PRIVACY UPDATE · 3 OCTOBER 2026

Clear rules for conversations with value.

The visitor and security privacy notice describes this release. Commercial terms and payment rules remain subject to Nigerian legal and data-protection review before commercial launch.

TERMS

Terms of Service

1. Agreement

These Terms govern your access to CudiChat, a private paid-response communication service operated by Amanovations International. By creating an account or using CudiChat, you confirm that you understand and accept these Terms, the Privacy Notice, Community Standards and Payment Terms.

2. Eligibility and accounts

You must be at least 18 years old and legally capable of entering a contract. Register with accurate information, keep your credentials and authentication factors secure, and use only one personal account unless CudiChat gives written permission. You are responsible for activity performed through your account until you report unauthorized access.

3. Connections and communication

CudiChat does not provide a public phone-number directory. Users connect through Cudi Codes and approved requests. You may not scrape contacts, send unsolicited bulk requests, impersonate another person, harass users or evade a block, restriction or ban.

4. Paid responses

A sender authorizes the displayed response price when submitting a paid request. Each user sets a response time from 15 minutes to 8 hours. CudiChat shows the remaining value-protection time on the paid message; if no response arrives before that deadline, the reserved value is returned and the request becomes free. Any genuine non-empty text response—including a short reply such as “ok”—can qualify, with no 150-word minimum or 350-word ceiling. Artificial padding, copied material, silence, loops or irrelevant content do not qualify. A qualifying responder receives 95% and CudiChat retains 5%.

5. Status and advertising

Status videos may be up to 5 minutes. New statuses expire from view after the selected duration of 1 to 12 hours (12 hours by default) and are scheduled for server deletion within 7 days, subject to legal preservation or active safety investigation. Existing statuses keep their original expiry. Private statuses are limited to accepted contacts; Public statuses may be discovered by every CudiChat user through interest channels. Viewing is not anonymous: the author can see the viewer's display identity and viewing time. New ads use the selected audience and run for 1 to 92 hours from first approval; pausing and resuming does not restart that duration. Existing campaigns keep their original dates. Ads must be clearly labelled, lawful and accurate.

6. Enforcement

We may warn, restrict features, freeze withdrawals, suspend or permanently ban an account to protect users, comply with law, investigate fraud or enforce these Terms. Material decisions will include a reason where legally permitted and may be appealed through Support. We do not need to decrypt private messages to act on account metadata or material deliberately submitted in a report.

7. Service and liability

CudiChat is provided on an as-available basis. We do not guarantee uninterrupted delivery, income, response quality or that every paid request will receive a reply. To the maximum extent permitted by law, indirect or consequential losses are excluded. Nothing in these Terms removes rights that cannot legally be excluded.

8. Changes and governing law

Material changes will be announced before taking effect where required. Continued use after the effective date means acceptance. These Terms are governed by the laws of the Federal Republic of Nigeria, without preventing users from relying on mandatory consumer rights in their location.

PRIVACY

Privacy Notice

Visitor and installation records · updated 10 October 2026

Optional visitor analytics are off until you choose Allow analytics. With that choice, CudiChat assigns a random first-party browser or installation ID and records visits, first/last visit times, device type, operating system, browser/app version, available model information, observed public IP and approximate network city, region and country. The main website uses a restricted CudiChat connection to the same app collection service, so a visitor record can be linked when you later sign in. A visit is a 30-minute visit session, not every click. The Visitors register represents unregistered browsers/installations, not verified people, and cannot count a download that has never opened and connected. Clearing storage, reinstalling or using another browser can create another ID. We do not use hardware serial numbers, IMEI, MAC addresses, advertising IDs, hidden device fingerprinting or GPS for this feature.

Referral tags and search terms

With optional visitor analytics enabled, we record the external referring website's hostname and supplied campaign fields (source, medium, campaign and term). Supported Android builds can read those same campaign fields from Google Play's install referrer after consent. We do not store a full referring URL, unrelated query parameters, advertising click IDs, browsing history or an inferred search query. Search engines and stores often do not provide a keyword. Our acquisition labels classify available evidence; they are not AI claims about a person's interests or identity. No visitor data is sent to an AI provider for this feature.

Account linking and necessary security history

After a verified sign-in or registration, the current visitor record can be associated with that account and no longer appears in the unregistered Visitors list. Necessary account-security records are separate from optional analytics. They record an app/browser device reference, login and session references, timestamps, observed IP and approximate network location to help protect accounts and investigate abuse. Encryption-key device records remain separate. Shared IP addresses do not establish that two accounts belong to one person. We use contract and legitimate security interests where applicable, subject to applicable law; optional visitor/acquisition analytics rely on consent.

