Legal

Privacy Policy

Last updated: September 4, 2026

At Safro, your privacy is a core part of how we build our products. This Privacy Policy explains what information we collect when you use the Safro app and website, how we use it, and the rights you have over your data. Safro is operated by Safro Connect and complies with Nigerian data protection regulations including the Nigeria Data Protection Act (NDPA) 2023.

1. Information We Collect

We collect information you provide directly to us when you create an account, verify your identity, or use our services:

Identity information — full name, date of birth, government-issued ID (for KYC/BVN verification)
Contact information — email address, phone number
Financial information — bank account details, transaction history, wallet balances
Device information — device type, operating system, unique device identifiers, IP address
Usage data — features used, transaction patterns, in-app activity

We do not sell your personal information to third parties.

2. How We Use Your Information

We use the information we collect to:

Create and manage your account
Process transactions and payments
Verify your identity as required by Nigerian financial regulations (CBN/NDIC)
Send you transaction alerts, receipts, and account notifications
Detect and prevent fraud, money laundering, and unauthorised access
Respond to your support requests
Comply with applicable laws and regulatory requirements
Improve our products and services

3. How We Share Your Information

We may share your information with:

Payment partners — Zainpay and other licensed payment processors necessary to execute your transactions
Identity verification providers — Prembly and similar services for BVN/KYC checks
Regulatory authorities — the Central Bank of Nigeria (CBN), the Nigerian Financial Intelligence Unit (NFIU), and other regulators when required by law
Service providers — cloud hosting, analytics, and communication services that operate under strict data processing agreements
Law enforcement — when required by a valid court order or to protect the safety of our users

We require all third parties to maintain appropriate security standards and to use your data only for the purposes we specify.

4. Data Security

We implement industry-standard security measures to protect your data:

All data is encrypted in transit using TLS 1.2 or higher
Sensitive data at rest is encrypted using AES-256
PIN and biometric authentication for all transactions
Regular security audits and penetration testing
Strict access controls — only authorised personnel can access user data

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as required by Nigerian law. Financial transaction records are typically retained for a minimum of 5 years in accordance with CBN regulations. You may request deletion of your account and associated data by contacting us at support@safroweb.com, subject to our legal obligations to retain certain records.

6. Your Rights

You have the right to:

Access — request a copy of the personal data we hold about you
Correction — request that we correct inaccurate or incomplete data
Deletion — request that we delete your data (subject to legal retention requirements)
Portability — receive your data in a structured, machine-readable format
Opt-out — unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at support@safroweb.com. We will respond within 30 days.

7. Push Notifications & SMS

We send push notifications and SMS messages to keep you informed about your account activity, including transaction alerts, security warnings, and important updates. You can manage notification preferences at any time from the Settings screen in the Safro app. Disabling notifications may affect your ability to receive time-sensitive security alerts.

8. Children's Privacy

Safro is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at support@safroweb.com and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email or an in-app notification at least 14 days before the change takes effect. Your continued use of Safro after the effective date constitutes acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Safro Connect

Email: support@safroweb.com

Website: https://safroweb.com

We are committed to resolving privacy concerns promptly and transparently.