familyhub247.com.
08 Data Security Measures
We employ robust technical and organizational security safeguards to protect your data against unauthorized access, loss, alteration, or disclosure:
- All data transmitted between your browser or mobile app and our servers is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS);
- Databases and cloud storage buckets utilize AES-256 encryption at rest;
- Account passwords are encrypted using one-way cryptographic hashing algorithms and are never stored in plaintext;
- Strict Role-Based Access Controls (RBAC) and database security rules isolate association datasets so that unauthorized cross-tenant data access is blocked.
09 Account Deletion & Data Retention Rights
Under the Nigeria Data Protection Act (NDPA / NDPR), the European General Data Protection Regulation (GDPR), and mobile platform standards (Google Play User Data policies and Apple App Store Guideline 5.1.1(v)), you possess the fundamental right to permanently delete your account and associated personal data at any time.
- In Mobile App: Navigate to My Profile → Delete Account, enter the confirmation phrase, verify your 6-digit email OTP, and confirm deletion; or
- Via Public Web Portal: Visit our dedicated self-service deletion portal at https://familyhub247.com/delete-account.
What Happens Upon Deletion: Your authentication identity, personal profile, contact information, photos, directory entries, and device tokens are permanently erased across all associations.
Financial Audit Exception: In compliance with corporate governance, financial audit regulations, and tax reporting laws, historical payment ledgers (such as dues and levies previously remitted) are preserved in an anonymized format attributed to [Deleted User]. This ensures association financial statements and audit balances remain accurate without preserving personal identity.
10 Your Legal Privacy Rights
Depending on your jurisdiction, you have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you;
- Right to Rectification: Update or correct inaccurate or incomplete profile data;
- Right to Erasure: Request the deletion of your account and personal information;
- Right to Restrict Processing: Request that we limit the processing of your data under certain circumstances;
- Right to Withdraw Consent: Withdraw consent previously granted for specific data processing activities.
To exercise any of these rights, contact our Data Protection team at privacy@pentfieldtechnologies.com.
11 Cookies & Local Storage
We use essential cookies, local storage tokens, and session identifiers solely to maintain your authenticated login session, preserve your visual theme preference (light/dark mode), and remember your active association selection. We do not use invasive third-party tracking cookies or advertising pixels.
12 Changes to This Privacy Policy
Pentfield Technologies may update this Privacy Policy from time to time to reflect changes in our practices, software features, or legal obligations. When changes are made, we will revise the "Last Updated" date at the top of this document. For material changes, we will provide prominent in-app notification or email notice before the changes take effect.
13 Contact Information & Data Protection Officer
If you have questions, feedback, or concerns regarding this Privacy Policy or our data practices, please contact us at: