Privacy policy
Last updated
This says what Lentopay collects, why, who it goes to, and what you can ask us to do with it. It describes the app and service as they actually work; where something is required of us by Nigerian law we say so rather than leaving it vague.
Who we are
Lentopay is operated by Dexter Cyberlab. Write to compliance@lentopay.com about anything on this page.
What we collect
| What | Why |
|---|---|
| Email address | It identifies your account and receives your verification and security codes. |
| Password | Stored only as a hash. We cannot read it. |
| Phone number, name, handle | Contacting you, and showing people who they are paying. |
| Bank Verification Number, and a liveness photograph | Confirming you are who you say you are. Nigerian anti-money-laundering regulation requires this before an account may hold or move money above the lowest tier. |
| Bank account numbers you add as payout destinations | Sending your withdrawals to the right place. |
| Your balances and every transaction | This is the ledger. It is the service. |
| Support messages you send us | Answering them. |
| A per-installation identifier | Stopping one handset from farming its own invitation rewards. |
We do not collect your location, your contacts, your photos, or anything from your device beyond the installation identifier above. The app asks for no permissions other than notifications, which is optional and which the app works fully without.
What we do not do
We do not track you. No data leaves Lentopay for advertising, and none of it is combined with data held about you by other companies for that purpose. We do not sell your data to anyone, for any price. There are no third-party analytics or advertising libraries in the app.
Who we share it with
Only the parties that make the service work, and only what each of them needs:
- Identity verification — your BVN and liveness photograph go to our verification provider to be checked against the national database. They do not receive your balances.
- Payments — our payments provider receives the account numbers and amounts needed to move naira in and out. They do not receive your identity documents.
- Email delivery — our mail provider handles the messages we send you.
- Regulators and law enforcement — where Nigerian law requires it, including transaction reporting to the Federal Inland Revenue Service.
How long we keep it
Nigerian anti-money-laundering law requires financial records, including identity records and transaction history, to be kept for at least five years after an account closes. We keep them for that period and no longer. Anything not subject to that requirement is deleted when you ask.
Deleting your account
You can ask us to delete your account from inside the app: Profile → Settings → Delete my account. Your balances must be zero first, because we cannot delete an account that still holds your money. When you ask:
- Your profile, handle, phone number, saved payout destinations, devices, notification preferences and support history are deleted.
- Your identity records and transaction history are retained for the five years the law requires, then deleted. During that period they are not used for anything except answering a lawful request.
- You will be told when it is done.
You do not need to contact support to start this, and we will not ask you to.
Your rights
Under the Nigeria Data Protection Act you may ask us for a copy of your data, ask us to correct it, ask us to delete it subject to the retention above, and object to how we use it. Write to compliance@lentopay.com and we will answer within 30 days. The app also produces a full annual statement of your account at any time, without asking us.
Security
Traffic between the app and our servers is encrypted in transit. Passwords are hashed. Your transaction PIN and any device passcode are stored in the iOS keychain, which is encrypted by the operating system, and are never sent anywhere in a form we could read. Two-factor authentication is available and is required before an administrator can reach any customer data.
Children
Lentopay is not for anyone under 18 and we do not knowingly hold data about anyone under 18.
Changes
If this policy changes we will tell you in the app before the change takes effect.