1. Who we are
MariPay is operated by Marigan Space Ltd., a company incorporated in Nigeria. MariPay provides digital payment and wallet services, including money transfers, airtime and data purchases, bill payments, and related financial tools for individuals and businesses.
For the purposes of applicable data protection laws, including the Nigeria Data Protection Act 2023 (NDPA), Marigan Space Ltd. is the data controller responsible for your personal information processed through the Services.
2. Scope
This Privacy Policy applies to:
- The MariPay mobile application for Android (and iOS when available);
- Our website and web pages (including contact forms and download pages); and
- Customer support, onboarding, and communications related to the Services.
By creating an account, using the app, or submitting information through our website, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Services.
3. Information we collect
Depending on how you use MariPay, we may collect the following categories of information:
3.1 Account and profile information
- Full name, phone number, email address, and account credentials;
- Profile details you choose to provide (such as business name for merchant accounts);
- Account preferences and settings.
3.2 Identity verification (KYC) and compliance information
To comply with applicable laws, prevent fraud, and protect the financial system, we may collect identity and verification information, which may include:
- Government-issued identification details and images (where required);
- Bank Verification Number (BVN), National Identification Number (NIN), or other identifiers required by regulators or partners;
- Date of birth, residential address, and proof-of-address documents;
- Selfie, photograph, or biometric data used solely for identity verification and fraud prevention (where enabled).
3.3 Financial and transaction information
- Wallet balance, funding sources, and transaction history;
- Payment amounts, dates, references, beneficiaries, and transaction status;
- Airtime, data, utility, and bill payment details;
- Bank account or card information where you link a payment method (we work with licensed partners; we do not store full card PANs on our servers where prohibited by payment standards).
3.4 Device and technical information
- Device type, operating system, app version, and unique device identifiers;
- IP address, mobile network information, and general location derived from IP (not precise GPS unless you grant location permission for a specific feature);
- Log files, crash reports, diagnostics, and performance data to maintain and improve the app.
3.5 Communications and support
- Messages you send to customer support (in-app, email, phone, or social channels);
- Records of complaints, disputes, and service requests;
- OTP and SMS verification codes sent for authentication (we do not publish the content of one-time codes).
3.6 Website contact form
If you contact us through our website, we collect your name, email address, and message content to respond to your enquiry and maintain a record of correspondence.
4. How we collect information
We collect information when you:
- Register for or log into a MariPay account;
- Complete identity verification or compliance checks;
- Fund your wallet, send or receive money, or pay bills through the app;
- Contact us for support or submit forms on our website;
- Interact with notifications, surveys, or promotional messages (where you opt in);
- Use the app automatically (through cookies, logs, and similar technologies as described below).
We may also receive information from payment processors, banking partners, identity verification providers, fraud-prevention services, and regulators where permitted by law.
5. How we use your information
We use personal information for the following purposes:
- Providing the Services: Creating and managing your account, processing transactions, and delivering wallet and payment features;
- Security and fraud prevention: Detecting suspicious activity, verifying identity, and protecting you and other users;
- Legal and regulatory compliance: Meeting obligations under financial, anti-money laundering (AML), and know-your-customer (KYC) laws;
- Customer support: Responding to enquiries and resolving issues;
- Service improvement: Analysing usage trends, fixing bugs, and developing new features;
- Communications: Sending transactional messages (such as OTPs, receipts, and security alerts);
- Marketing: Sending promotional messages only where you have given consent or where permitted by law, with an option to opt out;
- Enforcement: Protecting our rights, users, and the integrity of the Services.
We do not sell your personal information. We do not share personal information with third parties for their own independent marketing without your consent.
6. Legal bases for processing
Under the NDPA and similar laws, we process personal information based on one or more of the following grounds:
- Contract: Processing necessary to provide the Services you request;
- Legal obligation: Processing required by law, regulation, court order, or regulatory authority;
- Legitimate interests: Processing necessary for security, fraud prevention, and service improvement, balanced against your rights;
- Consent: Where you have given clear consent, such as for optional marketing or certain permissions.
You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
8. International transfers
Your information is primarily processed in Nigeria. Some of our service providers may process data in other countries. Where personal information is transferred outside Nigeria, we implement appropriate safeguards as required by the NDPA, such as standard contractual clauses, adequacy decisions, or your explicit consent where applicable.
You may contact us for more information about safeguards applied to international transfers.
9. Data retention
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including:
- While your account is active and for a reasonable period after closure;
- As required by financial, tax, AML, and record-keeping laws (which may require retention for several years);
- As needed to resolve disputes, enforce agreements, or defend legal claims.
When data is no longer required, we delete or anonymise it in a secure manner, unless further retention is required by law.
10. Security
We implement administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include encryption in transit, access controls, secure development practices, and staff training.
No method of transmission or storage is completely secure. You are responsible for keeping your login credentials, PIN, and device secure. Please notify us immediately if you suspect unauthorised access to your account.
11. Your rights and choices
Subject to applicable law, you may have the right to:
- Request access to personal information we hold about you;
- Request correction of inaccurate or incomplete information;
- Request deletion of information where legally permitted;
- Object to or restrict certain processing;
- Withdraw consent where processing is based on consent;
- Request a copy of your data in a portable format where technically feasible;
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC) or other competent authority.
To exercise your rights, contact us using the details in Section 19. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.
12. Account and data deletion
You may request closure of your MariPay account and deletion of personal information associated with it at any time. Some information may be retained where required by law or for legitimate purposes such as fraud prevention and regulatory record-keeping.
Request deletion online
Request account & data deletionUse our secure form to submit a deletion request. We typically respond within 30 days.
You may also request deletion by emailing privacy@maripay.ng or calling the numbers in Section 19. We may ask you to verify your identity before processing a request.
If you installed MariPay from Google Play, this deletion page satisfies Google Play’s requirement for a web link where users can request account and data deletion. We will honour valid requests in accordance with our legal obligations and Google Play policies.
13. Children’s privacy
MariPay is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete such information.
14. Marketing communications
We may send promotional messages about MariPay products and offers where you have opted in or where permitted by law. You can opt out of marketing emails or SMS at any time by following the unsubscribe instructions in the message or by contacting us. Transactional and security-related messages (such as OTPs and payment alerts) are not marketing messages and may still be sent as necessary to provide the Services.
16. App permissions (Android)
Depending on features you use, the MariPay app may request device permissions. We request only permissions necessary for the relevant feature:
- Camera: Capturing identity documents or selfies for verification (if applicable);
- Storage / photos: Uploading documents for KYC (if applicable);
- Phone / SMS: Device verification or reading OTP messages for authentication (only where supported and with your consent);
- Notifications: Sending transaction alerts and security messages;
- Network access: Connecting to our servers to process payments.
You can manage permissions in your device settings. Denying certain permissions may limit specific features but will not necessarily prevent basic use of the app where alternatives exist.
17. Third-party links and services
Our Services may contain links to third-party websites or services (such as social media). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing personal information.
18. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the “Last updated” date. Where required by law, we will notify you through the app, email, or other appropriate means. Continued use of the Services after changes take effect constitutes acceptance of the updated policy, unless otherwise required by law.
19. Contact us
For privacy questions, data subject requests, or complaints, contact:
Marigan Space Ltd. (MariPay)
Nigeria
Email: privacy@maripay.ng
Phone: +234 809 823 6731 · +234 805 996 1193
Website: Contact form
We aim to respond to privacy requests within 30 days, or within the period required by applicable law. If you are not satisfied with our response, you may contact the Nigeria Data Protection Commission (NDPC).