How we collect, use and protect your personal data at My Ajo
My Ajo App Ltd (RC 9394109) (“My Ajo”, “we”, “us”) is the data controller for your personal data. This notice explains how we handle it when you use our savings-circle app, in line with the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive (GAID) 2025. Please read it together with our Terms of Service.
Last Updated: 20 June 2026
My Ajo App Ltd is a company registered in Nigeria (RC 9394109), with its registered office at 24 (Flat A), Serviced Flats Alabeko, Road 8, Close 2, Lekki Atlantic Gardens Estate, Eti-Osa, Lekki, Lagos 101245, Nigeria. We decide how and why your personal data is processed. For any privacy question or to exercise your rights, contact our Data Protection Officer at privacy@myajoapp.app.
Depending on how you use My Ajo, we collect:
When you add a next-of-kin (emergency contact), you give us that person's name, phone number and your relationship to them. We process this to operate your account and on our legitimate interest in being able to reach an emergency contact. It is informational only — it gives the named person no access to your account, balance or money.
Out of respect for that person, we send them a transactional message letting them know you listed them and asking them to confirm or decline — a single SMS if they don't use My Ajo, or an in-app notification (and, if they don't respond, at most one reminder) if they do. We do not send them marketing. If they decline — or never respond and the request expires — we stop contacting them and suppress that number from further next-of-kin messages.
Retention & their rights. Once a person declines or the request expires, we erase their name and phone number from that messaging record (keeping only the status and timestamps), suppress the number from any further next-of-kin messages, and delete the messaging record after a short retention period. The person who listed them keeps the contact they chose in their own account until they change or remove it. If you delete your My Ajo account, your next-of-kin data is removed; and if someone listed you as their next of kin, your name and phone number are erased from their account when you delete yours. A person named as a next of kin can stop all further contact at any time by tapping Decline in the message, and can have their details fully removed by contacting our Data Protection Officer (see “Contact Us” below) — they do not need a My Ajo account to do so.
If you act as a guarantor for another member, we share your name (and a masked contact) with the person you are guaranteeing, record the guarantee, and — where a guaranteed member defaults — note that outcome, which may affect your trust score. You are told this before you accept, and you can contact our Data Protection Officer about your data at any time.
We use your personal data for the purposes below, each supported by a lawful basis under the NDPA:
| Purpose | Lawful basis |
|---|---|
| Provide the service — create/manage your account, run savings circles, process contributions and payouts | Performance of a contract |
| Verify your identity (KYC) | Legal obligation |
| Prevent fraud and financial crime (AML/CFT monitoring, security) | Legal obligation; legitimate interest |
| Communicate with you — alerts, reminders, service updates | Contract; legitimate interest |
| Maintain trust & safety — calculate your trust score | Legitimate interest |
| Service notifications — vacancy alerts about openings in circles relevant to you | Legitimate interest (you can opt out at any time) |
We calculate a trust score from your activity. It may automatically affect certain limits — for example, how many savings circles you can join at once. You can ask us to review any such decision by a person, share your view, or object, by emailing our Data Protection Officer.
We do not sell your personal data. We share it only with trusted service providers who process it on our behalf under written agreements, and where required by law:
Our website uses Google Analytics (GA4) to understand usage and Google reCAPTCHA to prevent fraud and abuse; these set cookies and process technical data such as your IP address. Where required, we ask for your consent before non-essential cookies are set, and you can manage your choices at any time.
Some of our providers process data outside Nigeria (for example, on Google Cloud infrastructure outside Nigeria, and through providers such as Twilio and Resend). Where we transfer your data internationally, we rely on a lawful transfer mechanism under the NDPA — such as an adequate level of protection, appropriate contractual safeguards, or a permitted derogation (for example, where the transfer is necessary to provide the service you requested).
We keep your personal data only as long as necessary for the purposes described, or as required by law. Because we are subject to financial-services and AML obligations, identity, transaction and AML records are retained for the statutory minimum period (commonly around five years) after your relationship with us ends, even if you close your account. Identity-verification documents and images — such as your ID images and liveness selfie — are kept for at least this period and are not automatically deleted when you close your account. Data no longer required is deleted or anonymised.
Subject to the NDPA, you have the right to: be informed; access your data; correct inaccurate data; request deletion; restrict or object to certain processing; data portability; and withdraw consent at any time (without affecting prior processing). You will not be discriminated against for exercising these rights.
How to exercise them: use the in-app controls (view and download your data, edit your details, and request account deletion), or email privacy@myajoapp.app. We will verify your identity and respond within 30 days. Some requests may be limited by our legal obligations (for example, we may need to retain certain records for AML purposes).
Complaints: if you are unhappy with how we handle your data, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
We use industry-standard technical and organisational measures, including:
My Ajo is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact privacy@myajoapp.app and we will delete it.
We may update this Privacy Notice from time to time. We will post the updated version with a new "last updated" date and, where changes are significant, notify you in the app or by email.
For privacy-related questions, or to exercise your rights, contact our Data Protection Officer:
📧 Email: privacy@myajoapp.app
🌐 Website: myajoapp.app
🏛️ Regulator: Nigeria Data Protection Commission — ndpc.gov.ng