Last Updated: December 18, 2025
This Privacy Policy explains how Meritwise collects, uses, discloses, and safeguards your information when you use our services.
Your Privacy Matters to Us
At Meritwise, we are committed to protecting your privacy and ensuring the security of your personal information. This policy outlines our practices regarding data collection, usage, and protection in compliance with Nigerian Data Protection Regulation (NDPR).
✓ NDPR Principles Applied
1
Information We Collect
We collect different types of information to provide and improve our services to you:
1.1 Personal Information
Information you provide directly when you register or use our services:
- Identity Information: Full name, date of birth, gender, nationality
- Contact Information: Email address, phone number, residential address
- Verification Documents: Government-issued ID (NIN, Driver's License, Passport, Voter's Card), BVN, selfie photographs
- Financial Information: Bank account details, card information, transaction history, wallet balance
- Account Credentials: Username, password (encrypted), security questions
1.2 Automatically Collected Information
Information collected automatically when you use our platform:
- Device Information: Device type, operating system, unique device identifiers, mobile network information
- Usage Data: App features accessed, time spent, interaction patterns, preferences
- Location Data: IP address, approximate geographic location (with your permission)
- Transaction Data: Transaction amounts, dates, merchant information, payment methods used
- Log Data: Access times, error logs, system activity
1.3 Information from Third Parties
- Identity verification services (BVN validation, NIN verification)
- Payment processors and financial institutions
- Fraud prevention and security services
- Social media platforms (if you choose to connect them)
- Service providers for bills and utilities
Transparency: We only collect information necessary to provide our services, comply with legal requirements, and improve user experience.
2
How We Use Your Information
We use your information for the following purposes:
Service Delivery
Process transactions, manage your account, provide customer support
Verification & Security
Verify your identity, prevent fraud, detect suspicious activities
Communication
Send transaction confirmations, updates, promotional offers, important notices
Personalization
Customize your experience, recommend relevant services
Analytics & Improvement
Analyze usage patterns, improve features, develop new services
Legal Compliance
Comply with laws, respond to legal requests, enforce our terms
How Meritwise Generates Revenue
Meritwise generates revenue solely from service fees on:
- Airtime purchases
- Data subscriptions
- Cable TV payments (DSTV, GOTV, Startimes)
- Electricity bill payments
Important: We do not earn money from wallet balances, peer-to-peer transfers, or bank withdrawals. Your funds remain yours.
Marketing Opt-Out: You can opt out of promotional communications at any time through app settings or by contacting us.
3
Information Sharing & Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
3.1 Service Providers
We share information with trusted third parties who help us operate our services:
- Payment processors (Paystack)
- Cloud hosting providers
- Identity verification services
- Customer support platforms
- SMS and email service providers
All service providers are bound by confidentiality agreements and data protection obligations.
3.2 Service Partners
- Mobile network operators (MTN, Airtel, Glo, 9mobile)
- Electricity distribution companies
- Cable TV providers (DSTV, GOTV, Startimes)
- Financial institutions for payment processing
- Educational institutions and examination bodies
3.3 Legal Requirements
We may disclose your information when required by law:
- Comply with court orders, subpoenas, or legal processes
- Respond to government or regulatory requests
- Protect our rights, property, or safety
- Investigate fraud or security breaches
- Enforce our Terms & Conditions
3.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change.
Security Commitment: All third parties we work with are required to maintain the same level of data protection and security standards that we uphold.
4
Data Security
We implement comprehensive security measures to protect your information:
4.1 Technical Safeguards
- Encryption: Industry-standard SSL/TLS encryption for data in transit
- Data Storage: Strong encryption for data at rest
- Access Controls: Role-based access controls and enhanced authentication mechanisms
- Network Security: Firewalls, intrusion detection systems, DDoS protection
- Secure Infrastructure: Enterprise-grade cloud hosting with industry-standard security
- Password Protection: Bcrypt hashing for password storage
4.2 Organizational Safeguards
- Regular security assessments and monitoring
- Employee training on data protection and privacy
- Strict internal access controls and security practices
- Incident response and disaster recovery plans
- Data breach notification procedures
- Regular backup and redundancy systems
4.3 Your Security Role
You also play a crucial role in protecting your information:
- Use strong, unique passwords
- Enable two-factor authentication
- Never share your password, PIN, or OTP
- Log out after using shared devices
- Report suspicious activities immediately
- Keep your app updated to the latest version
Data Breach: In the unlikely event of a security breach affecting your data, we will notify affected users and relevant authorities in accordance with applicable laws.
