1. Who we are
DuraPay is a payments app operated by DuraPay Limited. We provide our services with a partner bank licensed by the Central Bank of Nigeria (CBN). In this policy, "we" and "us" mean DuraPay, and "you" means anyone who uses our app or website.
2. What we collect
We collect the following personal data:
- Account details: your name, phone number, email address, password and transaction PIN, and the one-time passwords (OTPs) we send to confirm it's you.
- Identity details: when you create or upgrade your account in the app, your BVN, your NIN and, where needed, face verification. Face verification data is sensitive personal data, so we handle it with extra care and use it only to verify who you are.
- Financial activity: your balances, your transfers and the details of the people you send money to, your bill, airtime and data purchases, your currency conversions, and your virtual card activity.
- Device and usage data: your device type, operating system, app version, and how you use the app, so we can keep it working and secure.
- Messages: what you send us when you contact support, and our replies.
3. How we use your data
- To create and verify your account, and to upgrade it when you ask.
- To provide your account, process your transfers, payments, conversions and card transactions, and show you your balances and history.
- To keep your account secure and to detect and prevent fraud.
- To send you one-time passwords and push notifications about your account.
- To meet our legal and regulatory obligations.
- To fix problems and improve the app.
4. Why we're allowed to use it
We use your personal data when it's needed to provide our services to you, when the law requires it, when you've given your consent, or when we have a legitimate interest that doesn't override your rights. Where we rely on your consent, you can withdraw it at any time.
6. Transfers outside Nigeria
Your data may be stored or processed outside Nigeria by our service providers. When that happens, we take steps to make sure your data stays protected, as the NDPA requires.
7. How long we keep it
We keep your personal data for as long as you have an account with us and want us to keep it. You can ask us to delete your data at any time.
When you close your account, we return any money you have with us. Some records, such as identity and transaction records, we must keep for the period the law requires. We keep those only for as long as the law requires, then delete them or make them anonymous.
8. How we protect it
We use technical and organisational measures to protect your data, such as encrypting data in transit and limiting who can access it. No system is completely secure, so keep your password, PIN and OTP private, and tell us straight away if you think someone has used your account.
9. Your rights
Under the NDPA, you have the right to:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct data that is wrong or incomplete.
- Ask us to delete your data, where we're not required to keep it.
- Ask us to restrict how we use your data, or object to it.
- Receive your data in a portable format.
- Withdraw your consent at any time.
To use any of these rights, contact us using the details at the end of this page. You can reach our data protection officer at the same address. If you're not happy with our response, you can complain to the Nigeria Data Protection Commission (NDPC).
10. Children
DuraPay is for people aged 18 and over. We don't knowingly collect personal data from children. If you think a child has given us their data, contact us and we'll delete it.
12. Changes to this policy
We may update this policy from time to time. When we make an important change, we'll tell you in the app or by another suitable means, and we'll update the date at the top of this page.
Contact us
Questions, or want to use your rights? Email us at support@durapayment.com.
Read our Terms of Use