Privacy policy

Last updated 11 October 2026

This policy explains what the Ikeja Corps Service Portal (ICSP) collects about you, why, who can see it, and what you can ask us to do with it.

Who runs ICSP

ICSP is a web portal built for the NYSC Ikeja Local Government office. It handles CDS attendance, leave requests, announcements and reports for corps members and staff in Ikeja LG. It was built and is run by Tofarati Farinu, a corps member serving in Ikeja, who is responsible for the personal data it holds. It is not NYSC's national portal and does not replace NYSC's own records.

Contact for anything in this policy: info@wolbantech.com.

What we collect

When you register: your surname, first name and middle name, your gender, email address, phone number, NYSC state code, batch and stream, and a password. Your names, gender, state code, phone number and attendance dates appear on the LG office's official attendance sheet, as on NYSC's own printed sheets. Staff accounts have no state code. We store your password only as a bcrypt hash, never as the password itself. The LG office assigns your CDS group and approves your account.

When you check in or out of a CDS meeting: the time, how you checked in (by scanning a code yourself, or by staff marking you from the register), and your attendance status. For a self check-in we also record:

• your phone's location at that moment and its own estimate of how accurate that location is, to confirm you are at the venue;
• a random device identifier stored in a cookie on your phone, which stops one phone checking in several people;
• a scrambled (keyed hash) form of your IP address. We do not store the address itself.

From these, ICSP may flag a check-in for the LGI to look at, for example when two check-ins share a phone or report an identical location. A flag does not change your attendance status. When staff mark or change your attendance by hand, the portal records who did it and the reason they gave.

When you request leave: the leave type, dates, your reason, any documents you upload, and each action taken on the request with any comments.

When you ask Cooper, the assistant: the text of your question, which sources the answer came from, and whether you marked the answer helpful. Before a question is saved or sent anywhere, ICSP removes anything that looks like a state code, phone number or email address. The saved question is not linked to your name or account. Separately, ICSP counts how many questions each account asks per day, to apply the daily limit. That count says how many, never what.

When you use the letter helper: the letter is filled in on your phone and is not saved by ICSP. If you ask for help wording your reason, the words you wrote are sent to the AI model (see OpenRouter below) and the suggestion comes back to your phone. Neither is saved, and neither goes into Cooper's question log. ICSP counts how many times each account asks per day, to apply the daily limit.

When you send feedback: whether it is a complaint, suggestion or compliment, its topic, your message and when it was sent. It is not linked to your name or account, and the LGI cannot see who sent it. To stop one person sending dozens, the portal briefly remembers how many messages each account has sent today; that count is held in memory only and is never saved with the feedback. Anything you write in the message itself, such as your name, is kept as written.

When you turn on phone notifications: the address your phone's notification service gave this phone, and the keys that encrypt messages to it. Your phone's maker runs that service (Google on most Android phones, Apple on iPhones); it carries each announcement title to your phone encrypted, so it can't read it. Turning notifications off deletes these.

When the LGI or administrator writes an answer for Cooper: the answer and the name of the person who wrote it, which members see beside the answer.

While you use the portal: the notifications we send you and whether you have read them. Actions taken by staff and administrators, such as approving an account or exporting a report, go into an audit log that names the person who took them.

What we do not collect

• Camera images. The camera reads the check-in code on your own phone. No photo or video is saved or sent to us.
• Your voice. When you ask Cooper by voice, your browser turns your speech into text and only the text reaches ICSP. In Chrome and most Android phones, Google does that conversion; on iPhones, Apple does. Answers read aloud use your phone's own voice.
• Your location at any time other than the moment you check in or out. ICSP does not track you. When you open directions to a place at the LG, the map follows your location on your phone only; it is not sent to ICSP or saved.
• Your place of primary assignment, which NYSC holds.
• Anything for advertising. ICSP runs no advertising and no analytics or tracking services.

How we use it

• to create and secure your account and sign you in;
• to record CDS attendance and check that check-ins are genuine;
• to handle your leave requests;
• to show you announcements and notifications in the portal;
• to give the LG office attendance and leave reports for its own records;
• to reset your password when you ask;
• to answer questions put to Cooper, and to show the LGI which questions Cooper could not answer so the office can add answers.

We use your data only to run these services for the LG office and for you. We do not sell it or share it for marketing.

