Privacy Policy

Last updated: November 11, 2026

Winpay ("we", "us") provides airtime, data, bill payment, wallet and related services through our website (https://winpay.com.ng) and our Android app. This policy explains what we collect, why, who we share it with, and the choices you have.

1. Information we collect

Account details: your name, username, email address, WhatsApp/phone number, and your password and transaction PIN (stored in protected, hashed form).
Sign-in with Google: if you choose it, your name, email address and Google account ID.
Transactions: purchases, wallet funding, transfers, orders, payment references and the recipient numbers you enter (for example the phone number you buy airtime for).
Identity verification: details you choose to submit where a service requires it.
Device and usage data: IP address, browser/app type, login times and security logs.
Notifications: if you allow them, a push-notification token tied to your account so we can send you announcements.
Biometrics / passkeys: if you enable fingerprint or passkey sign-in, your device handles the biometric itself. We never receive your fingerprint or face data, only a public key.

2. How we use it

To create and secure your account and process your orders and payments.
To show your wallet balance and transaction history.
To prevent fraud, abuse and unauthorised access, and to meet legal obligations.
To send service messages (verification codes, password resets) and, if you allow, announcements.
To give support and improve our services.

We do not sell your personal information.

3. Who we share it with

Only as needed to run the service:

Payment and bank partners that process deposits and virtual accounts.
Airtime, data and bill-payment providers that fulfil your orders (they receive the recipient number and order details).
Service providers for email delivery, push notifications (OneSignal) and Google sign-in.
Authorities, when the law requires it.

4. Retention

We keep your account data while your account is open. When you delete your account, we remove your personal information and credentials (see section 6). Financial records such as transactions, orders and payments are kept for the period required by applicable financial and tax regulations, and after deletion they are no longer linked to your identity.

5. Security

We use HTTPS, hashed passwords and PINs, and access controls. No system is perfectly secure, so please keep your password and PIN private.

6. Your choices and deleting your account

You can view and update your profile from the app or website. You can also delete your account at any time:

In the app or website: Profile → Delete Account, or open https://winpay.com.ng/delete-account.
Without signing in: submit a request on that same page, or email support@winpay.com.ng from your registered email address.

Deleting your account removes your name, email, phone number, PIN, password, sign-in links, passkeys, saved crypto addresses and notifications, and stops push notifications. This cannot be undone. Any remaining wallet balance should be used or settled before deletion.

7. Children

Winpay is not intended for anyone under 18, and we do not knowingly collect their information.

8. Changes

We may update this policy. The date above shows the latest version. Continued use after an update means you accept it.

9. Contact

Questions or requests: support@winpay.com.ng