Privacy Policy
Last updated October 2026.
Heyra Privacy Policy
Heyra is a private messaging app. This policy explains what personal data RAE HORIZON TECHNOLOGIES LIMITED ("we") handle when you use Heyra, why, and what rights you have. We process personal data in line with the Nigeria Data Protection Act 2023 and other laws that apply to you.
Who is responsible
RAE HORIZON TECHNOLOGIES LIMITED is the data controller. Address: 1 GEORGE UBOH STREET,MAITAMA 2 FCT ,NIGERIA. To ask a question or use your rights, email support@raehorizontechnologieslimited.com.
What we collect and why
| Data | Why we need it |
|---|---|
| Phone number, name, about text, profile photo | To create your account, let people find and recognise you, and sign you in. |
| Contacts (only if you allow access) | Phone numbers from your address book are sent to our server to check which of them use Heyra. We do not keep the numbers of people who are not Heyra users. |
| Messages | Direct chats are end-to-end encrypted: we cannot read them. We store the encrypted message and delivery details so it reaches the recipient. Group and channel messages are stored so members can read them. |
| Photos, voice notes, files, statuses | Stored in cloud storage so the recipient can download them, until you or the chat deletes them. |
| Call details | Call audio and video go directly between devices where possible, or through relay servers. We keep call metadata such as time, duration and participants. |
| Device information, push notification token | To deliver message and call notifications, and to keep your account secure. |
| Safety reports and blocks | To investigate abuse. A report you send may include the reported message so it can be reviewed. |
We do not sell your data and we do not show advertising.
Legal bases
We rely on your consent (for example contacts access and notifications), the need to provide the service you asked for, our legitimate interest in keeping Heyra safe, and legal obligations.
Who we share it with
Only service providers that help us run Heyra, under their own data protection terms: cloud hosting and database (Railway), file storage (Cloudflare), phone verification and push notifications (Google Firebase) and, for Nigerian numbers where enabled, a local SMS provider (Termii). Some of these providers store data outside Nigeria. When data leaves Nigeria we rely on the safeguards the law allows. We may also disclose data when the law or a court requires it.
How long we keep it
We keep your data while your account is active. When you delete your account we remove your name, photo, about text and phone number from our records and sign out your devices. Messages you sent may remain in other people's chats. Backups are overwritten on a rolling schedule. We keep limited records where the law or abuse prevention requires it.
Your rights
You can ask to access your data, correct it, delete it, restrict or object to its use, receive a copy in a portable form, and withdraw consent at any time. Most of this is available in the app: edit your profile, change privacy settings (last seen, read receipts, who can add you), block or report users, and delete your account (Profile, Delete account). For anything else, email support@raehorizontechnologieslimited.com. You can also complain to the Nigeria Data Protection Commission (NDPC).
Security
Data travels over encrypted connections, direct chats are end-to-end encrypted, and access to our systems is restricted. If a breach puts your rights at risk we will notify you and the NDPC within the time the law requires.
Children
Heyra is not for children under 13, and we do not knowingly collect their data. If you think a child has an account, tell us and we will remove it.
Cookies and analytics
The RAE Horizon website sets no cookies and uses no analytics or advertising trackers. The Heyra app keeps sign-in data on your device so you stay signed in, and it does not use advertising cookies.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.