Location and VPN limitations

IP-derived locations are estimates of a network connection, not proof of where a person lives or is physically present. A VPN or proxy may show its exit location. CudiChat does not uncover a hidden original IP or label a VPN exit as a person's real location. VPN status is Unknown unless a supported detection source actually supplies a result. Network or location changes alone do not establish wrongdoing and are not used as a sole basis for an adverse account decision.

Privacy choices and access controls

Choose Essential only on cudichat.com to use the service without optional visitor analytics. You can reopen these choices using Usage settings on that website, withdraw optional consent and request removal of that browser's visitor history. App screens do not display the website notice, and registration does not enable optional analytics. Recognised Global Privacy Control and Do Not Track signals keep optional analytics off. Necessary authentication/security records continue independently. Only authorised administrators can access the protected register; IPs are masked in ordinary lists and access to full network details is restricted and audited. Authentication passwords, live access/refresh tokens and private-message encryption keys are not displayed in these records.

Security and visitor retention

Optional visitor events are retained for up to 30 days; the visitor summary and cookie expire at a fixed 30 days from the first visit. Repeat visits do not extend that expiry. Account security observations, network history and session-history details expire after 90 days. Expired records are excluded from the interface immediately and are queued for physical deletion; database expiry deletion can take additional days. Minimal token-revocation controls, without IP/location/device-model history, may remain until the relevant authentication token expires (the current maximum refresh lifetime is ten years), so a revoked token cannot become valid again when history expires. Backups follow the hosting service's recovery lifecycle and are not used as the active visitor register. Account deletion also removes linked visitor/security data, subject to specific lawful preservation obligations. We do not reconstruct missing historical visits or locations.

What we collect

Account details such as first name, last name, date of birth, phone number, email, user ID and profile information; verification submissions; payment, balance and transaction records; device identifiers, operating system, browser, app version, IP history and approximate location; login, linked-device, security and support events; contacts you approve inside CudiChat; status audience, interest channel, viewing, interaction and advertising records. Your exact date of birth remains private and is used for age eligibility and account administration. Your device address book is not uploaded unless a future feature clearly asks for separate permission.

Status visibility and insights

When you view a Private or Public status, the author can see your display name, profile photo, verification state, contact/public relationship and viewing time. A status view is not anonymous. Authors may also receive aggregated age-band, audience, country, Nigerian state or region, completion and views-over-time analytics. We do not expose a viewer's phone number, exact birth date, IP address or precise location through status insights.

Chat display protection

Private chat does not require an always-on front camera and does not inspect the camera for external recording devices. The chat can be hidden manually and is covered when the app goes into the background; playback is paused. A compatible Android app enables native secure-window protection for private chat and reports when it is active. Older app builds and browsers cannot claim this protection. Native iOS capture handling is not implemented in this build. An optional pseudonymous session watermark is a deterrent, not a guarantee against copying, recording or screenshots.

Screenshot event notices

Where a supported operating-system screenshot callback is available, CudiChat may send a notice to conversation participants using the authenticated account/device reference, conversation reference, event ID, event type and time. No screenshot image, camera feed or chat content is automatically submitted with that event. Notices are reports from the app on a device, not independent proof of who physically used it, and some captures cannot be detected. Android secure-window blocking does not supply screenshot-attempt notifications. Detection can occur after an image has already been saved.

Message permissions and saved recordings

In-app sharing and forwarding actions use approval for the selected message version and destination. Permission requests and decisions use metadata; quoted replies and forwarded message contents are encrypted for their recipients. For a recipient, the first authorized play of a paid audio or video message is charged. Further plays require the message to be saved in CudiChat and a new sender approval; approved replays are free. Saving retains the encrypted message in CudiChat and does not export a plaintext recording. Decrypted playback buffers are temporary on the device, not plaintext media uploads. These controls are not digital-rights management and cannot recall copies a participant has made outside the app.

Encrypted communications

Private chat messages and voice notes are designed to be end-to-end encrypted. CudiChat administrators must not possess the keys needed to decrypt them. We may receive unencrypted content only when a participant deliberately reports and submits that specific content, or where limited technical metadata is necessary to operate the service.

Why we process data

To create and secure accounts; deliver private statuses to accepted contacts and public statuses to all CudiChat users; provide messaging, connections, advertising and payment functions; verify identity; process account funding, paid responses and withdrawals; detect account takeover, fraud and abuse; provide support; comply with financial, tax, legal and regulatory duties; improve reliability; and send service or security notices. Where required, processing relies on contract, legal obligation, legitimate interests or consent.