Who can see it

• You can see your own profile, attendance history, leave requests and notifications.
• LG staff can see CDS attendance registers, including members' names, state codes and check-in times, and leave requests and their documents, since they receive leave letters at the desk.
• The LGI can see member accounts, attendance registers and flags, leave requests and their documents, reports and the audit log, and can export reports as files.
• The administrator can see and manage accounts, settings, reports and the audit log.
• The LGI and the administrator can see Cooper's question log: the questions asked, without names, and whether they were answered.

Your exact check-in coordinates are not shown to anyone in the portal. Staff see the flags worked out from them.

Service providers and where your data is stored

• Vercel hosts the portal and runs it on its servers. Like any web host, it keeps technical logs of requests, including IP addresses, under its own policies.
• Neon hosts the database, in Frankfurt, Germany.
• Resend delivers the few emails we send (a password reset link, or a notice that your sign-in email changed), so it handles your name, email address and that message.
• Google Places is used only when staff search for a meeting venue. OpenStreetMap supplies the map images for the venue picker and for directions; your phone fetches them directly, so OpenStreetMap sees your IP address, as any website you load does. Your location and other personal data are not sent to either.
• OpenRouter passes questions put to Cooper to an AI model and returns its answer. It receives your question (with state codes, phone numbers and emails already removed), the parts of the official documents and office answers that relate to it, facts about the office such as the LGI's name and upcoming CDS meetings, and your previous two questions and answers in the same chat. It does not receive your name or account. OpenRouter hands the request to one of several model providers, and each provider handles what it receives under its own policy. Some may keep or learn from it, so do not put personal details in a question. When you ask the letter helper to word a reason, OpenRouter receives the sentence from the letter template and the words you wrote for it, with state codes, phone numbers and emails removed, and nothing else.

These providers are based outside Nigeria, so your data is transferred and stored outside Nigeria. They handle it on our behalf to provide their service.

Cookies and browser storage

• A sign-in cookie keeps you logged in. It is readable only by the server. Corps members are signed out after 7 days without using the portal, and after 30 days in any case. LG staff, the LGI and administrators are signed out after 15 minutes without activity, and after 12 hours in any case.
• The device cookie described above lasts up to 400 days. Clearing your cookies removes it, and your next check-in will carry a new-device flag.
• Your browser stores your theme choice and, on a computer, whether the side menu is collapsed.
• On a phone, your browser remembers when it last offered to install ICSP, whether you have seen the phone setup screen, and whether you allowed the camera and location, so it does not ask again.
• Your conversation with Cooper is kept in your browser until you close the tab, so it survives moving between pages. It is not saved to your account.
• The addresses and PPA names you type into the letter helper are remembered in your browser, so the next letter needs less typing. They stay on that phone and are not sent to ICSP.

We use no advertising or tracking cookies.

How long we keep it

We keep your account and records while the portal is in use by the LG office, and we do not currently delete them on a schedule. If the LG office declines your registration, we delete that registration at once. Password reset links expire and cannot be used twice.

Copies of documents you attach to a leave request are deleted 30 days after the request is approved, not approved or cancelled. The request itself and its history stay.

Cooper's question log is deleted after six months, and the daily question counts after a week. Answers written for Cooper stay until the LGI or administrator deletes them or they reach the end date set on them.

Security

The portal runs only over HTTPS. Passwords are stored as bcrypt hashes. Changing your password signs out every session on the account, on every device. Every action by staff or administrators that changes records is logged. To slow down password guessing and spam, the portal counts recent attempts at signing in, registering, resetting a password and checking in. It stores only a scrambled (keyed hash) form of the IP address, account or email behind each count, and deletes the counts after a day. No system is perfectly secure, and if we learn of a breach affecting your data we will tell you.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct data that is wrong;
• delete your data, or stop using it for a purpose;
• give you your data in a format you can take elsewhere.

You can change your phone number and email from your profile. The LGI corrects your names and gender. For anything else, email info@wolbantech.com and we will respond without undue delay. Some attendance records may need to be kept for the LG office's records, and if so we will tell you which and why. You can also complain to the Nigeria Data Protection Commission.

Changes to this policy

If we change what we collect or how we use it, we will update this page and its date, and announce significant changes in the portal.