This explains what Payth collects, why, and how it's protected — in plain terms, the way we'd want it explained to us.
This policy applies to everyone who uses the Payth mobile app or related services ("Payth", "we", "us"). By creating an account, you agree to the collection and use of information as described here. If you don't agree, please don't use the app.
Payth is operated by [Your Company Legal Name], registered in Nigeria. We process personal data in line with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Commission's (NDPC) regulations.
Sensitive data is encrypted in transit (TLS) and at rest. PINs are hashed, never stored or transmitted as plain text. Webhook calls from payment partners are verified with HMAC-SHA512 signatures before we trust them, and transaction updates are processed with idempotency checks and database transactions so balances can't be double-counted or corrupted.
Session credentials on your device are kept in secure, encrypted device storage rather than plain app storage.
We retain KYC and transaction records for as long as your account is active, and for a minimum retention period afterward as required by CBN/NDPC recordkeeping rules — typically not less than five years after account closure. You can request deletion of data we're not legally required to retain (see Section 08).
Payth is intended for users 18 and older, in line with standard eligibility for financial accounts. We don't knowingly collect data from anyone under 18. If we learn we have, we'll delete it.
We'll update the "Effective" date at the top whenever this policy changes, and notify you in-app for material changes before they take effect.
Reach our data protection contact at [privacy@payth.app] or write to [Your Company Legal Name, registered address].
The agreement between you and Payth for using the app to hold a balance, fund it, and send transfers.
By registering for or using Payth, you agree to these Terms and to our Privacy Policy. If you're using Payth on behalf of a business, you confirm you have authority to bind that business to these Terms.
Payth provides a mobile wallet with a dedicated virtual account, allowing you to fund your balance, view transaction history, and send bank transfers within Nigeria, subject to applicable transfer fees and government-mandated stamp duty on qualifying transactions. Payth is a technology platform; underlying payment processing and settlement is carried out by our licensed payment processing partners.
You're responsible for keeping your login credentials, PIN, and OTPs confidential, and for all activity carried out under your account. Tell us immediately at [support@paythy.xyz] if you suspect unauthorised access. We may require re-verification (OTP or PIN) for sensitive actions like transfers or changing account details.
Transfers may attract a service fee and, where applicable under Nigerian law, a stamp duty charge on qualifying transactions. Fees are shown before you confirm any transfer, so you always see the total cost before you send. Fees may change from time to time; changes will be reflected in-app before you confirm a transaction.
You agree not to use Payth for:
We may suspend or close accounts that violate this section, and may report suspicious activity to relevant authorities.
Payth relies on regulated third-party partners — including Paystack and our payment processor Bachs — to move and settle funds. Their own terms may also apply to the processing of a given transaction. We're not responsible for delays or failures caused by a partner's systems, but we'll work with you to resolve issues raised through them.
Payth is provided "as is." To the extent permitted by Nigerian law, we're not liable for indirect or consequential losses arising from your use of the app, service interruptions, or third-party payment delays outside our control. Nothing in these Terms limits liability that cannot be limited under Nigerian law.
You may close your account at any time by contacting support, subject to settling any outstanding balance. We may suspend or close accounts for suspected fraud, legal/regulatory reasons, or breach of these Terms, and will notify you where we're able to.
These Terms are governed by the laws of the Federal Republic of Nigeria. Disputes will first be raised with our support team; unresolved disputes are subject to the exclusive jurisdiction of Nigerian courts.
We may update these Terms as Payth evolves. We'll flag material changes in-app before they take effect; continued use after that point means you accept the updated Terms.
Contact support at [support@paythy.xyz] for anything to do with your account, a transfer, or these Terms.
A straight answer to what app stores ask: what's collected, whether it's shared, and how it's secured. Use this to complete Google Play's Data Safety form and Apple's App Privacy (nutrition label) questions.
| Category | Examples | Purpose | Optional? |
|---|---|---|---|
| Name & contact info | Full name, email, phone number | Account creation, verification, alerts | Required |
| Identity documents | BVN, government ID, selfie/liveness | KYC / regulatory identity verification | Required |
| Financial info | Balance, transaction history, beneficiary details | Providing the wallet & transfer service | Required |
| Authentication data | PIN (hashed), OTP records | Account & transaction security | Required |
| Device identifiers | Device model, OS, app version, IP | Security, fraud prevention, diagnostics | Required |
| App activity | Crash logs, in-app actions | Stability & performance improvement | Required |
Email [support@paythy.xyz] from your registered address to request account closure and data deletion. We'll delete everything we're not legally obligated to retain (KYC and transaction records fall under mandatory CBN/NDPC retention periods and will be securely retained, then deleted, per that schedule).