Privacy Policy
Last updated 6 November 2026
The short version
- We collect what it takes to run an apprenticeship and hold its Graduation Fund: your account and profile, verification documents, your agreements and milestones, payments, and basic device data.
- Parts of your profile are public. Your photo, trade or education details and workshop listing can be seen by others, so publish only what you are happy to share.
- We do not sell your data, show advertising, or use your Google or Apple account data for anything except signing you up.
- You can delete your account at any time, unless money or an agreement is still open. Financial records are kept for 7 years to meet our legal obligations, even after deletion.
1. Who we are
C-CUBE Network ("C-CUBE", "we", "us") runs a mobile app that formalises trade apprenticeships in Nigeria. Masters (artisans) and apprentices find each other, agree terms, track milestones, and build a Graduation Fund that C-CUBE holds with a banking partner until it is paid out.
C-CUBE is operated by Champions of Craft and Character Network Apprenticeship Mentorship Foundation, an incorporated trustee registered with the Corporate Affairs Commission under number 8998901, of 11 Olapeju Street, Mushin, Lagos State, which is the data controller for your personal data under the Nigeria Data Protection Act 2023.
This policy covers the C-CUBE mobile app, this website and our other C-CUBE web pages, such as certificate checks and invitation links.
2. What we collect
| Type of data | What it includes |
|---|---|
| Account | Your name, email address, password (stored only as a one-way hash), and whether you are a Master or an apprentice. An optional phone number. Your date of birth, which apprentices must give so we can check eligibility. |
| Profile | Your profile photo, gender, education level, last school attended, state, local government area and address. For apprentices, a guardian or next-of-kin's name, phone number and relationship to you. For Masters, your business name, trade, portfolio images and workshop listings, including their address, hours and photos. |
| Verification documents | Images you upload for review, such as a passport photograph, proof of address, or evidence of your trade like workshop photos or certificates. We do not ask for your National Identification Number (NIN) or Bank Verification Number (BVN). Any ID slip you choose to upload is handled in the same way as these documents. |
| Apprenticeship records | Requests, offers and counter-offers, signed terms including your typed-name signature, milestones and evidence photos of your work, early-ending requests, disputes you raise or that name you, and certificates. |
| Payments | Instalment amounts, dates and references, your Graduation Fund's balance and history, and payouts. Your bank name, account name and account number if you add a payout account. Card and bank details entered at checkout go directly to Paystack: we never see or store your full card number. |
| Device and usage | An app-install identifier (stored only as a hash), your device name and platform, IP address, user agent, when you last used the app, and a push notification token if you turn notifications on. We keep a log of security and money events, such as sign-ins, signatures and payout requests, with the IP address they came from. |
| Details other people give us | A Master who invites you enters your name and email address so we can send you the invitation. Your guardian's details come from you, so please tell them you have shared them. |
What we do not collect. We do not collect your precise location, your contacts, an advertising identifier, or your activity in other apps. If you use fingerprint or face unlock, that check happens on your device and we never receive your biometric data. Photos are only taken from your camera or gallery when you choose to add one.
3. Signing up with Google or Apple
You can create your C-CUBE account with an email code, or by using Google or Apple to prove that you own your email address. We only use Google and Apple at sign-up, and you still set a C-CUBE password afterwards.
- What we receive. From Google or Apple we receive a signed token with your email address, confirmation that the address is verified, and your name. Apple may give us a private relay address if you choose to hide your email. In that case, the relay address becomes your C-CUBE sign-in email.
- What we do not ask for. We do not request access to your Gmail, Google Drive, Google Contacts, iCloud, or any other Google or Apple data, and we never see your Google or Apple password.
- How we use it. Only to verify your email address and pre-fill your name when your account is created.
- How we store it. Your email address and name are stored as part of your C-CUBE account, as described in this policy. We do not keep the token or any Google or Apple account identifier.
- How we share it. We do not sell or transfer this data to anyone, and do not use it for advertising or to train AI models. It reaches other parties only as your account's email address and name, for the purposes in section 6.
