Privacy Notice (NDPA 2023)
Last updated October 2026. Plain-English summary; the binding version is reviewed by Nigerian counsel.
1. What we collect
Account details, verification results (not raw BVN/NIN), bank name and last four digits, transactions, content you post, device and usage data with your consent.
2. Why
To run the service, pay you, prevent fraud, meet legal obligations (AML/CFT, tax) and, with consent, improve the product and send marketing.
3. Who we share with
Flutterwave (payments), our licensed KYC provider, cloud processors (Cloudflare, Convex), and regulators where required. We never sell personal data.
4. Your rights
Access, correction, export, deletion and objection — from Settings → Privacy & data, or by contacting our Data Protection Officer.
5. Retention
Transaction records are kept as required by law; KYC artefacts are held by the provider; other data is deleted or anonymised when no longer needed.