Privacy
Policy

Welcome to MiraPay. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile wallet, top-up, money transfer, and VTU services. By using MiraPay, you agree to the practices described here.

01 — Collection

Information We Collect

We collect information you provide directly and information generated by your use of our services.

• Identity data: Full name, date of birth, government-issued ID, BVN (where required)
• Contact data: Email address, phone number, residential address
• Financial data: Bank account details, card information, wallet balances, transaction history
• Device data: Device type, OS version, IP address, app version, unique device identifiers
• Usage data: Feature interactions, session duration, navigation paths, error logs
• KYC data: Identity verification documents and selfie photos as required by regulation

02 — Usage

How We Use Your Information

Your information is used exclusively to deliver and improve our services:

• Process wallet top-ups, transfers, airtime, data, and bill payments
• Verify your identity and comply with KYC/AML regulations
• Detect, investigate, and prevent fraud and unauthorized transactions
• Send transaction receipts, alerts, and service notifications
• Provide customer support and resolve disputes
• Comply with applicable laws, regulations, and court orders
• Improve app performance, features, and user experience

03 — Sharing

Information Sharing

We do not sell your personal data. We may share your information only with:

• Payment processors & banks — to execute your transactions
• Telecom operators — to fulfil airtime/data VTU requests
• Identity verification providers — for KYC compliance
• Regulatory authorities — as required by law (CBN, EFCC, court orders)
• Service providers — cloud hosting, analytics, customer support under strict confidentiality agreements

04 — Security

Data Security

We implement industry-standard technical and organizational measures to protect your data:

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for all data in transit
• Multi-factor authentication for account access
• Regular penetration testing and security audits
• Strict internal access controls — data accessible only on a need-to-know basis

No system is 100% secure. You are responsible for keeping your PIN, password, and device secure.

05 — Your Rights

Your Rights & Choices

Subject to applicable law and our regulatory obligations, you have the right to:

• Access a copy of your personal data held by us
• Request correction of inaccurate or incomplete data
• Request deletion of your account and associated data
• Withdraw consent for non-essential processing
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, contact us at support@mirapay.app.

06 — Financial Data

Wallet & Financial Data

All wallet balances, transaction records, and financial activity are stored securely and retained as required by Nigerian financial regulations (typically a minimum of 5 years). This data is used solely to:

• Accurately process and record your transactions
• Provide transaction history within the app
• Support dispute resolution and chargebacks
• Fulfil regulatory reporting obligations

07 — Tracking

Cookies & Tracking

Our mobile app uses lightweight analytics SDKs to understand usage patterns and improve performance. We do not use advertising trackers or sell behavioral data. You may opt out of analytics in the app's settings under Privacy Controls.

08 — Retention

Data Retention

We retain your data for as long as your account is active or as required by law. Upon account deletion, personal data is purged within 30 days, except where retention is mandated by regulation (e.g., transaction records for AML compliance).

09 — Children

Children's Privacy

MiraPay is not directed at or intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If we discover such data has been collected, it will be deleted promptly.

10 — Updates

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via in-app notification at least 14 days before taking effect. Continued use of MiraPay after the effective date constitutes your acceptance of the updated policy.