- How to disconnect. Remove C-CUBE at myaccount.google.com/connections or in your Apple ID settings under "Sign in with Apple". Your C-CUBE account will keep working with your password. To delete the data itself, see section 11.
C-CUBE's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Why we use your data
| Purpose | Legal basis |
|---|---|
| Create and secure your account, and confirm new devices or password resets by email code | Contract |
| Connect Masters and apprentices, run negotiations, agreements and milestones, and issue certificates | Contract |
| Collect instalments, hold Graduation Funds, pay payouts and reconcile our records | Contract and legal obligation |
| Check that apprentices meet the age requirement and review Masters' trade evidence | Contract and legitimate interest in a trustworthy marketplace |
| Prevent fraud and abuse, keep security logs, and handle disputes | Legitimate interest and legal obligation |
| Show your public profile and portfolio, and send push notifications | Consent. You can remove these items or turn notifications off at any time |
| Send an invitation when a Master asks us to | Legitimate interest in bringing existing apprenticeships onto C-CUBE |
We calculate each Master's reputation score automatically from completed apprenticeships, time since verification and verification status. It affects how Masters are ordered in search, but it is not used to make decisions with legal effects about you. Approvals of Masters and payouts are made by people.
5. What others can see
- Anyone, without an account: public profile details and images, including your name, photo, portfolio, gender, education, state and local government area; Masters' workshop listings with their address; and a certificate's details to anyone who has its verification code, including names, trade, period and milestone count.
- Signed-in C-CUBE users: also the phone number on your public profile, if you gave one, so they can contact you. Others see your age rather than your date of birth. An apprentice can choose not to be listed in the apprentice directory.
- The other party in your apprenticeship: your agreement, signatures, milestones, evidence photos and the timeline of payments and payouts.
- C-CUBE administrators: what they need to review evidence, handle disputes, and approve payouts. Their access to documents is by short-lived link and their actions are logged.
Your email address, street address, guardian's details, bank account and verification documents are never shown on your public profile.
6. Who we share data with
We do not sell your personal data, and we do not share it for advertising. We share it only with these service providers, as needed to run C-CUBE:
| Provider | What it does | Data it handles |
|---|---|---|
| Paystack | Collects payments and sends payouts | Name, email, payment details, amounts, and payout bank account |
| Our banking partner | Holds Graduation Funds | Payout and fund records, including who requested a withdrawal and when |
| Railway | Hosts our servers, database and file storage, in Europe | All data described in this policy |
| Resend | Sends email | Email address, name, and the content of the email |
| Google Firebase Cloud Messaging and Apple Push Notification service | Deliver push notifications | Push token and notification content |
| Google and Apple | Sign-up, if you choose it, and app distribution | See section 3. Each has its own privacy policy |
We require these providers to protect personal data to a standard consistent with this policy and to use it only to provide their service. We may also disclose data when the law or a valid legal request requires it, to protect people's safety or rights, or as part of a merger or sale of the business, in which case this policy continues to apply.
7. Data stored outside Nigeria
Our servers and files are in Europe, and several of our providers are based outside Nigeria, including in the United States. When data leaves Nigeria we rely on the safeguards allowed by the Nigeria Data Protection Act 2023, such as contractual protections, and on what is necessary to perform our agreement with you. You can ask us for details of these safeguards using the contact details below.
8. How we protect your data
- All traffic between the app and our servers is encrypted in transit.
- Passwords and email codes are stored only as Argon2id hashes. Bank account numbers are encrypted with AES-256-GCM using keys held by us.
- Verification documents and evidence photos are in private storage and open only through short-lived links. They are held under our storage provider's encryption rather than under our own keys.
- Each payout needs a request from its recipient and approval from two different administrators.
- Admin access is checked on every request and the actions that matter are logged.
No system is perfectly secure. If a breach is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission and you as the law requires.
