This policy explains what personal data Digitizers Ltd (“Digitizer”, “we”, “us”) collects when you use the Digitizer app and website, why we use it, who we share it with, and the rights you have over it. It is written to meet the Nigeria Data Protection Act 2023.
If anything here is unclear, write to us at contact@digitizersltd.com.
Who we are
Digitizers Ltd is a company registered in Nigeria (RC number to be added) and is the data controller for the information described here. Your bank account is held by our banking partner, Wema Bank Plc, which is also a controller of the information it needs to open and run that account under its own privacy policy.
What we collect
Information you give us
- Account details: your first and last name, email address, phone number, username and password. We store your password only as a one-way hash.
- Profile: a photo, bio and location if you choose to add them.
- Identity verification (KYC): your Bank Verification Number (BVN), which we pass to Wema Bank to verify you and open your account. We store your BVN encrypted.
- Transaction PIN: stored only as a one-way hash. We never see your PIN.
- Money activity: transfers, withdrawals, bill payments, savings goals, giveaways and their amounts, recipients, references and times. For withdrawals, the bank account numbers you send to.
- Bill details: the phone number, meter number or smartcard number you pay for.
- Things you post or send: posts, photos, comments, messages, and reports you make about other users or content.
- Support: what you tell us when you report a problem or contact us.
Information we collect when you use Digitizer
- Device and session: your IP address and device type for each signed-in session, and a push notification token if you allow notifications.
- Crash and error reports: technical details about crashes and errors, sent to our error-tracking provider so we can fix them.
- Contacts, only if you allow it: when you use “Friends & contacts”, the app sends the phone numbers in your address book to check which ones belong to Digitizer users. We use them to show you matches and do not store them.
Information from others
- Wema Bank: your verified name, account number, account tier and balance.
- X (Twitter), if you link it: your X handle and profile photo. If you run a giveaway, we read the public replies to your post to pick winners.
- Other users: for example, when someone sends you money or mentions you.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Create and secure your account, sign you in, protect it with your PIN and app lock | Contract |
| Verify your identity and open and run your bank account with Wema Bank | Contract; legal obligation (KYC and anti-money-laundering rules) |
| Move your money: transfers, withdrawals, bills, goals and giveaways | Contract |
| Show your posts, profile and messages to the people you share them with | Contract |
| Send you notifications about your money, messages and account security | Contract; legitimate interest |
| Detect fraud, abuse and harmful content, and enforce our Terms | Legitimate interest; legal obligation |
| Find and fix bugs and keep the service running | Legitimate interest |
| Keep records the law requires | Legal obligation |
| Match your contacts with Digitizer users | Consent (you can withdraw it in your phone’s settings) |
We do not sell your personal data, and we do not use it for third-party advertising.
Who we share it with
We share only what each provider needs to do its job:
| Who | What for |
|---|---|
| Wema Bank Plc (ALAT) | Verifying your identity, holding your account, moving your money |
| VTPass and RetailCode | Paying the bills you buy (airtime, data, cable TV, electricity) |
| Railway | Hosting our servers, database and uploaded photos |
| Resend | Sending account emails such as verification and security codes |
| Sentry | Error and crash reports |
| Expo, Apple and Google | Delivering push notifications and app updates |
| X (Twitter) and Openhandle | Linking your X account and reading replies for giveaways |
We also share information when the law requires it, for example with regulators, law enforcement or a court, and with professional advisers under a duty of confidentiality. If Digitizer is ever sold or merged, your data would move to the new owner under this policy.
Other users see what you choose to make visible: your name, username, photo and posts. When someone sends you money, they see the name on your bank account so they can check they have the right person.
Where your data is stored
Some of our providers process data outside Nigeria, including in the United States and the European Union. Where they do, we rely on the safeguards the Nigeria Data Protection Act allows, such as contracts requiring them to protect it to the same standard.
How long we keep it
- While your account is open, we keep what we need to run it.
- Financial and identity records (transactions, KYC details) are kept for the period Nigerian law requires after your account closes, which is generally at least five years. During that time they are kept apart from the app and are only accessible for legal and compliance purposes.
- When you close your account, it is hidden straight away. If you sign back in within 30 days you can restore it. After 30 days your profile, posts and contact details are removed or anonymised, except for the records above.
- Crash reports and logs are deleted after a few months.
Your rights
Under the Nigeria Data Protection Act you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong (your legal name, once your bank account is open, can only be changed through Wema Bank);
- delete your data, subject to the records we must keep by law;
- stop or restrict using it for a purpose, or object to a use based on legitimate interest;
- send your data to you or another provider in a usable format;
- withdraw consent where we rely on it.
Email contact@digitizersltd.com. We will reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.
Security
We protect your data with encryption in transit, encryption of your BVN at rest, hashing of your password and PIN, rate limits and lockouts on sign-in and PIN checks, and a pause on outgoing money after a PIN reset. No system is perfectly secure; if a breach affects you, we will tell you and the Commission as the law requires.
Children
Digitizer is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child has an account, tell us and we will close it.
Changes to this policy
We will update this policy as Digitizer changes. If a change matters, we will tell you in the app before it takes effect. The date at the top shows when it last changed.
Contact
Digitizers Ltd
Email: contact@digitizersltd.com