Smipay ("we", "our", "us") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your data when you use the Smipay mobile app, website, and related services ("Services").

By using Smipay, you agree to the practices described in this Privacy Policy.

Information We Collect

We collect information in order to create and secure your account, process transactions, improve Smipay, meet legal obligations, and keep your experience safe. The categories below describe what we collect when you use the app or website.

1. Personal Information

• Full name and contact details (email address, phone number)
• Date of birth and residential / billing address where required
• Identity information for KYC/AML purposes (such as BVN, NIN, ID card details) where required by law or our partners
• Account login details (hashed passwords, security settings)

2. Transaction Information

• Payment history
• Electricity meter details
• Airtime and data purchase details
• Cable subscription details

3. Device & Technical Information

• IP address
• Device model
• Operating system
• App version and performance data
• Browser type (for web access)
• Mobile network provider
• Device identifiers and diagnostic information (such as device IDs or crash logs) used to secure your account, prevent fraud, and improve stability

4. Cookies and Tracking Technologies

We use cookies, pixels, and analytics tools to understand usage patterns, maintain security, and improve our platform. These technologies may collect anonymized or pseudonymized identifiers. You can control cookies through your browser settings. See our Cookies Policy for more details.

How We Use Your Information

Smipay uses your information to:

• Create and manage your account
• Process payments and provide services
• Verify your identity and comply with KYC/AML regulations
• Improve app performance and user experience
• Personalize your dashboard and recommendations
• Respond to customer support inquiries
• Prevent fraud, unauthorized activity, or misuse
• Communicate updates, promotional messages, and important notices

We will only process your data for lawful purposes as permitted by the Nigeria Data Protection Regulation (NDPR).

How We Share Your Information

We may share your information with:

1. Third-Party Service Providers

Such as:

• Payment processors
• Banks and financial institutions
• Utility providers (electricity, cable, telecoms)
• Identity verification services
• Analytics and security providers

These providers only receive the data needed to perform their duties.

2. Regulatory Authorities

We may disclose information if required by:

• Law enforcement
• Courts
• Financial regulators
• Anti-fraud agencies

3. Business Transfers

If Smipay undergoes a merger, acquisition, or restructuring, your data may be transferred as part of the transaction.

How We Protect Your Information

We use industry-standard security measures to protect your data, including:

• Encryption
• Secure data storage
• Firewalls
• Multi-factor authentication
• Strict access controls

While we strive to protect your data, no system is completely secure. Users must also keep their login details confidential.

Account Deletion and Data Erasure

You can request that your Smipay account be closed and your personal data deleted:

• From within the app (where available) by navigating to Settings > Account > Delete account, or
• By sending an email from your registered email address to support@smipay.com with the subject line "Account deletion request".

We may ask you to verify your identity before processing deletion requests. Once confirmed, we will deactivate your account and permanently delete or anonymize personal data that we are not legally required to retain (for example, records needed for anti‑money‑laundering, tax, or regulatory purposes). Where we must retain limited information, we will restrict its use to compliance and audit purposes only.

Data Retention

We retain your information only as long as necessary for:

• Providing services
• Fulfilling legal obligations
• Resolving disputes
• Detecting fraud

After this period, your data is securely deleted or anonymized.

Your Rights

Under the Nigeria Data Protection Regulation, you have the right to:

• Access your personal data
• Update or correct your information
• Request data deletion
• Withdraw consent
• Restrict processing
• Object to certain types of processing
• Request data portability

To exercise any of these rights, please contact us via support@smipay.com. We will respond to verified requests within a reasonable period and in line with NDPR and any other applicable regulations.

Children's Privacy

Smipay does not knowingly collect information from individuals under 18 years old. If we discover such data, it will be deleted immediately.

International Transfers

If your data is transferred outside Nigeria, Smipay ensures that appropriate safeguards are in place in accordance with NDPR requirements.

Updates to This Policy

We may update this policy occasionally. Changes will be posted on the app or website. Continued use means acceptance of the updated policy.

Contact Information

For questions or support, contact us at:

• Email: support@smipay.com
• Phone: +234 816 876 7809
• Address: The Knowledge Hub, Oke Ado, Ibadan. Oyo, Nigeria