Privacy Policy

Account information: your name, email address, phone number, date of birth, gender and state of residence, as you provide them during registration and onboarding.

Identity verification data: your Bank Verification Number (BVN), the name it returns, and profile photo or face-verification results — used only to confirm you are you.

Transaction data: the payments you make — amounts, recipients, billers, receipts and wallet movements — which we must keep for record-keeping and dispute resolution.

Technical data: device and browser information, and how you use the app, to keep the service secure and improve it.

Camera: used only while you scan a gift card code or take your verification selfie. The image is used for that task and is not stored for any other purpose.

Notifications: used to alert you to payments, wallet activity and security events. You can turn them off in your device settings at any time.

Photos: only when you choose a profile picture, which is stored with your account. Paya never reads your contacts, messages or files.

To create and secure your account, verify your identity, and prevent fraud.

To carry out the payments you authorise and deliver receipts and notifications about them.

To provide customer support and resolve disputes.

To meet legal and regulatory obligations that apply to payment services in Nigeria.

We process your data because it is necessary to provide the service you asked for, because you have given your consent (for example, for optional promotional messages), or because the law requires it — such as record-keeping and anti-money-laundering obligations.

You may withdraw consent for optional processing at any time from your profile settings; this never affects payments you have already authorised.

Service partners who help deliver payments: Monnify (wallet funding), Flutterwave (bank transfers and account verification) and Peyflex (airtime, data, electricity, TV and exam PIN fulfilment). They only receive what is needed for the specific task.

Regulators and law enforcement, where Nigerian law or a lawful order requires disclosure.

We never sell your personal data to anyone.

Tulip Communications is based in Austria and uses global cloud infrastructure, so some data may be processed outside Nigeria. Where we do, we apply this policy and appropriate safeguards to protect your data.

Transaction PINs are stored only as salted cryptographic hashes — never in readable form. Access to production data is restricted to authorised personnel on a need-to-know basis, and all traffic is encrypted.

We monitor for unusual activity and may pause an account when we believe data or funds are at risk.

Transaction records are retained for the period required by Nigerian financial regulations. Profile data is kept while your account is open, and for a reasonable period afterwards for record-keeping and dispute resolution.

You can close your account and delete your personal data at any time from inside the app: Profile → Close my Paya account. Your profile, phone number, photo, saved bank accounts and beneficiaries are erased, your wallet is closed and every device is signed out.

If you cannot sign in, request deletion from our website at paya.ng/delete-account, or email support@paya.ng from your registered address. We verify the request and complete it within 30 days.

Transaction records are retained for the period Nigerian financial regulation requires, as explained above. Your BVN and verification selfie are not kept after your account is closed.

Under the Nigeria Data Protection Act 2023 you may ask us to: give you access to your data; correct or update it; delete it where there is no legal reason to keep it; restrict or object to certain processing; and withdraw your consent for optional processing.

To exercise any right, contact us at support@paya.ng or through in-app support. We respond within the timelines required by law.

Paya is not directed at children under 18, and we do not knowingly collect their data. If you believe a child has registered, tell us and we will remove the account.

If we change how we handle data, we will update this policy and its “last updated” date, and tell you in the app when the change matters to you.

Questions or requests about privacy: support@paya.ng, or via the Contact us page on this website.