Last Updated: June 2026 | NDPA 2023 Compliant
GUCHOR-MONIE ("we", "our", "us") operates as a Virtual Top-Up service provider in Nigeria. We are committed to protecting your privacy and handling your data with transparency and care. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights under the Nigeria Data Protection Act (NDPA, 2023).
GUCHOR-MONIE collects information you provide directly and information generated through your use of our services. We collect: your full name, email address, phone number, and password (hashed) when you register; your BVN or NIN and date of birth when you complete optional KYC verification; transaction data including purchases, wallet funding, and airtime-to-cash requests; device information including device fingerprint (derived from your device's operating system and app version), operating system version, and app version; and account activity such as login timestamps and session duration.
When you create a GUCHOR-MONIE account, we collect: full name, email address, phone number, and a password (stored as a bcrypt hash — we never store plain text passwords). You may optionally provide a referral code. BVN, NIN, and date of birth are only collected if you choose to complete KYC verification, which is a separate optional step.
We store data about your transactions including: airtime, data, cable TV, electricity, exam PIN, SMS, data card, and recharge card purchases; wallet funding history; airtime-to-cash conversion requests (including network, sender phone number, amount, payout method, and bank details if applicable); transaction amounts, dates, wallet balance changes, and status. This data is retained for regulatory compliance and dispute resolution.
If you choose to complete KYC verification, we collect your BVN (Bank Verification Number) or NIN (National Identification Number) and date of birth. This information is validated through Monnify, our payment processing partner, which checks your BVN/NIN against your name and date of birth. We store your KYC status and the verification method used. KYC data is retained for regulatory compliance.
We collect device information to protect your account: a device fingerprint derived from your device's operating system and app version, your IP address, and session timestamps. This data is used for device recognition — when you log in from a new device, an OTP is sent to your email for verification. We also collect app version and OS version for platform improvement and debugging.
We use your information for: account creation and authentication; processing your VTU purchases and wallet transactions; airtime-to-cash conversion processing; device recognition and fraud prevention (sending OTP to your email when logging in from a new device); KYC identity verification (if you choose to verify); sending transaction confirmation emails and OTP codes; customer support; regulatory compliance with Nigeria Data Protection Act (NDPA 2023) and Central Bank of Nigeria (CBN) regulations; and platform improvement and debugging.
We do not sell your personal information to third parties. We share data with the following third-party service providers strictly for service delivery: VTU Providers (mySubwallet, Dorosub, First-sub, MBC Data) — we share phone number, network, amount, and service details to process your airtime, data, cable, electricity, and other VTU purchases; Monnify — we share your name, email, BVN/NIN, and date of birth for KYC verification and payment processing; MailerSend — we share your email address to send OTP codes and transaction notifications; and network operators — we share phone numbers and service details when processing purchases. All third-party providers are contractually obligated to protect your data and use it only for the purposes we specify.
For Airtime to Cash requests, after you submit a request, you are directed to contact our admin via WhatsApp to confirm your airtime transfer. When you click the WhatsApp contact button, your name, email, phone number, and transaction details are pre-filled in the WhatsApp message. This communication happens directly between you and our admin through WhatsApp and is subject to WhatsApp's privacy policy.
We implement industry-standard security measures: SSL/TLS encryption for all data transmitted between your device and our servers; bcrypt hashing for passwords and transaction PINs (we never store plain text credentials); httpOnly, secure cookies for session management; device fingerprinting for account protection; rate limiting on authentication endpoints; and token-based session management with automatic expiry. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We use httpOnly cookies to maintain your authentication session. These cookies cannot be accessed by JavaScript, protecting against cross-site scripting (XSS) attacks. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but this may affect platform functionality.
We retain your account data for as long as your account is active. Transaction records are kept for regulatory compliance and dispute resolution. KYC verification data is retained as required by Nigerian financial regulations. If you close your account, we retain data as required by law and delete the rest within a reasonable period.
Under the Nigeria Data Protection Act (NDPA 2023), you have the right to: access your personal data; correct or update inaccurate information; request deletion of your data (subject to legal retention obligations); data portability (receive your data in a machine-readable format); withdraw consent for data processing; and lodge complaints with the Nigeria Data Protection Commission (NDPC). To exercise these rights, contact us at [email protected] or through in-app support.
GUCHOR-MONIE services are not directed to children under 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a child under 18, please contact us immediately at [email protected]. We will take appropriate action to remove such information.
Your data is stored on secure servers. In case of a merger, acquisition, or business transfer, your information may be transferred to the new entity. We will notify you of such transfers via email or in-app notification.
We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. Material changes will be communicated via email, in-app notification, or prominent notice on our website. Continued use of GUCHOR-MONIE after updates constitutes acceptance of the modified policy.
This Privacy Policy is governed by the Nigeria Data Protection Act (NDPA, 2023) and all applicable Nigerian laws and regulations. You consent to the exclusive jurisdiction of Nigerian courts for privacy disputes.
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at: Email: [email protected] | In-App Support: Available 24/7. We typically respond to privacy inquiries within 7 business days.