Privacy Policy

This Privacy Policy explains how Du transit ltd (“we”, “us”, “our”), the operator of the Dupay Wallet mobile application and related services (the “App”), collects, uses, stores, shares, and protects your personal information. By creating an account or using the App, you agree to the practices described here.

We are committed to protecting your privacy and handling your data in accordance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable laws.

1. Information We Collect

To provide a secure financial service and comply with regulatory “Know Your Customer” (KYC) and anti-money-laundering (AML) obligations, we collect the following categories of personal data:

Category	Examples	Why we collect it
Contact information	Full name, email address, phone number, residential/physical address	Account creation, communication, security
Identity & verification (KYC)	Bank Verification Number (BVN), National Identification Number (NIN), government-issued ID details, identity documents	Legally required identity verification and fraud prevention
Biometric / image data	Selfie and uploaded document images	Confirming you match your identity documents during KYC
Financial information	Payment details, wallet balances, virtual card data, transaction history	Processing transactions and operating your wallet
Identifiers	User/account ID, device identifier (push notification token)	Operating your account and sending notifications

We do not collect your contacts or your precise location.

2. How We Use Your Information

We use your information only to operate and protect the service, specifically to:

• Create and manage your wallet account;
• Verify your identity and meet KYC/AML and other regulatory requirements;
• Process wallet funding, transfers, bill payments, airtime/data purchases, and virtual card transactions;
• Detect, prevent, and investigate fraud, abuse, and unauthorized activity;
• Provide customer support and send service-related notifications;
• Comply with our legal and regulatory obligations.

We do not use your personal data for third-party advertising, and we do not track you across other companies’ apps or websites.

3. How We Share Your Information

We do not sell your personal data. We share it only with parties necessary to deliver the service, including:

• Identity verification, banking, and payment partners who help us verify your identity and process transactions;
• Regulators and law enforcement, where required by law, court order, or a legitimate investigation;
• Service providers (for example, secure hosting and messaging infrastructure) who act on our instructions and are bound to protect your data.

4. Data Retention

5. Account Deletion

You can request deletion of your account at any time directly within the App:

Profile (More) → Delete Account

You will be asked to confirm with your password. Once confirmed, your account is permanently disabled and you are signed out. As described in Section 4, some records are retained for the legally mandated period before being removed.

6. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate information;
• Request deletion of your account and data (subject to legal retention rules);
• Object to or restrict certain processing;
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us using the details below.

7. Data Security

We use industry-standard safeguards to protect your information, including encryption of data in transit, secure authentication, and access controls. Sensitive actions can be protected with biometric authentication (for example, Face ID) and a transaction PIN. No method of transmission or storage is completely secure, but we work continuously to protect your data.

8. Children’s Privacy

Dupay Wallet is intended for users aged 18 and above. We do not knowingly collect personal data from children. If we learn that we have collected such data, we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you within the App. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

10. Contact Us