Privacy Policy

Identity data: your name, date of birth, phone number, email address, and the identity numbers required to verify you (BVN and NIN). We store only the last four digits of your BVN and NIN, together with the result of each check.

Biometric data: the selfie you take during verification, used once to confirm you match your official record.

Transaction data: wallet balance, funding, transfers, bill payments, contribution circle activity, recipient details and narrations.

Technical data: device and browser information, IP address and activity logs used for security and fraud prevention.

To open and operate your account; to verify your identity and meet KYC/AML obligations; to process payments and contributions; to detect and prevent fraud; to send transaction alerts and service messages; to provide support; and to comply with legal, regulatory and partner requirements.

We rely on: performance of our contract with you; compliance with legal obligations, including CBN and anti-money-laundering rules; our legitimate interest in keeping the service secure; and your consent where we ask for it, such as for marketing messages. You may withdraw consent for marketing at any time.

We share only what is necessary with: our licensed banking and payment partners (currently Beamer Microfinance Bank, Platnova and Red Biller Technologies); our identity verification partner; billers and network operators you pay; communication providers that deliver our SMS and email alerts; our support tooling; and regulators, law enforcement or courts where we are legally required to do so.

We do not sell your personal data.

Some service providers process data outside Nigeria. Where that happens, we require appropriate safeguards and contractual protections consistent with the Nigeria Data Protection Act.

We keep account, identity and transaction records for the period required by Nigerian financial services and anti-money-laundering law, which is generally at least five years after your relationship with us ends. Data no longer needed is deleted or anonymised.

Access to personal data is restricted to staff and systems that need it. Data is encrypted in transit, sensitive identity numbers are stored only in truncated form, and access is logged. No system is completely secure, so please protect your password and never share one-time codes.

You may request access to your data, correction of inaccurate data, deletion where we are not required to keep it, restriction of certain processing, a copy of your data in a portable format, and withdrawal of consent for marketing. You may also object to automated decisions that significantly affect you and ask for human review.

To exercise a right, contact our data protection contact through the Contact & Support page. We respond within 30 days. If you are not satisfied, you may complain to the Nigeria Data Protection Commission.

To delete your account and data, see Delete your Rainpay account.

Rainpay is not for anyone under 18. We do not knowingly collect data from children, and we delete such data if we discover it.

We will publish any change to this policy on this page and notify you where the change materially affects you.