5
Your Privacy Rights
Under Nigerian Data Protection Regulation (NDPR), you have the following rights:
Your Data Rights
- Right to Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete information
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restriction: Limit how we use your data in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Opt out of certain data processing activities
- Right to Withdraw Consent: Revoke consent for data processing at any time
- Right to Lodge a Complaint: File a complaint with data protection authorities
How to Exercise Your Rights
To exercise any of these rights, you can:
- Access settings in the Meritwise app
- Email us at support@meritwise.app
- Contact our Data Protection Officer
- Submit a written request to our office address
We will respond to your request within 30 days.
No Discrimination: We will not discriminate against you for exercising your privacy rights.
6
Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your experience and collect analytics data:
6.1 Types of Cookies We Use
- Essential Cookies: Required for basic platform functionality, authentication, and security
- Performance Cookies: Help us understand how users interact with our services
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Collect data on usage patterns and performance metrics
6.2 Third-Party Analytics
We use analytics services to improve our app performance and user experience.
6.3 Managing Cookies
You can control cookies through:
- Browser settings (block, delete, or limit cookies)
- App settings (disable analytics tracking)
- Device settings (limit ad tracking, reset advertising ID)
Note: Disabling essential cookies may affect platform functionality.
Transparency: We provide clear opt-in options for non-essential cookies and tracking.
7
Data Retention
We retain your information for as long as necessary to fulfill the purposes outlined in this policy:
Account Information
Retained while your account is active, plus 7 years after closure for compliance
Transaction Records
Minimum 7 years as required by financial regulations
KYC Documents
7 years after account closure or last transaction
Marketing Data
Until you opt out or withdraw consent
Support Communications
3 years from last interaction
Analytics Data
Aggregated data retained indefinitely; individual data 2 years
Data Deletion Process
When you request data deletion or close your account:
- Personal data is anonymized or deleted within 30 days
- Transaction records are archived for legal compliance
- Backup systems are purged within 90 days
- Some data may be retained if required by law
Legal Obligations: We may retain certain information longer if required by law, regulation, or ongoing legal proceedings.
8
Third-Party Services & Links
Our platform may contain links to or integrate with third-party services:
8.1 Third-Party Privacy Policies
When you interact with third-party services through Meritwise, their own privacy policies apply:
- Service providers (electricity, cable TV, etc.)
- Social media platforms
- Payment gateways
- Financial institutions
- External websites linked from our app
We encourage you to review their privacy policies before providing any information.
8.2 Our Responsibility
- We carefully select and vet all third-party partners
- We require partners to maintain adequate data protection standards
- We are not responsible for third-party privacy practices
- We do not control third-party data collection or usage
Tip: Always verify you're interacting with legitimate service providers when making payments through Meritwise.
9
Children's Privacy
Meritwise is not intended for use by children under the age of 18.
- We do not knowingly collect personal information from children under 18
- Users must be at least 18 years old to create an account
- If we discover that a child has provided personal information, we will delete it immediately
- Parents/guardians who believe their child has provided information should contact us immediately
Parental Notice: If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@meritwise.app
10
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
10.1 How We Notify You
- Update the "Last Updated" date at the top of this policy
- Send email notifications for significant changes
- Display in-app notifications
- Post announcements on our website
- Request re-acceptance for material changes
10.2 Your Acceptance
Continued use of Meritwise after changes are posted constitutes acceptance of the updated policy. If you disagree with changes, you may:
- Stop using our services
- Close your account
- Contact us to exercise your data rights
Stay Informed: We recommend reviewing this policy periodically to stay informed about how we protect your information.
11
International Data Transfers
Your information may be transferred to and processed in countries other than Nigeria:
- We use cloud services with servers in multiple locations
- Data transfers comply with applicable data protection laws
- We implement appropriate safeguards (Standard Contractual Clauses)
- Your data receives the same level of protection regardless of location
Cross-Border Protection: All international transfers are subject to strict data protection agreements and security measures.
12
Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee our privacy and data protection practices:
For general inquiries or privacy concerns, you can also reach us at:
13
Our Commitment to Security
Meritwise follows industry best practices for security and data protection:
- We comply with Nigerian Data Protection Regulation (NDPR) 2019
- We implement international security standards in our operations
- We regularly update our security measures to protect your data
- We work with trusted, certified service providers
- We conduct regular security assessments of our systems
Security Standards: We follow industry best practices for security and data protection to keep your information safe.