Privacy Policy
Introduction
Zairaa (“we,” “us,” “our”) is committed to protecting your privacy and ensuring that personal data collected through our personal finance application is handled responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with applicable data protection laws, including the Nigeria Data Protection Regulation (NDPR) and related guidelines. We urge you to read this policy carefully and contact us if you have concerns, as relying on unverified apps for financial data carries inherent risks such as unauthorized access or data breaches.
Scope
This policy applies to all individuals (“you,” “users,” “data subjects”) who use Zairaa's website, mobile applications, APIs, or any other services where this policy is referenced. It covers personal data collected directly from you, data generated through your usage of our service, and data obtained via third-party integrations (e.g., banks, analytics providers). We acknowledge that handling financial and personally identifying data is high-risk; our intent is transparency about those risks and how we mitigate them.
Definitions
- Personal Data / Personal Information: Any information relating to an identified or identifiable individual, including but not limited to name, email address, phone number, bank account details, transaction records, IP address, device identifiers, and location data.
- Sensitive Personal Data: As per NDPR, data revealing racial or ethnic origin, financial information beyond routine transactions (e.g., investment portfolios), health data, or biometric data. We minimize collecting sensitive data unless strictly necessary and with explicit, informed consent.
- Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
- Data Controller: Zairaa determines purposes and means of processing your data. We abide by NDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, security, and accountability.
- Data Processor: Third parties engaged by Zairaa to process data on our behalf (e.g., cloud hosting, analytics, payment gateways). Contracts with processors include data protection obligations as required by NDPR.
Data Protection Officer (DPO)
We appoint a Data Protection Officer (DPO), resident in Nigeria, responsible for overseeing NDPR compliance, handling data subject requests, and liaising with regulatory authorities when needed. You can contact our DPO at privacy@zairaa.com.
Information We Collect
1. Information You Provide Directly
- Registration Data: Name, email address, phone number, date of birth (for age verification), and other identifiers.
- Financial Data: Bank account identifiers (e.g., account numbers, bank codes) required to enable “pocket” allocations, transaction histories, rules for income splitting, and payment instructions.
- Profile and Preferences: Budget goals, categories, spending preferences, notification settings.
- Support Communications: When you contact support, we collect your messages and associated metadata.
- Consent Records: Explicit consents you provide for different processing activities.
2. Automated and Technical Data
- Usage Data: App usage logs, interactions with features, timestamps.
- Device & Connection Data: IP address, device identifiers, operating system, app version, crash logs.
- Analytics Data: Aggregated metrics for product improvement, collected via third-party analytics tools.
3. Third-Party Data
- Banking Integrations: Data retrieved from partner banks or financial APIs (subject to your explicit consent).
- Payment Processors: Data needed to facilitate transfers and bill payments.
- Optional Social/Referral Data: If you choose to invite contacts or link external accounts.
Last Updated
Last Updated: June 18, 2025
Contact Information
For any privacy-related concerns or to exercise your rights, please contact us at privacy@zairaa.com.