Home
Legal

Privacy Policy

This policy explains how iDeliverPay collects, uses, stores, protects, and shares information when you use our wallets, transfers, bills payment, USD virtual cards, iToken, KYC, and related services.

Last updated: September 18, 2026

Information we collect

We collect information you provide directly, information generated when you use iDeliverPay, and information required for security, compliance, and service operations.

Information you provide

  • Account information: Phone number, email address, full name, date of birth, and address used during registration.
  • KYC information: Government-issued ID details, biometric data (where applicable), proof of address, and other verification documents required for identity tiers.
  • Transaction details: Recipient bank accounts, account numbers, recipient names, transfer amounts, bill payment details, iToken instructions, and card funding information.
  • Communications: Support messages, feedback, contact form submissions, help centre interactions, and any information you share with our support team.

Information generated through use

  • Transaction records: Wallet activity, transfer history, bills payment confirmations, iToken claims, card transactions, referral activity, and status updates.
  • Device information: Device type, operating system, app version, unique device identifiers, IP address, browser details, and mobile network information.
  • Usage data: Features used, session duration, navigation patterns, interaction logs, and app performance data.
  • Location data: Approximate location derived from IP address or device settings (only when required for fraud prevention or compliance).

How we use information

We use collected information to provide, improve, and secure iDeliverPay services. Specific uses include:

  • Service delivery: Creating accounts, processing transactions, completing KYC checks, managing wallets, facilitating transfers, processing bill payments, and maintaining iToken functionality.
  • Security and fraud prevention: Detecting fraudulent activity, preventing unauthorized access, enforcing transaction limits, verifying device trust, and protecting account security.
  • Compliance: Meeting regulatory requirements, responding to legal requests, maintaining transaction records, and cooperating with financial regulators and law enforcement.
  • Communication: Sending transaction confirmations, security alerts, service updates, policy changes, and customer support responses.
  • Improvement: Analysing usage patterns, debugging issues, developing new features, and improving user experience.

Sharing and disclosure

We do not sell personal information to third parties. We may share information only where necessary to operate our services, comply with legal obligations, or protect users.

  • Payment processors and partners: Banks, card networks, billers, payment gateways, and verification services that process transactions on our behalf.
  • Infrastructure providers: Cloud hosting, analytics, communication, and technology providers that support app operations under strict confidentiality agreements.
  • Legal and regulatory: Regulators, law enforcement agencies, courts, and public authorities where required by applicable law, subpoena, or valid legal process.
  • Professional services: Auditors, legal advisers, and consultants who operate under confidentiality and security obligations.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, user information may be transferred with appropriate notice and protection.

Data protection and security

We implement technical, administrative, and operational safeguards to protect personal information:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Secure authentication with PINs, OTPs, and device verification.
  • Access controls limiting who can access user data internally.
  • Regular security assessments and vulnerability monitoring.
  • Incident response procedures for security events.

No online service can guarantee absolute security. Users should keep passwords, OTPs, PINs, and devices secure and report any suspicious activity immediately.

Data retention

To request account deletion in the app or from outside the app, see Delete your iDeliverPay account. Necessary financial and identity records are retained for at least five years after transaction completion or the end of the account relationship, and longer where an applicable legal, accounting, investigation or financial-partner requirement applies. Unneeded profile data and access credentials are removed during closure; retained records are restricted to their lawful purposes.

We retain personal information for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods depend on:

  • The type of information and purpose for which it was collected.
  • Applicable legal, regulatory, tax, accounting, or reporting requirements.
  • Transaction record retention requirements under Nigerian financial regulations.
  • Security and fraud prevention needs.

When information is no longer needed, we securely delete or anonymize it.

Your rights and choices

Subject to applicable law, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Restriction: Request restriction of processing in certain circumstances.
  • Objection: Object to processing based on legitimate interests.
  • Portability: Request transfer of your data in a structured, machine-readable format.

To exercise these rights, contact us at privacy@ideliverpay.com. We may need to verify your identity before processing your request.

You can also manage certain app permissions (location, notifications) through your device settings.

Children's privacy

iDeliverPay is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational reasons. We will notify you of material changes through the app, email, or our website.

Continued use of iDeliverPay after changes take effect constitutes acceptance of the updated policy.