Privacy Notice (NDPA 2023)
Plain-English summary. DCPMI filing in progress. Data Protection Officer via licensed DPCO (contact to be published).
🇳🇬 Pidgin summary
We only collect wetin we need: phone, name, DOB, optional selfie. Your bank details stay with your bank. You fit see, correct, or delete your data anytime. We no go sell your data — ever.
- What we collect: phone number, name, date of birth, optional selfie, group/ledger/score history, device identifier, dispute evidence you submit. Bank account numbers for payouts are verified via our payment provider; we store only a masked reference.
- Why: to run your groups, calculate your score, resolve disputes, and meet legal duties. Lawful basis: your consent + performance of the group contract.
- Sharing: payment provider (to move your money), SMS provider (reminders), and — only with your explicit per-request consent — lenders viewing your Passport. No bulk sharing. No sale of personal data.
- Your rights: access, correction, erasure, consent withdrawal — request in-app (Profile → Help) or via support; answered within 30 days.
- Retention: while active + 24 months after exit, then anonymised. Backups encrypted, 30-day history.
- BVN/NIN: optional in V1 via licensed partners only. A dedicated impact assessment covers biometric data.