Privacy Policy

Last updated 31 July 2026

This policy explains what personal information FMT Prime Facility Management collects through the FMT Prime Resident mobile app and the associated resident and management web portal, why we collect it, who we share it with, and the choices you have. It applies to residents, their authorised occupants, and estate staff who use the system.

1. Information we collect

We collect only what the service needs in order to manage your residence. We do not sell your personal information, and we do not use it for advertising or behavioural profiling.

Category	What it includes	Why we need it
Account and identity	Your name, email address, phone number and encrypted password.	To create your account, sign you in and recover access.
Residence details	The estate, building, floor and unit you occupy, your occupancy start and end dates, and your resident status.	To show you information for the correct property and route requests to the right facility team.
Billing and payments	Service charge invoices, utility and diesel charges, meter readings, payment records, amounts, dates and payment references or receipts you upload.	To bill you accurately and keep a statement of your account.
Requests and reports	Maintenance requests, incident reports, facility bookings and any photos, descriptions or comments you attach.	To log, assign, action and track the work you ask for.
Visitor passes	The name, phone number, purpose of visit and expected arrival time of guests you register.	To let estate security verify and admit your guests.
Device and technical	A push notification token, device platform (Android or iOS), a device label, app version, and security logs including IP address and sign-in times.	To deliver notifications to your device and to detect and investigate unauthorised access.

What we do not collect

The app does not track your location, does not read your contacts, calendar, messages or call history, and does not access files outside the images you deliberately choose to attach to a request. We do not store card numbers or bank credentials.

2. How we use your information

To provide the resident portal: your unit, statements, invoices and request history.
To process and track service charge and utility payments, and to issue receipts.
To receive, assign and resolve maintenance requests and incident reports.
To issue and verify visitor passes at the gate.
To send you notifications about payments, requests, bookings, security alerts and estate-wide announcements.
To respond to your enquiries and provide support.
To keep the system secure, prevent misuse, and meet our legal and accounting obligations.

We do not use automated decision-making that produces legal or similarly significant effects for you.

3. Legal basis for processing

Where the Nigeria Data Protection Act 2023 applies, we rely on the following grounds:

Contract — processing needed to deliver the facility management services connected to your tenancy or ownership.
Legal obligation — retaining financial and accounting records.
Legitimate interest — securing the estate, the premises and the system itself.
Consent — optional features such as push notifications and camera access, which you may withdraw at any time in your device settings.

We share personal information only as described here:

Estate management and staff — facility managers, technicians and security personnel see the information needed to act on your requests and admit your guests.
Vendors and contractors — where a repair is assigned to an external contractor, they receive the request details and unit needed to carry out the work.
Service providers — the processors listed below, who act on our instructions.
Legal and regulatory — where we are required by law, court order or a lawful request from a public authority.

Processors we use

Provider	Purpose	Data involved
Google Firebase Cloud Messaging	Delivering push notifications to your device.	Device push token, device platform and the content of the notification. See the Firebase privacy information.
Our hosting provider	Running the application servers and database.	All data described in this policy, stored at rest.
Email delivery	Sending account, password reset and billing emails.	Your name and email address, and the message content.

Some of these providers operate servers outside Nigeria. Where information is transferred abroad, we take reasonable steps to ensure it remains protected to a comparable standard.

We never sell your personal data, and we do not share it with data brokers or advertising networks.

5. Device permissions

The app asks for permissions only when a feature needs them. You can refuse or later revoke any of them in your device settings; the rest of the app keeps working.

Notifications — to alert you about payments, requests, bookings and estate announcements.
Camera and photos — only when you choose to attach an image to a maintenance request, incident report or payment proof. We access the specific images you select, not your photo library as a whole.
Internet access — to communicate with our servers.

6. How long we keep data

Account and residence records — for as long as you are a resident, then archived while any tenancy or financial matter remains open.
Financial records — retained as required by Nigerian tax and accounting law, typically six years.
Maintenance and incident records — retained for the life of the asset or property record they relate to.
Visitor pass records — retained for a limited period for estate security and audit purposes.
Push tokens and session tokens — deleted when you sign out, uninstall the app, or when they expire.

7. How we protect your data

Passwords are stored as salted one-way hashes and are never readable by staff.
Traffic between the app and our servers is encrypted in transit over HTTPS.
App sessions use expiring bearer tokens that can be revoked.
Access is role-based: staff see only what their role requires, and administrative actions are written to an audit log.

No system can be guaranteed completely secure, but we work to protect your information and will notify you and the relevant authority of a breach affecting your rights, as required by law.

8. Your rights

Subject to applicable law, you may ask us to:

access a copy of the personal information we hold about you;
correct information that is inaccurate or incomplete;
delete information we no longer have a lawful reason to keep;
restrict or object to certain processing;
receive your information in a portable format;
withdraw consent for optional features such as push notifications.

Write to privacy@fmtprime.com and we will respond within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

9. Deleting your account and data

To request deletion of your FMT Prime Resident account and associated personal data, email privacy@fmtprime.com from the address registered on your account, with the subject Account deletion request. You may also ask your estate facility manager to raise the request for you.

We will verify the request and delete your account, profile, device tokens and request history within 30 days. Records we are legally required to keep — chiefly financial and accounting records relating to your unit, and estate security logs — are retained for the periods set out in section 6 and then deleted.

Uninstalling the app on its own stops push notifications but does not delete your account.

10. Children's privacy

The FMT Prime Resident app is intended for adult residents and estate staff. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the service changes or the law requires. The revision date at the top of the page always reflects the current version, and we will give notice in the app of any change that materially affects your rights.

12. Contact us

FMT Prime Facility Management
Lagos, Nigeria
Email: privacy@fmtprime.com

For questions about this policy or to exercise any of the rights above, please use the address on this page.