Privacy Policy

• Account details: your name, email address and password. Passwords are stored by our authentication provider in hashed form; we can't read them.
• Identity verification: your full legal name, date of birth and the last four digits of your NIN. We don't store your full NIN.
• Payment details: phone, meter, smartcard and account numbers you enter for purchases, and your contact phone number.
• Transactions: your top-ups, purchases, balances, references and their status.
• Technical data: device and browser information, IP address, usage analytics and logs needed to run and secure the service.

We never see or store your full card details; these are entered directly on Paystack's checkout.

• To run your account and complete the payments you ask for (performing our contract with you).
• To verify your identity and prevent fraud and money laundering (legal obligation and legitimate interest).
• To send you receipts and important service messages (performing our contract).
• To fix problems and improve Oni (legitimate interest).

We don't sell your personal data, and we don't use it for third-party advertising.

Only with the partners needed to provide the service, each bound to protect your data:

• Paystack: processes payments into your Oni balance.
• Licensed bill payment providers: deliver the airtime, data, electricity, TV and internet purchases you make.
• Our hosting and database provider: stores your account and transaction data securely.
• Google: only if you choose to sign in with Google.
• Regulators, law enforcement or courts: where the law requires us to.

Some of these providers may process data outside Nigeria. Where they do, we rely on the safeguards the Act requires.

We keep your account data while your account is open. Transaction records are kept for as long as Nigerian law requires (generally at least five years after the transaction), even if you close your account. After that, data is deleted or anonymised.

Under the Nigeria Data Protection Act 2023 you can:

• ask for a copy of your personal data;
• ask us to correct data that is wrong;
• ask us to delete your data, where we're not legally required to keep it;
• object to or ask us to restrict certain processing;
• ask for your data in a portable format; and
• withdraw consent where we rely on it.

Email support@oni.ng to use any of these rights; we will respond within 30 days. You can also delete your account from your Profile. If you're unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC).

All connections to Oni are encrypted (HTTPS). Access to personal data is limited to what each part of the service needs, and balance changes can only be made by our servers, never from your browser.

We use what's needed to keep you signed in and to remember small preferences on your device, such as your theme and the contact phone number you last entered. Our hosting platform also collects basic usage analytics, such as which pages are visited and which features are used, so we can understand and improve Oni. We don't use advertising cookies and we don't share analytics with advertisers.

Oni is only for people aged 18 and over. We don't knowingly collect data from children.

If we make significant changes, we will tell you by email or in the app before they take effect.

Oniverse Digital Services, 1, Bishop Felix Owolabi Avenue, Osogbo, Osun State, Nigeria. Email support@oni.ng.