Privacy policy

Last updated: 11 October 2026

InsideLife is an online life game set in real Nigerian cities. This policy explains, in plain language, what personal data we collect when you play, sign in, chat, rent a business space or book an advert; why we collect it; who we share it with; how long we keep it; and the rights you have under the Nigeria Data Protection Act 2023 (NDPA).

1. Who we are

InsideLife is made and run by Cleset ("we", "us"). We are the data controller for the personal data described here.

InsideLife is a product of Cleset (cleset.com), the company behind the Cleset app. Cleset is Cleset Technology Limited, a company registered in England and Wales (company number 15992161). We follow UK data protection law (the UK GDPR and the Data Protection Act 2018) and, for players in Nigeria, the Nigeria Data Protection Act 2023 (NDPA).

You can reach us, including our data protection officer, at privacy@cleset.com.

2. What we collect

Your account

• If you sign in with Google: your name, email address, Google account ID and, if your Google account shares it, your profile picture. Google tells us who you are; we never see your Google password.
• If you sign in with email: your email address and your password. We store the password only as a one-way scrambled form (a hash), so nobody at InsideLife can read it.
• When you created your account and when you last signed in.

Your game

• Your character: the name you choose, how they look, and where they are in the game world.
• What you do in the game: jobs, wages, rent, your home, cars, kiosks, staff you hire, trades with other players, and your game money balance and its history. Game money is not real money (see our terms).
• Your settings, such as sound and graphics.

Chat, blocks and reports

• Messages you send in the game, and who they were sent to or near.
• Players you block, reports you make, reports made about you, and any moderation action taken (for example a mute or a ban).

If you rent a business space or book an advert

• Your business profile: business name, contact name, email, phone number, address, and, if you give them, your CAC number and website.
• What you upload: logos, photos, captions, opening hours and advert artwork.
• Your bookings and leases, and records of your payments (see section 5).

Technical data

• Your IP address, device and browser type, operating system, app version and language.
• Server logs and crash reports, which help us find and fix problems.

Cookies and browser storage

The game and our booking pages store a sign-in token and your settings in your browser or on your phone, so you stay signed in. We do not use advertising or tracking cookies. This website uses no cookies; the "Live from Lagos" numbers on the home page are counts only and contain no personal data.

3. Why we use it, and our legal basis

The law lets us use personal data only when we have a lawful basis. Ours are:

We do not sell your personal data, and we do not use it to show you adverts from other companies outside the game. The billboards inside the game are the same for every player; they are not targeted at you.

4. Chat and moderation

• Every chat message passes an automatic word filter before other players see it. Phone numbers and similar contact details may be hidden, to protect players from scams.
• When a player reports someone, our moderators can read the reported messages and the messages around them, to decide what happened.
• Moderators can mute or ban players. Every staff action is recorded with who did it and why.
• We do not read private conversations for any other reason.

5. Card payments

Businesses and advertisers pay by card through a licensed Nigerian payment provider (Paystack or Flutterwave). Your card details go straight to the provider; we never see or store your full card number or security code. We receive and keep the payment reference, the amount, the date, whether it succeeded, and, where the provider gives them, the card type and its last four digits.

Game money cannot be bought for, or cashed out as, real money.

6. Who we share it with

• Other players see your character name, how your character looks, where your character is, and the chat you send. Approved business profiles and adverts are shown to every player.
• Service providers who work for us under contract and only on our instructions: hosting and storage, our payment provider, Google (for Google sign-in), email delivery, and crash reporting.
• App stores (Google Play and the Apple App Store), which handle app downloads and any in-app purchases under their own privacy policies.
• Authorities, when the law requires it, or when we need to protect someone from serious harm.
• A buyer of our business, if InsideLife is ever sold or merged, under the same protections as this policy. We will tell you first.

7. Data stored in other countries

Cleset is based in the UK, and our servers or our service providers may be in the UK, Nigeria or other countries. When your data moves between countries we make sure it stays protected as the law requires: the country has adequate data protection, or we use contract terms and other safeguards that UK law and, for players in Nigeria, the Nigeria Data Protection Commission accept.

8. How long we keep it

9. How we protect it

We use encrypted connections (HTTPS), store passwords only as hashes, limit staff access by role, require staff to sign in with a second factor, record every staff action, and back up our database every night. No system is perfectly secure. If a breach puts your rights at risk, we will tell the Nigeria Data Protection Commission and, where the law requires, tell you without undue delay.

10. Children and young players

• You must be at least 13 to play InsideLife.
• If you are under 18, a parent or guardian must agree to you playing and to this policy before you create an account, as the NDPA requires for children.
• You must be 18 or older to rent a business space or book an advert.
• If we learn that a child under 13 has an account, or that a player under 18 has none of the consent above, we will close the account and delete its data. Parents can contact us to ask for this.

11. Your rights

Under the UK GDPR and, if you are in Nigeria, the NDPA, you have the right to:

• be told how your data is used (this policy);
• get a copy of your personal data;
• have wrong or incomplete data corrected;
• have your data deleted, unless we must keep it by law;
• restrict how we use it, or object to our use of it based on legitimate interests;
• receive your data in a common, machine-readable format (data portability);
• withdraw consent at any time, where we rely on consent;
• not be subject to a decision based only on automated processing that has legal or similarly serious effects on you.

To use any of these rights, email privacy@cleset.com from the address on your account. We may ask you to confirm who you are. We will answer within the time the law allows, and we aim to answer within 30 days. Using your rights is free.

If you are not happy with our answer, you can complain to the UK Information Commissioner's Office (ico.org.uk) or, if you are in Nigeria, the Nigeria Data Protection Commission (ndpc.gov.ng).

12. Deleting your account

You can delete your account at any time: in the game (phone, then Settings, then Delete my account), on the web at insidelife.cleset.com/account/delete, or by emailing us. When an account is deleted, its sign-in, character, game money, home, cars, kiosks and items are gone for good. We keep only what the law requires (for example payment records) and moderation records, for the times in section 8.

13. Changes to this policy

If we change this policy, we will update the date at the top. If the change is important, we will tell you in the game or by email before it applies.

14. Contact us

Questions about privacy: privacy@cleset.com.