9. How long we keep it
| Data | How long |
|---|---|
| Name, email, phone, date of birth | Life of the account, then anonymised when you delete it |
| Public profile, photo, portfolio | Until you remove them or delete your account. Images are deleted from storage |
| Verification documents and milestone evidence photos | 24 months after the agreement ends, or when you delete your account |
| Payout bank account | Until you remove it or delete your account. A payout record keeps only the last four digits |
| Saved terms profiles | Until you delete them or delete your account |
| Invitations | Until the invited person's or the Master's account is deleted. An expired link's record is kept to show it was sent |
| Push tokens | Until you sign out on that device, remove the device, or delete your account |
| Devices and sign-in sessions | Life of the account. Devices are removed and sessions end when you delete your account |
| Financial ledger, instalments and payouts | 7 years, even if you delete your account |
| Security and audit log | 7 years, even if you delete your account |
| Signed agreements, offers and milestones | Kept after you delete your account as evidence of what was agreed and performed. They may still show your name as it was signed |
| Certificates | Indefinitely, so that they stay verifiable. Your name is removed if you delete your account |
10. Your rights
Under the Nigeria Data Protection Act 2023 you have the right to:
- Access your data and receive a copy in a portable format. You can export it from the app or ask us.
- Correct data that is wrong or incomplete, in the app or by asking us. Your date of birth and full name are fixed after sign-up, so contact us to correct them.
- Delete your data, as set out in section 11.
- Object to or restrict how we use your data where we rely on legitimate interest.
- Withdraw consent where we rely on it, for example by removing a photo or turning off notifications. This does not affect what we did before you withdrew it.
- Complain to the Nigeria Data Protection Commission. We would like the chance to put things right first, so please contact us.
Email privacy@ccubenetwork.com to exercise any of these rights. We will reply within one month and may need to confirm your identity first.
11. Deleting your account
You can delete your C-CUBE account and its associated data in either of two ways, without reinstalling the app or paying anything.
In the C-CUBE app
- Sign in and open your account's privacy settings.
- Choose to delete your account and confirm.
- We email you to confirm that deletion is scheduled. It happens 5 days later, and you can cancel it in the app until then.
Without the app
Email privacy@ccubenetwork.com from your account's email address with the subject "Delete my C-CUBE account". We will confirm the request and act on it within one month.
When deletion has to wait
We cannot delete an account while it would affect someone else's rights or money. This means you need to finish or resolve the following first, and we will tell you which apply:
- an active agreement or an open negotiation;
- an open dispute or early-ending request; or
- a Graduation Fund with money still in it, or a payout not yet requested or completed.
If one of these arises during the 5 days, we stop the deletion and email you. You can ask again once it is resolved.
What is deleted, and what is kept
Deleted or anonymised: your name, email, phone, date of birth, profile, guardian details, photos, portfolio, verification documents, evidence photos, payout bank account, saved terms profiles, your enrolled devices, invitations and push tokens. All your sessions end.
Kept: the financial ledger, instalments, payouts and audit log for 7 years; signed agreements and their milestones as evidence of what was agreed; and certificates indefinitely, with your name removed. We keep these to meet legal obligations and protect the other party. Your account no longer identifies you, and ledger entries show only an account reference and an amount, but a signed agreement still shows the names as they were signed.
12. Notifications
We send push notifications only if you allow them, for events like a new offer, a due payment, a milestone decision or a payout being ready. You can turn them off in your device settings. We also send emails needed to run your account and apprenticeship, such as codes, invitations and payment notices. We do not send marketing email without your consent.
13. This website
This website uses no cookies, analytics or advertising, and loads nothing from other companies. Our hosting provider may keep short-lived technical logs, including IP addresses, to keep the service secure and working.
14. Age limits
C-CUBE is for adults. Apprentices must be between 18 and 35 when they sign up, and Masters must be at least 18. We do not knowingly collect data from anyone under 18. If you think a child has given us their data, email privacy@ccubenetwork.com and we will delete it.
15. Changes to this policy
We will update the date at the top of this page whenever this policy changes, and will notify you in the app or by email before a significant change takes effect. We will ask for your consent where the law requires it.
16. Contact us
For privacy questions or to reach our Data Protection Officer, email privacy@ccubenetwork.com, or write to the Data Protection Officer, Champions of Craft and Character Network Apprenticeship Mentorship Foundation, 11 Olapeju Street, Mushin, Lagos State. For anything else, email support@ccubenetwork.com.