Privacy Policy

Last updated 23 October 2026

In short

Amah is run by Stackcoding Technologies, a registered Nigerian business. We are the data controller.
We collect what the app needs to work: your email, the name and avatar you choose, your room, and what you create and play inside it.
What you share in a room is visible only to the people in that room: your partner in a couple room, or the members of a friend room. Our team does not read your messages, notes, answers, photos or voice notes, except when you report something to us or the law requires it.
We never sell your data and we don't show ads.
After Dark choices can reveal information about your sex life, which the law treats as sensitive. We only process it with your explicit consent, and you can withdraw it at any time.
You can see, download, correct or delete your data. Deleting your account deletes what you created.
Amah is for people aged 18 and over.

This policy explains what personal data Amah (“Amah”, “we”, “us”) collects, why, who we share it with, how long we keep it and the rights you have. It is written to meet the Nigeria Data Protection Act 2023 (“NDPA”) and the Nigeria Data Protection Commission's General Application and Implementation Directive 2025 (“GAID”). Where people outside Nigeria use Amah, we apply the same protections.

1. Who we are

Amah is operated by Stackcoding Technologies, Business Name Registration No. 9598602 (Corporate Affairs Commission, Nigeria), of 65 Adebiyi Street, Joyce B, Ring Road, Ibadan, Oyo State, Nigeria. We decide why and how your personal data is processed, so we are the “data controller” under the NDPA. For anything about your data, email us at stacktechnologies0@gmail.com.

2. What we collect

Information you give us

Account: your email address, used to sign you in with a one-time link, or the name and email Google shares if you sign in with Google.
Profile: the display name, avatar and colour you choose, and your confirmation that you are 18 or older.
Your rooms: each room's name and kind, who is in it (and, for friend rooms, who owns it), invite codes, room settings (like house rules), the room you opened last, and anyone you have blocked.
What you create and play: game moves and results, Daily Question answers, chat messages, voice notes, stickers you make, love notes, Memory Lane photos and captions, bucket-list items and similar content.
After Dark (optional, 18+): your age confirmation and opt-in, your heat limit, a hashed (scrambled) PIN, custom cards you write and your Fantasy Match picks. See section 5.
Feedback, reports and support: what you send us, and when you report a message, a copy of that message.
Preferences: theme, sounds, data-saver mode, announcement emails and notification settings.

Information collected automatically

Technical data: IP address, browser and device type, and timestamps, which our hosting providers record in their logs to keep the service running and secure.
Error reports: when something breaks, a report of the error (what failed, the page, browser and device). We configure this to leave out the content of your messages and your email address.
Push notifications: if you turn them on, a technical address your browser gives us so we can send notifications to that device.
Usage counts: we count things like sign-ups, active days and games played, to understand how Amah is used. These are totals, not a record of what you said.

We do not use advertising trackers, and we do not buy data about you from anyone.

3. Why we use it, and our lawful basis

Purpose	Lawful basis (NDPA s. 25)
Creating your account, signing you in, running your room, games, chat and other features	Performing our contract with you (the Terms of Service)
After Dark	Your explicit consent (NDPA s. 30), which you can withdraw at any time
Push notifications	Your consent, given when you turn them on
Announcement emails about new games and important news	Our legitimate interest in telling you about the service, with an unsubscribe link in every email and a switch in your settings
Keeping Amah safe: preventing abuse and spam, handling reports, suspending accounts that break the rules, and fixing errors	Our legitimate interests, and yours, in a safe and working service
Usage totals and improving Amah	Our legitimate interest in understanding and improving the product
Meeting legal obligations and responding to lawful requests	Legal obligation

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who can see what

People in your friend rooms see your name and avatar, your messages, voice notes and stickers in that room's chat, the games you play there and their results. They never see anything from your couple room.
Your partner sees what you share in your couple room: your name and avatar, your moves, messages, voice notes, notes and photos. That is the point of Amah. Some things stay hidden from them by design, such as your Daily Question answer until they answer too, your hand in card games, sealed notes before their date, and Fantasy Match picks that don't match.
Our team can see account facts (email, name, sign-up date, last activity, whether you are paired), counts and anything you send us directly. Our tools are built so that we do not see your room's content. The exceptions are a message you report (we see that message and its context) and where the law requires access.
No one else in Amah can see your room.

