Privacy policy
How we collect, use, and protect your information.
Last updated on 10 September 2026
1. Who we are
Banr is operated by Westpay Global Resources Limited (RC 1437462), The Philippi Centre, Oluwalogbon House, Plot A, Obafemi Awolowo Way, Alausa, Ikeja, Lagos, Nigeria ("Banr", "we", "us"). We are the data controller for personal data processed through the Banr mobile app, the Banr web app, getbanr.com and our support channels.
We are registered with the Nigeria Data Protection Commission (NDPC) as a data controller of major importance. Registration number: NDPC/DCP/14200.
Data Protection Officer: privacy@getbanr.com
Banr is not a bank. Your wallet account is provided by 9 Payment Service Bank Limited (9PSB), a bank licensed by the Central Bank of Nigeria (CBN), through our banking-as-a-service partner, Anchor Software Limited. 9PSB also processes your data to hold your account and meet its own legal duties, under its own privacy notice.
2. The data we collect
| Type | What it includes | Where it comes from |
|---|---|---|
| Identity | Full legal name, date of birth, gender, BVN, NIN (if you link it), the selfie you take during verification | You, and BVN/NIN records through our verification partners |
| Contact | Phone number, email address, residential address, city, state, country, postal code | You |
| Next of kin | Name, relationship, phone number and address of the person you nominate | You |
| Account and security | Account number, wallet ID, Banr tag, account tier, passcode and transaction PIN (stored only in encrypted form), voucher PINs, login history | You, and generated by us |
| Transactions | Amounts, dates, references, sender and recipient details, beneficiary bank and account numbers, remarks, saved beneficiaries, receipts and statements | You, people who pay you, 9PSB and payment networks |
| Vouchers | Voucher names, serial numbers, balances, top-ups, redemptions, and status | You and people who redeem your vouchers |
| Bills and airtime | Phone numbers you recharge, network, meter numbers, smartcard numbers, packages, tokens issued | You and billers |
| Referrals | Your referral code, who invited you, who you invited, their sign-up and first-transaction status, rewards | You and your referrer |
| Device and technical | Device model, operating system, app version, device identifiers, IP address, crash and performance logs | Your device, automatically |
| Location | Your device’s location when you log in or transact (only if you allow it), and approximate location from your IP address | Your device |
| Support and disputes | Chats, emails, WhatsApp messages, call records, dispute details, images you upload, feedback, your reason for deleting your account | You |
Contacts. We don’t upload your contact list. When you tap "Choose contact", only the number you pick is shared with the app.
Biometrics. Fingerprint and Face ID login use your phone’s own biometric system. We never receive or store your fingerprint or face data; your phone only tells us whether the check passed. The selfie you take during sign-up is different: we compare it with your BVN photo to confirm it’s really you. This is sensitive personal data under the Nigeria Data Protection Act 2023, and we process it only with your explicit consent and to meet our identity verification obligations.
3. How we use your data
| Purpose | Legal basis |
|---|---|
| Open and run your account and wallet | Contract |
| Verify your identity, set and upgrade your account tier, screen against sanctions lists | Legal obligation (CBN KYC rules, Money Laundering (Prevention and Prohibition) Act 2022) |
| Match your selfie to your BVN photo | Explicit consent and legal obligation |
| Process transfers, vouchers, airtime, data, and bill payments, and send receipts and tokens. | Contract |
| Send transaction alerts and security notices. | Contract and legal obligation |
| Detect and prevent fraud and unauthorised access, including using device and location data to spot unusual activity | Legal obligation and legitimate interests |
| Handle disputes and complaints, and reverse failed transactions | Contract and legal obligation |
| Run the referral programme and prevent abuse. | Contract and legitimate interests |
| Fix bugs and improve the app | Legitimate interests (and consent for non-essential cookies and analytics) |
| Send announcements and promotions | Consent, which you can withdraw at any time |
| Report to regulators, respond to lawful requests, and keep required records. | Legal obligation |
4. Automated decisions
We use automated checks for identity verification, selfie matching, fraud monitoring, and transaction limits. These can decline a verification or hold a transaction. If an automated decision affects you, you can ask for a person to review it, give your side, and challenge the outcome by contacting support.
