Privacy Policy

1. What we collect

Only what the service needs to work, which is:

• Account details: your name, email address and, if you add one, your phone number. Your email is how you sign in.
• Identity documents: when you verify your account, a photo of a government-issued document and a selfie. These are collected and checked by our verification partner, Didit, and we receive the outcome and the name printed on the document.
• Transfers: who you sent to, how much, in which currencies, and when. This is your record as much as ours.
• Recipients: the account numbers and bank names you save, and the account names those banks return.
• Payment details: when you pay, your card number passes through our systems to the payment processor and is never written down. If you ask us to remember a card, we keep the processor's token, the card scheme, the last four digits and the expiry date. Nothing on that list can be used to reconstruct a card number.
• Device details: a notification token so we can tell you when a transfer lands, and basic device and app information used for fraud checks and crash reports.

2. What we do with it

• Move your money and show you where it is.
• Verify who you are, which the law requires of us before we can send anything.
• Detect and prevent fraud, including checks by the card networks when you pay.
• Notify you when a transfer changes state. These are the only messages we send, and you can switch them off in the app.
• Fix things that break, using crash reports that do not contain your transfer history.

3. Who else sees it

We use partners to do the parts of this that require a licence, and they only ever receive what their part requires.

• Nomba and Squad (GTCO) process card payments and deliver naira to Nigerian bank accounts. They receive the payment and payout details.
• Didit verifies identity documents. They receive your document and selfie; we receive the result.
• Google Firebase handles sign-in, notifications and crash reporting.
• We do not sell your data, and we do not share it for anyone else's advertising.

4. How long we keep it

Transfer records are kept for the period the law requires of a business that moves money, which is longer than your account lasts. They are your receipts as well as our records.

Everything kept only for convenience, meaning saved cards, saved recipients and notification tokens, is removed when you close your account. You can close it from the app, under Profile.

5. Keeping it safe

Traffic between the app and our systems is encrypted. Card numbers are not stored. Screens showing money or identity are marked so they do not appear in the phone's app switcher or in screenshots on Android. Your PIN is stored as a hash and nobody at Moneque can read it back, which is why we will never ask you for it.

6. Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete what we are not required to keep. Message us and we will answer.

Correcting a verified name goes through the same document check as the original, because otherwise it would be a way around verification.

7. Cookies and tracking

This website sets no cookies. It runs no analytics and no advertising tags, so nothing here records which pages you read or follows you to another site. The one exception is the map on the contact page, which is Google's and only loads if you press the button asking for it; until you do, nothing about your visit reaches Google. The app does not use cookies either.

If that ever changes we will ask before it does, and this section will say what changed.

8. Changes

If we change this policy we will post the new version here with a new date. If a change materially affects what we do with your data, we will tell you in the app before it takes effect rather than leaving you to notice.