5. After Dark and sensitive data

After Dark is an optional section for adults. Your choices there (opting in, your heat limit, custom cards and Fantasy Match picks) can reveal information about your sex life, which the NDPA treats as sensitive personal data. We process it only with your explicit consent, which you give when you opt in on your own phone. You can withdraw consent at any time by switching After Dark off. That locks it for both of you. Your custom cards and picks stay stored privately so they are there if you both opt in again, and you can delete them yourself or ask us to.

Fantasy Match is designed so your partner only ever sees the items you both picked. Your other picks are never shown to them, and they are not shown to our team either.

6. Who we share data with

We share personal data only with service providers who process it for us under contract, and only as needed to run Amah:

Provider	What for	Where
Supabase	Database, sign-in, file storage and real-time updates	Ireland (EU)
Vercel	Hosting the app and its servers	Ireland (EU) and a global network
Google	Sending emails (sign-in links, announcements), and Google sign-in if you choose it	Global
Sentry	Error reports, so we can fix problems	Germany (EU)
Your browser's push service (Google, Apple, Mozilla or Microsoft)	Delivering notifications you've turned on	Global

We may also disclose data if the law requires it, to protect someone from serious harm, or as part of a sale or reorganisation of our business. In that case we will tell you, and this policy will continue to protect your data. We never sell your personal data.

7. International transfers

Our providers store and process data outside Nigeria, mainly in the European Union, and in some cases the United States. Under the NDPA (Part VIII), we only transfer personal data abroad where the destination provides adequate protection or where appropriate safeguards are in place. These include our providers' data processing agreements and standard contractual clauses, together with their security certifications. You can ask us for more detail at stacktechnologies0@gmail.com.

8. How long we keep it

Account and profile: until you delete your account.
Room content (messages, voice notes, notes, photos, answers, game history): while your room exists. If you leave a couple room, your partner keeps the room and its shared history. If you leave a friend room, the others keep it, including messages you sent there. When the last person leaves any room, the room and its content are deleted. If you delete your account, what you created is deleted.
Reports and feedback: up to 2 years, so we can handle repeat problems, then deleted.
Error reports: up to 90 days.
Server logs kept by our hosting providers: usually up to 30 days.
Suspended accounts: kept while the suspension is in force, so the person can't simply sign up again to continue the abuse.

We may keep information longer only where the law requires it.

9. Your rights

Under the NDPA you have the right to:

be informed about how your data is used (this policy);
access your data and get a copy of it in a common electronic format (portability);
correct data that is wrong or incomplete;
delete your data. You can delete your account yourself in Settings, or ask us;
restrict or object to processing based on our legitimate interests, including announcement emails;
withdraw consent at any time (for example, switching off After Dark or notifications), without affecting processing that happened before;
not be subject to decisions based solely on automated processing; and
complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

To use any of these rights, email stacktechnologies0@gmail.com from the address on your account. We may ask you to confirm it's you. We will respond within 30 days and free of charge, unless a request is clearly unfounded or excessive.

10. How we protect your data

Every database table is locked by row-level security, so only the two members of a room can read that room's data.
Hidden game information (like the other player's cards) stays on our servers and is never sent to your partner's phone.
Photos and voice notes are stored privately and opened through short-lived signed links.
Your After Dark PIN is stored only as a scrambled hash.
All traffic is encrypted in transit (HTTPS), and our providers encrypt stored data.
Admin access is limited, checked on every action, and never includes room content.

No system is perfectly secure. If a personal data breach is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it. Where the risk to you is high, we will also tell you directly and explain what to do.

11. Age limit

Amah is only for people aged 18 or over, and everyone confirms this when they set up their profile. We do not knowingly collect data from anyone younger. If we learn that an account belongs to someone under 18, we will delete it. If you believe a child is using Amah, tell us at stacktechnologies0@gmail.com.

12. Cookies and on-device storage

We use only what the app needs: a sign-in cookie to keep you logged in, and your browser's local storage for conveniences like your theme, recent stickers and dismissed announcements. Amah also stores some files on your device so it opens quickly and works offline. We do not use advertising or cross-site tracking cookies.

13. Changes to this policy

If we change this policy in a way that matters, we will update the date above and ask you to review and accept it the next time you open Amah. Small corrections may be made without notice.

14. Contact

Stackcoding Technologies, 65 Adebiyi Street, Joyce B, Ring Road, Ibadan, Oyo State, Nigeria. Email: stacktechnologies0@gmail.com. See also our Terms of Service and 18+ notice.