Privacy Policy

We collect only what we need to run the service. That falls into three categories:

• Information you give us. Your full name, phone number, and email address when you register. If you complete KYC verification, we also collect your BVN or NIN — required by the Central Bank of Nigeria before we can issue you a funding account.
• Transaction information. What you bought (airtime, data, electricity, cable, exam pins, event tickets), how much you paid, when, and to whom. This is the record we keep so you can dispute or reference a transaction at any time.
• Technical information. Device type, IP address, browser and operating system, and basic access logs. This is standard for any web service and helps us spot fraud, debug issues, and keep your session secure.

We do not collect or store your card numbers, banking passwords, ATM PINs, or USSD codes. Those never touch our servers.

Every piece of data we hold has a reason. We use your information to:

• Deliver the service. Process your airtime, data, bill, and ticket purchases, credit your wallet, and route funds through our payment partners.
• Keep your account secure. Verify your identity at login, detect suspicious activity, and prevent fraud or account takeover.
• Meet regulatory requirements. The CBN and other Nigerian regulators require us to retain transaction records and identity information for a set period.
• Pay you what you've earned. Calculate and credit referral commissions, agent earnings, and rewards.
• Support you when things go wrong. If a transaction fails or a dispute arises, we use the records to investigate and refund you quickly.
• Improve the product. Understand which features people use, which ones don't work well, and what to build next.
• Communicate with you. Send receipts, low-balance alerts, security notices, and — only if you opt in — promotional messages.

We do not sell your data, rent it, or share it with advertisers. Ever.

To actually complete a transaction, we have to pass some of your information to partners who make it happen. We only share what's strictly necessary, and each partner is bound by their own confidentiality obligations:

• Telecom and utility providers. MTN, Airtel, GLO, 9mobile, electricity distribution companies, and cable TV providers receive the phone number, meter number, or smartcard number needed to complete your purchase.
• Payment processors and banks. Monnify, Paystack, and similar providers handle funding and settlement. They receive the transaction amount and your account details.
• Identity verification partners. Where you complete KYC, we share your BVN or NIN with licensed verification partners who confirm it matches your name — nothing more.
• Regulators and law enforcement. If the CBN, EFCC, Nigeria Data Protection Commission, or a court of competent jurisdiction requests information, we are legally obligated to comply.
• Professional advisers. Auditors and legal counsel may see records in the course of their work, under strict confidentiality.

Transaction records and identity information are retained for at least six years after your last activity. This is not a choice we make lightly — it's the retention period mandated by the Central Bank of Nigeria for financial service providers. Disputes, audits, and legal claims can arise years after a transaction, and without the records we'd be unable to help you.

Data that isn't tied to a transaction — like your login session, cookie preferences, and marketing consent — is kept only as long as needed for its purpose. If you close your account, we delete or anonymise everything we're not legally required to keep.

Your data is protected by industry-standard safeguards: encrypted connections (HTTPS), encrypted storage for sensitive fields, strict access controls, and audit logs that record who accessed what. Our infrastructure is monitored 24/7 for signs of intrusion.

That said, no system is invincible. A weak password on your end — or a phishing message you click — can compromise your account regardless of what we do on our side. Please use a strong, unique password, never share your PIN with anyone, and treat any unsolicited message asking for your details as fraudulent.

We use a small number of cookies to keep you signed in, remember your theme preference, and prevent cross-site request forgery. That's it. We don't run third-party advertising trackers, we don't build behavioural profiles, and we don't sell session data to anyone.

You can clear or block cookies through your browser settings — but be aware that blocking essential cookies will log you out and prevent some parts of the app from working.

Under the Nigeria Data Protection Act, you have the right to:

• Access your data. Request a copy of everything we hold about you.
• Correct inaccuracies. Update any information that's wrong or outdated.
• Request deletion. Ask us to delete your data — though we're required to keep transaction records for the six-year regulatory period described above.
• Object to processing. Tell us to stop using your data for marketing, or in other specific circumstances.
• Withdraw consent. Opt out of promotional emails, SMS, and push notifications at any time.
• Lodge a complaint. If you're unhappy with how we've handled your data, you can escalate to the Nigeria Data Protection Commission.

To exercise any of these, send us a written request using the contact details in the section below. We respond within 30 days.

When we update this policy, we'll change the effective date at the top and — for anything significant — notify you by email or in-app before the change takes effect. Continuing to use Swyft-Data after the change means you accept the updated policy.

For any question, data request, or complaint about privacy, reach us at: