Privacy Policy
Learn how we protect your personal information, transaction history, and device permissions at BIA Fintech.
1. Information We Collect
We collect personal information to provide safe, reliable cashless street payment experiences in Nigeria. This includes:
- Account Data: Name, phone number, email address, transaction PIN, and BVN for CBN-mandated KYC verification.
- Transaction Data: Payment amounts, recipient information, timestamps, and payment statuses for Keke street billing and utility/airtime recharges.
2. Personal & Sensitive Permissions (Contact Picker)
Our mobile application includes features that let you select phone numbers directly from your address book. To facilitate this:
Dynamic Contact Access Policy
When using the **Airtime Recharge** or **Peer-to-Peer Transfer** features in the BIA mobile application, the app requests dynamic access to your device's contacts list (`READ_CONTACTS` permission).
Crucially: We only read the single contact chosen by you locally via the device's native contact picker dialog. We NEVER scrap, harvest, store, or transmit your entire contact list to our servers, nor do we share your contacts' information with any third-party marketing services.
You can grant or revoke this contact access permission at any time directly through your smartphone's operating system settings.
3. How We Use Your Information
We use your personal and device data for the following specific purposes:
- To Process Payments: Executing QR scans, peer-to-peer money transfers, and bank settlements.
- To Enable App Functionality: Facilitating phone number autofill using the local contact picker widget.
- To Prevent Fraud: Verifying phone numbers, performing biometric authorization checks, and monitoring transaction channels for safe execution.
- Compliance: Adhering to Central Bank of Nigeria (CBN) rules, anti-money laundering (AML) protocols, and counter-terrorist financing guidelines.
4. Data Protection & Security Protocols
We maintain robust industry-standard safeguards to secure your private financial data:
- SSL/TLS Encryption: All server requests are encrypted inside secured channels.
- PIN Hashing: Transaction PINs are heavily hashed using state-of-the-art secure hashing algorithms, meaning BIA staff can never read or view your PINs.