Sharing

We may share only necessary information with hosting, identity, communications, security, analytics and payment providers acting under contract; payment counterparties; professional advisers; regulators, courts or law enforcement where legally required; and a successor in a lawful business transaction. We do not sell private chat content or phone numbers.

Other retention

The visitor and security-specific periods above apply to the new identity history feature. Separate account, payment, verification and audit records are kept only as needed for the service, disputes, fraud prevention and applicable law. New status content expires from view after the selected duration of 1 to 12 hours (12 hours by default) and is scheduled for deletion within 7 days. Existing statuses keep their original expiry. Deleted accounts are erased or anonymized except records retained for a specific lawful payment, security or dispute purpose. Country-specific financial and legal retention schedules require compliance review before commercial launch; they are not permission to retain visitor history indefinitely.

Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. You may remove linked devices, manage notification choices, block connections and request account deletion in the app or through the public deletion page. You may complain to the Nigeria Data Protection Commission or another competent regulator.

International transfers and security

Service providers may process data outside Nigeria. We will use appropriate contractual and technical safeguards. Security measures include encryption, least-privilege administration, MFA, device linking, risk monitoring, session revocation and audit trails. No system is perfectly secure; confirmed breaches will be handled and notified as required by law.

Children and contact

CudiChat is not intended for anyone under 18. Privacy questions, rights requests, data-deletion requests and complaints may be submitted through CudiChat Support or by email to reports@cudichat.com.

COMMUNITY

Community & Safety Standards

Respect and consent

Do not threaten, harass, shame, stalk, sexually exploit, discriminate against or repeatedly contact a person who has declined, blocked or removed you. Never publish another person’s phone number, identity documents, private images or location without permission.

Prohibited activity

No child sexual exploitation, non-consensual intimate content, trafficking, credible threats, terrorism support, fraud, phishing, malware, illegal goods, money laundering, impersonation, extortion, spam, coordinated manipulation or attempts to bypass platform safeguards.

Authentic paid responses

Do not use copied text, meaningless padding, silent recordings, loops or automated spam to trigger payment. AI assistance must not misrepresent professional qualifications or deceive the sender about the origin or quality of a response.

Reporting and review

Users can report an account, connection request, status, ad, payment or specific message they choose to submit. Reports should include a category and context. Safety reviewers see only the submitted evidence and relevant metadata, not unrelated encrypted conversations. Malicious or knowingly false reports may be sanctioned.

PAYMENTS

Payments, Earnings & Withdrawals

Funding and authorization

Account funding is processed through approved payment providers. By confirming a paid request or image upload, you authorize the displayed amount and applicable fees. Every uploaded photo or image is charged at the recipient’s displayed Image Value. CudiChat-provided emojis and expression files are free to send. CudiChat is not a bank, and an available balance is not a bank deposit or savings product.

Revenue share and fees

For each qualifying paid response, the responder receives 95% and CudiChat receives 5%. A separate 7% withdrawal charge applies to the requested withdrawal amount: 70% of that charge goes to CudiChat and 30% goes to the verified code-share owner for that user. External payout fees are added separately. All charges must be displayed before confirmation.

Withdrawal security

Every withdrawal requires both a valid Google Authenticator code and a fresh email verification code. Neither factor can replace the other. New or newly linked devices are subject to a minimum 24-hour withdrawal lock. We may delay a withdrawal for verification, chargeback, fraud, sanctions or legal review.

Disputes and reversals

Users must report payment problems promptly through Support. Fraudulent funding, chargebacks, duplicate settlement, manipulated qualifying content or provider reversals may cause a balance adjustment, temporary hold or account restriction. Records and appeal reasons will be preserved in the audit trail.

Taxes and store billing

Users are responsible for taxes applicable to their earnings. Mobile-store billing treatment must be confirmed before launch because Apple and Google may impose platform-specific rules on digital services, creator payments and external payment methods.

SUPPORT

Reports, Tickets & Appeals

Ticket process

Support tickets receive a unique ID, category, priority, status, assigned reviewer and immutable activity history. We may request additional information but will never ask for your password, full authenticator secret or one-time verification code.

Safety priority

Immediate danger, child safety, credible threats, account takeover and unauthorized withdrawals receive priority handling. CudiChat is not an emergency service; contact local emergency services where immediate assistance is required.

Appeals

Users may appeal restrictions or bans through Support. An appeal should be reviewed by someone other than the original decision-maker where practicable. Repeated appeals without new information may be closed.