Privacy Policy
1. About MZ App
MZ App is a product of MZ & More LTD (RC 8939929), a company registered in Nigeria. In this Policy, “MZ App”, “we”, “us” and “our” refer to MZ & More LTD.
This Policy applies when you use the MZ App website, user portal, Android or iOS application, customer-support channels, and any service provided by us.
2. Information we collect
The information we collect depends on the MZ App services you use. It may include:
- Account details: your name, phone number, email address, profile photograph and account preferences.
- Identity information: your date of birth, address, government-issued identification details, photographs and verification results when required for KYC or an identity-verification service.
- Transaction details: wallet entries, payment amounts, transaction references, beneficiaries, phone numbers, meter numbers, decoder or customer numbers, products purchased, charges, cashback, refunds and receipts.
- Payment details: payment-provider, bank and virtual-account references. Card payments are processed by approved payment providers. We do not normally store your full card details.
- Device and usage information: your IP address, device type, operating system, app version, device identifiers, login history, activity logs and crash information.
- Support information: messages, emails, calls, complaints and other information you provide when contacting us.
- Permissions: access to contacts, camera, photos or notifications when you choose a feature that needs the permission and allow it on your device.
If you use fingerprint or face authentication, the biometric check is carried out by your device. MZ App does not receive or store your fingerprint or facial template.
3. How we collect information
We collect information directly from you when you create an account, complete verification, make a transaction or contact support. We also receive information automatically from your device and from service providers involved in completing your request, such as banks, payment processors, telecommunications networks, utility providers and identity-verification providers.
4. Why we use your information
We use personal information to:
- create, verify and secure your account;
- provide the products and services you request;
- authorise, process, trace, reconcile, reverse or refund transactions;
- confirm your identity and meet legal or regulatory requirements;
- detect and prevent fraud, misuse and unauthorised account access;
- send receipts, security alerts and important service updates;
- respond to enquiries and resolve complaints;
- maintain and improve MZ App; and
- send promotions where permitted. You can opt out of promotional messages at any time.
5. Our legal reasons for using information
We use personal information only when we have a lawful reason under the Nigeria Data Protection Act 2023. The reason may be to perform our agreement with you, comply with a legal obligation, protect a person’s vital interests, carry out a task authorised by law, pursue a legitimate business interest that does not override your rights, or act with your consent.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect any processing that was already lawful.
6. When we share information
We do not sell your personal information. We share only what is reasonably necessary to provide the Service, protect users or comply with the law.
Recipients may include banks, payment processors, telecommunications networks, utility and subscription providers, identity-verification providers, hosting and communication providers, professional advisers, regulators and law-enforcement agencies acting under lawful authority. We require service providers handling information for us to protect it and use it only for the agreed purpose.
7. Cookies
Our website may use essential cookies for login, security and basic functionality. We may also use optional analytics cookies to understand how the website performs. You can manage optional cookies through any available cookie controls or your browser settings. Some parts of the website may not work correctly if essential cookies are blocked.
8. How long we keep information
We keep personal information only for as long as it is needed to provide the Service, protect users, resolve complaints and meet legal, tax, accounting, financial and fraud-prevention requirements.
Personal verification data and generated Verify ID materials are normally deleted from active systems within 24 hours after the requested service is completed. We may keep them longer only when required by law, necessary to investigate fraud or a complaint, or authorised by you. Transaction references, consent records and audit records may be kept for the period required by law without keeping the complete verification document.
9. How we protect information
We use appropriate technical and organisational safeguards, including access controls, authentication, monitoring, confidentiality requirements, backups and encryption where appropriate. No online service can promise absolute security, so you should protect your password, PIN, OTP and device and contact us immediately if you suspect unauthorised access.
If a personal-data breach occurs, we will investigate, limit the impact and make any notification required by the Nigeria Data Protection Commission. Where a breach is likely to create a high risk to you, we will also notify you without undue delay.
10. International transfers
Some service providers may process information outside Nigeria. Where this happens, we will use a transfer method permitted by the Nigeria Data Protection Act 2023 and take reasonable steps to ensure that the information remains protected.
11. Your rights
Depending on the circumstances and applicable law, you may:
- ask what personal information we hold about you and request a copy;
- ask us to correct inaccurate or incomplete information;
- ask us to delete information we no longer have a lawful reason to keep;
- ask us to restrict certain uses of your information;
- object to certain processing, including direct marketing;
- request your information in a portable format where applicable;
- withdraw consent where processing is based on consent; and
- request human review of a significant decision made solely by automated processing where applicable.
To exercise a right, email Support@mzapp.ng. We may ask you to confirm your identity before acting on a request. We will respond within the period required by law.
12. Automated checks
We may use automated signals to detect fraud, secure accounts, route transactions or identify activity that needs review. Where a decision made only by automated processing would have a legal or similarly significant effect, we will use it only where the law allows and provide appropriate safeguards, including human review where required.
13. Children
MZ App accounts are intended for people aged 18 or older. We do not knowingly open transactional accounts for children. If you believe a child’s personal information has been provided to us improperly, please contact us so we can investigate and take appropriate action.
14. Other websites and services
MZ App may contain links to third-party websites or services. Their privacy practices are governed by their own policies, and we encourage you to read those policies before providing personal information.
15. Changes to this Policy
We may update this Policy when our services, legal obligations or privacy practices change. The latest version will be posted on MZ App with its effective date. If a change is important, we will provide additional notice through the Service or your registered contact details.
16. Contact us
For a privacy question, request or complaint, contact:
MZ & More LTD (RC 8939929)
Data Protection Contact
No. 13 Hudda Plaza, Hassan Usman Road
Katsina, Katsina State, Nigeria
Email: Support@mzapp.ng
Phone: 08086364324
If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission.