Privacy Policy
Last updated: 11 August 2026
Running a regulated financial service means we have to collect more about you than most apps do. This policy sets out exactly what that is, what we do with it, and what you can ask us to do about it.
About this policy
Zend is operated by Zend Technologies Ltd., a company registered in Nigeria (RC number and registered address to be inserted before publication). We are the data controller for the personal data described here.
This policy explains what we collect when you use the Zend app or this website, why we collect it, who we share it with, and the rights you have over it. It is written to meet the Nigeria Data Protection Act 2023 and the data protection laws of the other markets we operate in.
What we collect
Information you give us
- Account details: name, email address, phone number, password, transaction PIN.
- Identity information: date of birth, address, government ID document, a selfie or liveness check, and where required a BVN or NIN.
- Financial information: bank account details you add for withdrawals, and the source-of-funds information we may ask for.
- Transaction content: deposit and withdrawal instructions, bill and airtime details.
- Support messages: anything you send us when you contact support.
Information we collect automatically
- Device and app data: device model, operating system, app version, language, and a device identifier.
- Usage data: screens you open, features you use, and errors the app hits.
- Connection data: IP address and approximate location derived from it, used for fraud and sanctions screening.
- Transaction records: the on-chain transaction hashes, addresses and networks involved in your deposits.
Information from other people
- Identity and sanctions checks from verification and screening providers.
- Payment, settlement and card authorisation data from our banking and card partners.
- Fraud signals from partners and, where the law requires it, from public authorities.
Why we use it
- To run your account: creating it, authenticating you, and processing what you ask us to do. (Performance of our contract with you.)
- To verify who you are and prevent financial crime: KYC, AML, sanctions and fraud screening, and record-keeping. (Legal obligation.)
- To keep the service secure: detecting unusual activity, protecting accounts, investigating abuse. (Legitimate interest.)
- To support you: answering questions and investigating disputes. (Contract, and legitimate interest.)
- To improve Zend: understanding which features are used and where the app fails. (Legitimate interest.)
- To tell you things: service messages we must send, and marketing or newsletter emails only where you have opted in. (Contract, and consent for marketing.)
We do not sell your personal data, and we do not use it to make fully automated decisions that produce legal effects for you without a route to human review.
Sending data outside your country
Some of our providers are based outside Nigeria. Where we transfer your personal data abroad, we do so only to a country with adequate protection, or under contractual safeguards requiring a standard of protection equivalent to the one you have at home.
How long we keep it
We keep your account data for as long as you have an account with us. After you close it, we keep identity, transaction and communication records for the period our financial-crime and record-keeping obligations require, typically at least five years from the end of the relationship or the date of the transaction.
Data we no longer need is deleted or anonymised. Anonymised data may be kept indefinitely for analysis, because it can no longer identify you.
How we protect it
Data is encrypted in transit and at rest. Access to production systems is restricted and logged, passwords and PINs are stored hashed rather than in readable form, and the app supports biometric unlock on devices that offer it.
No system is perfectly secure. Your part matters too: use a password you use nowhere else, never share your PIN or a one-time code with anyone, including anyone claiming to be from Zend, and tell us straight away if something looks wrong.
Your rights
Subject to the limits the law places on them, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete data we no longer have a lawful reason to keep;
- restrict or object to a particular use, including profiling for marketing;
- send your data to another provider in a portable format;
- withdraw consent you gave us, at any time, without affecting what we did before you withdrew it.
Email privacy@zend.africa and we will respond within the time the law allows. Note that we cannot delete records we are legally required to retain, such as identity and transaction records.
If you are not satisfied with how we handled your request, you can complain to the Nigeria Data Protection Commission, or to the data protection authority in your country.
Newsletter and marketing
If you subscribe to our newsletter on this website, we use your email address only to send you Zend updates. Every email carries an unsubscribe link, and unsubscribing removes you from the list. We do not share the list with anyone outside the providers who deliver the emails for us.
Children
Zend is not for anyone under 18. We do not knowingly collect data from children, and if we learn that we have, we delete it and close the account.
Changes to this policy
We will update this policy as the service changes. The date at the top always shows the current version, and if a change materially affects your rights we will tell you in the app or by email before it takes effect.
Contact us
Privacy and data requests: privacy@zend.africa
General support: support@zend.africa
Our Data Protection Officer can be reached at the same address. Postal address to be inserted before publication.