Privacy Policy
This policy explains what personal information Amigo collects when you use the Amigo mobile app, why we collect it, how we protect it, and the rights you have over it. Amigo is operated by Amigo App LTD, a company registered in the Federal Republic of Nigeria. We are certified by the Nigeria Data Protection Commission (NDPC) and handle your data in line with the Nigeria Data Protection Act, 2023 (NDPA) and the NDPR.
1. Who we are
Amigo is a Nigerian app for buying airtime and mobile data, paying for cable TV and electricity, funding and spending an in-app account balance, sending money to other Amigo users, linking and managing your SIM, and sharing data with friends and family through Circles. When this policy says “Amigo”, “we”, “us”, or “our”, it means Amigo App LTD, the data controller responsible for your personal information.
2. What we collect
2.1 Information you give us
- Account details — your name, phone number, and the password and transaction PIN you set. An email address if you provide one.
- Identity details for virtual accounts — when you create a dedicated account number to fund your wallet, our banking partner may require your Bank Verification Number (BVN) and other Know-Your-Customer (KYC) details required by Nigerian law. We pass these to the licensed provider that issues the account; we do not use your BVN for any other purpose.
- Profile photo — if you choose to add one.
- Transaction details — the phone numbers, meter numbers, smartcard numbers, amounts, and recipients you enter to complete a purchase or transfer.
- A contact you pick — if you use the “choose from contacts” option, we read only the single contact you select, to fill in a phone number for you. We do not upload or store your address book.
- Messages you send us — support requests and their contents.
2.2 Information we collect automatically
- Device & app information — device model, operating-system version, app version, language, and a device identifier used to keep your session and widgets in sync and to guard against fraud.
- Push-notification token — a token from Apple or Google so we can send you receipts, alerts, and Circle notifications. You can turn notifications off in your device settings.
- Usage & log data — records of your transactions, sign-ins, and errors, kept so your history is accurate and to detect abuse.
Amigo does not collect your precise GPS location, and does not track you across other companies’ apps and websites for advertising.
2.3 Information from partners
- Payment status from our payment processors when you fund your wallet.
- Delivery status from the telcos, discos, MultiChoice, and vending partners that fulfil your airtime, data, electricity, and cable purchases.
- SIM details (such as balance and expiry) from your network operator’s aggregator when you link a SIM and authorise us to read them.
3. How we use your information
- To create and secure your account, and to sign you in.
- To carry out the purchases, bill payments, transfers, and gifts you request, and to show you receipts and history.
- To fund, hold, and spend your Amigo balance, and to process refunds when a transaction fails.
- To run Circles, subscriptions, auto-renewals, rewards, cashback, and referrals.
- To send service messages — receipts, transaction alerts, security notices, and, if you allow it, product news.
- To detect, prevent, and investigate fraud, abuse, and activity that threatens you, other users, or Amigo.
- To provide customer support and to improve reliability and performance.
- To meet legal, regulatory, tax, accounting, and anti-money-laundering obligations.
4. Legal bases
Under the NDPA/NDPR we rely on one or more of the following whenever we process your data:
- Performance of a contract — to deliver the services you sign up for.
- Your consent — for optional things like marketing messages or reading a contact you pick. You may withdraw consent at any time.
- Legal obligation — KYC, AML, tax, and record-keeping duties.
- Legitimate interests — keeping the platform safe, preventing fraud, and improving the service, balanced against your rights.
5. Payments & card information
Your Amigo account balance is a prepaid credit used to buy the services Amigo offers. It is not a bank deposit, is not interest-bearing, and Amigo is not a bank.
6. When we share your information
We share personal data only as needed to run the service, and never sell it. We may share it with:
- Fulfilment partners — telecom operators and their aggregators (for airtime, data, and SIM services), electricity distribution companies, MultiChoice and other TV providers, and our vending partners — limited to the details required to complete your purchase (for example, the phone or meter number).
- Payment & banking partners — payment processors and the licensed institutions that issue your funding account, to move money and confirm payments.
- Technology providers — our push-notification provider (Apple / Google / Firebase) and our media-hosting provider (for profile photos), acting on our instructions as processors.
- Another Amigo user — when you transfer money, gift data or a subscription, or add someone to a Circle, the relevant details (such as your name or the amount) are shown to that user so the feature works.
- Authorities — where we are legally required to, or to protect our rights, users, or the public, and to prevent fraud or crime.
- A successor — if Amigo is involved in a merger, acquisition, or reorganisation, your data may transfer as part of that, subject to this policy.
7. Your SIM, contacts & Circles
- Linking a SIM. Linking is confirmed with a one-time code sent to that number, so only someone in control of the SIM can link it. Once linked, we may read details such as balance and expiry to show them in the app. You can unlink at any time.
- Contacts. We only ever read the one contact you tap to select, and only to fill in a phone number. We do not store or upload your contact list.
- Circles. In a Circle, members can see shared information such as names, roles, pooled-data activity, and draw or rescue events. Only share a Circle with people you trust.
8. How long we keep your information
We keep your data for as long as your account is active and for as long afterwards as we need it to meet legal, accounting, tax, and dispute-resolution obligations — typically several years for financial records, as required by Nigerian law. When data is no longer needed, we delete it or irreversibly anonymise it.
9. How we protect your information
- Traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
- Passwords are stored using strong one-way hashing; we cannot read them.
- Sensitive identifiers are encrypted, and access to production data is restricted and monitored.
- You can add an in-app lock (PIN or biometric) for an extra layer on your device.
No system is perfectly secure, but we work hard to protect your data and to keep our safeguards up to date. If a data breach affects your rights, we will notify you and the NDPC as required by law.
10. Your rights
Under the NDPA/NDPR you have the right to:
- Access the personal data we hold about you.
- Correct data that is wrong or out of date — you can edit your profile in the app, or ask us.
- Delete your account and personal data (subject to records we must keep by law). You can start this from Settings → Account → Delete account, or by contacting us.
- Object to or restrict certain processing, and withdraw consent for anything based on consent.
- Port your data — receive a copy in a portable format.
- Complain to the Nigeria Data Protection Commission if you believe your rights have been breached.
To exercise any right, contact us using the details below. We respond within the timeframe required by law.
11. Children
Amigo is a financial service intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
12. Where your data is processed
Your data is primarily processed in Nigeria. Some of our technology providers (for example, push-notification and media-hosting services) may process limited data on servers outside Nigeria. Where that happens, we take steps to ensure the data remains protected to a standard consistent with the NDPA/NDPR.
13. Changes to this policy
We may update this policy from time to time. When we do, we’ll change the “Last updated” date above and, for significant changes, let you know in the app or by message. Continuing to use Amigo after an update means you accept the revised policy.
14. Contact us
For any privacy question, or to exercise your rights:
- Email: support@amigo.ng
- In-app: Settings → Help
Amigo App LTD · Est. 2018
No. 1 GSM Hub, Kano Economic City, Kano, Nigeria
RC 7477866