6. International transfers
Some of our service providers store or process data outside Nigeria. We only transfer data where the Nigeria Data Protection Act allows it, using adequacy decisions, contractual safeguards or another lawful basis. Contact us for details of the safeguards we use.
7. How long we keep your data
| Data | How long |
|---|---|
| Identity, KYC, and selfie records | At least 5 years after your account is closed |
| Transaction records | At least 5 years after the transaction |
| Support chats and disputes | Until resolved, then up to 5 years where linked to a transaction |
| Unfinished sign-ups | Deleted within 6 months, unless the law requires us to keep them |
| Device and security logs | Up to 6 months, unless needed for a fraud or security investigation |
| Marketing preferences | Until you withdraw consent, plus a record of your choice |
We keep data longer if a regulator, court, or investigation requires it. When we no longer need your data, we delete or anonymise it.
8. How we protect your data
We encrypt data in transit and at rest, store passcodes and PINs in encrypted form, protect your account with one-time codes, passcodes, PINs and optional biometrics, restrict staff access to what their role needs, and monitor our systems for threats.
Banr will never ask for your passcode, PIN or one-time code.
If a data breach puts your rights at risk, we will notify the NDPC within 72 hours of becoming aware of it and tell you without undue delay where the risk to you is high.
9. Your rights
Under the Nigeria Data Protection Act 2023, you can:
- ask for a copy of your data
- correct inaccurate data
- ask us to delete your data
- restrict or object to how we use your data, including for marketing
- receive your data in a portable format
- withdraw consent at any time
- ask for a person to review an automated decision
- complain to the NDPC at ndpc.gov.ng
To use these rights, update your details in Profile → Edit details, contact support in the app, or email privacy@getbanr.com. We may need to confirm your identity first. We aim to respond within 30 days. It’s free unless a request is clearly unfounded or excessive.
We can’t delete records the law requires us to keep. In that case, we close your account and restrict use of those records to legal purposes only.
10. App permissions
| Permission | Why we ask | If you say no |
|---|---|---|
| Camera | Take your verification selfie; scan voucher QR codes | You can’t finish verification; you can enter voucher details by hand. |
| Photos and files | Upload a voucher image, attach images to a dispute, and save receipts and statements. | Enter details by hand or skip attachments. |
| Location | Protect your account and confirm transactions are made by you. | The app still works, but we may ask for extra checks. |
| Biometrics | Faster login and payment approval. | Use your passcode and PIN. |
| Contacts | Pick a number to recharge or pay. | Type the number. |
| Notifications | Send transaction and security alerts. | Alerts still arrive by SMS or email. |
You can change permissions at any time in your phone’s settings.
11. Marketing and alerts
Transaction alerts and security notices can’t be turned off, because they protect your account. You can stop announcements and promotions at any time using the unsubscribe link in our emails or by contacting support.
12. Children
Banr is for people aged 18 and over. We don’t knowingly collect data from anyone under 18. If we learn we have, we’ll close the application and delete the data, except for what the law requires us to keep.
14. Changes to this policy
We’ll tell you in the app or by email before any significant change takes effect. The date at the top shows when this policy was last updated.
15. Contact us
- Data Protection Officer: privacy@getbanr.com
- Support: support@getbanr.com, or Profile → Contact support in the app
- Post: Westpay Global Resources Limited, The Philippi Centre, Oluwalogbon House, Plot A, Obafemi Awolowo Way, Alausa, Ikeja, Lagos, Nigeria
Your money is waiting.
5 minutes from now, you could be sending, paying, and gifting, all from one app.
Available on ios and android
