Privacy Policy

1. Controller and contact

Wuri is the controller of personal data processed for the Service unless a partner bank or operator is an independent controller for its own AML or licensing purposes.

Privacy requests: privacy@wuriapp.com. Support: support@wuriapp.com.

2. Data we collect

We collect data you provide, data generated by your use of the Service, and data from partners needed to operate payments and compliance.

• Identity & profile: name, phone number, country, language, profile photo, KYC documents and selfie where submitted.
• Account & security: device fingerprint, platform, PIN verification events (we store a secure hash of your PIN — not your raw PIN in logs), biometrics flags on device, OTP delivery metadata.
• Financial activity: wallet balances, transaction history, merchant/agent identifiers, fees, settlement requests, bank account details you link (masked where displayed).
• Technical data: app version, crash/diagnostic logs you send, IP/network metadata as processed by our hosts, approximate device info.
• Support: messages you send to support, dispute details, call/WhatsApp metadata if you contact us that way.

3. Why we use data (purposes & legal bases)

We process personal data to: create and secure your account; process payments and prevent fraud; meet KYC/AML/CTF and partner obligations; provide customer support; improve and protect the Service; send transactional notices (OTP, receipts, security alerts); and comply with law.

Where required, we rely on: performance of a contract with you; legal obligations; legitimate interests (security, product improvement, abuse prevention) balanced against your rights; and consent where we ask for it (for example optional marketing or certain device permissions).

4. How we share data

We do not sell your personal data. We share data only as needed with:

• Infrastructure processors (cloud hosting, databases, SMS, storage/CDN such as Cloudinary when enabled) under contractual safeguards.
• Payment and banking partners, mobile-money operators, and agents/merchants as required to complete a transaction you initiate.
• Professional advisers and auditors under confidentiality.
• Competent authorities, courts, or regulators when required by law or to protect rights, safety, and fraud prevention.
• A successor entity in a merger or acquisition, subject to continued protection of your data.

5. International transfers

Our servers and processors may be located outside Nigeria (for example EU or US cloud regions). Where we transfer personal data internationally, we use appropriate safeguards available to us (contractual clauses, partner agreements, and access controls).

6. Retention

We retain account and transaction data for as long as your account is active and thereafter for periods required by AML, tax, accounting, and dispute rules (often several years after account closure). Support tickets and logs are retained for shorter operational periods unless needed for investigations.

When retention expires, we delete or irreversibly anonymise data where feasible.

7. Security

We use industry-standard measures including encryption in transit (TLS), access controls, hashed PINs, device binding, transaction step-up tokens, and monitoring. No method of transmission or storage is 100% secure — you must also protect your device and PIN.

If we become aware of a personal data breach affecting you, we will notify you and/or authorities as required by applicable law.

8. Your rights

Subject to applicable law and AML retention overrides, you may request: access to your data; correction of inaccurate data; deletion of your account/data; restriction or objection to certain processing; and a portable copy of data you provided.

Submit requests to privacy@wuriapp.com. We may need to verify your identity before fulfilling a request. We will respond within a reasonable period (and any statutory deadline).

You may withdraw consent where processing is consent-based, without affecting prior lawful processing. You may also lodge a complaint with a competent data-protection or consumer authority in your country.

9. Account and data deletion

You can request deletion by contacting support or privacy email from your registered phone/email context. We will delete or anonymise personal data we no longer need, except records we must keep for legal, AML, accounting, fraud, or dispute purposes.

Deleting the app from your phone does not delete your account on our servers — you must request closure.

10. Children

Wuri is not directed to children under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will take appropriate steps.

11. Cookies and similar technologies

The mobile app does not use browser cookies. Our websites (including pay.wuriapp.com) may use essential cookies or local storage for security and session continuity. We do not use third-party advertising trackers in the wallet app.

12. Automated decisions

We use automated risk rules (velocity, amount thresholds, device checks) that may delay, limit, or block transactions or flag accounts for review. You can contact support to request a human review where required by law.

13. Changes

We may update this Policy. The “Last updated” date will change, and material updates may be notified in-app. Continued use after changes take effect means you acknowledge the updated Policy.

14. Contact

Privacy: privacy@wuriapp.com

Support: support@wuriapp.com · +234 700 000 0000

Web: https://pay.wuriapp.com/privacy