Privacy Policy

1. Information We Collect

We collect the following categories of information to provide a secure financial service:

• Account & identity information: your phone number, name, and the one-time passwords (OTPs) used to verify it. To comply with regulation, we collect identity-verification details including your Bank Verification Number (BVN) and related KYC information.
• Authentication data: your transaction PIN (stored only in hashed form) and biometric enrollment status. Biometric data such as fingerprints or Face ID is processed on your device by your operating system and is never transmitted to or stored by us.
• Financial & transaction data: your wallet balance, dedicated account (NUBAN) details, funding, transfers, withdrawals, QR payments, airtime/data and bill purchases, crypto transactions, and card activity. Card and bank credentials entered for funding are processed directly by our licensed payment partners and are not stored on our servers.
• Merchant information: if you use Zentra for business, we collect business verification (KYB) details, invoices, inventory, and settlement records.
• Device & usage data: device identifiers, operating system, app version, IP address, approximate location, and diagnostic logs used for security and fraud prevention.

2. How We Use Your Information

• To create and operate your wallet and process payments, transfers, bills, airtime/data, crypto, and card transactions.
• To verify your identity and comply with anti-money-laundering (AML), KYC, and KYB obligations.
• To authenticate you and authorize transactions using your PIN and biometrics.
• To detect, investigate, and prevent fraud and unauthorized activity.
• To provide customer support and respond to your requests.
• To send you transaction notifications and important service updates.
• To operate our referral programme and meet our legal, regulatory, and tax obligations.

3. How We Share Your Information

We do not sell your personal information. We share it only as needed to run the Service:

• Payment & financial partners: licensed providers that process funding, settlement, bill payments, airtime/data, crypto, and card services on our behalf.
• Identity & verification providers: partners that help us verify your BVN and business details.
• Service providers: vetted vendors for hosting, analytics, messaging, and fraud screening, bound by confidentiality obligations.
• Legal & regulatory authorities: where required by law, court order, or to protect our rights, users, and the integrity of the Service.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

4. Data Retention

We retain your information for as long as your account is active and thereafter for the period required to comply with our legal, accounting, and regulatory obligations (including financial-records retention laws). When data is no longer required, we securely delete or anonymize it.

5. Security

We protect your data with encryption in transit and at rest, hashed PIN storage, access controls, and continuous fraud monitoring. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address any incident.

6. Your Rights & Choices

• Access, correct, or update your account information from within the app.
• Request a copy or deletion of your personal data, subject to legal retention requirements.
• Manage notification and biometric settings on your device.
• Request account closure by contacting us at privacy@zentrawallet.com.

7. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect information from children. If you believe a minor has provided us information, please contact us so we can remove it.

8. International Transfers

Your information may be processed in countries other than your own. Where this occurs, we take steps to ensure your data receives an adequate level of protection consistent with this policy and applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version with a new effective date and, where appropriate, notify you in the app.

10. Contact Us

If you have questions about this policy or your data, contact us at privacy@zentrawallet.com or by mail at Derry Global Multipurpose Limited, [Company registered address].