Privacy Policy

DigitMonie Limited, 123 Innovation Drive, Victoria Island, Lagos, Nigeria, is the data controller for the personal information described here. We follow the Nigeria Data Protection Act, 2023 (NDPA) and the rules of the Nigeria Data Protection Commission (NDPC).

Our data protection officer can be reached at privacy@digitmonie.com.

Information you give us: your name, phone number, email, date of birth, home address, BVN, NIN, a selfie, proof of address, your employment and income, the bank account you want loans paid into, bank statements you upload, and anything you tell our support team.

Information we collect when you use DigitMonie: your device and browser type, IP address, sign-in times, the pages and features you use, and records of your loans and payments.

Information from others: confirmation of your identity from NIBSS and NIMC through our verification partner; your credit history from licensed credit bureaus; the account name your bank holds for your payout account; and payment confirmations from our payment partners.

• We do not read your phone contacts, call logs, photos, SMS or social media.
• We never contact your family, friends, employer or anyone else about a debt, and never publish or shame borrowers.
• We do not sell your personal information.
• We do not store your card details. Card payments are handled by our payment partners.

The NDPA requires a lawful basis for each use of your information:

When you apply for a loan, a scoring system looks at your verification level, how your repayment compares with your declared income, your history with us and your credit bureau report. Small loans with strong results may be approved, and applications that clearly don't meet our criteria may be declined, automatically. Everything else is reviewed by our staff.

If an automated decision affects you, you can ask for a person to review it, explain your circumstances and challenge it by writing to hello@digitmonie.com.

We share only what each party needs, under written agreements that require them to protect it:

• Identity verification partners, to check your BVN, NIN and selfie with NIBSS and NIMC.
• Licensed credit bureaus, to check your credit history and report your loans.
• Payment partners (such as Flutterwave and Paystack), to pay out loans, verify bank accounts and collect repayments.
• Messaging and email providers, to send you codes, alerts and reminders.
• Hosting and IT providers that run our systems.
• Regulators, law enforcement and courts (such as the FCCPC, CBN, NFIU and EFCC) when the law requires it.
• Professional advisers (lawyers, auditors) under duties of confidentiality.

Some of these providers store or process data outside Nigeria. When that happens we rely on the safeguards the NDPA allows, such as adequacy decisions or contractual protections.

• Identity (KYC) and transaction records: at least 5 years after our relationship ends, as anti-money laundering law requires.
• Loan records: for as long as the loan is open, then for at least 5 years.
• Declined or abandoned applications: up to 2 years, to prevent fraud and answer questions.
• Marketing preferences: until you withdraw consent.

Your BVN and NIN are encrypted, and identity documents are stored privately where only authorised staff can open them. Every staff view is recorded. Staff accounts need two-factor sign-in, access is limited by role, and every staff action is written to an audit log. Data is encrypted in transit. No system is perfectly secure, but we will tell you and the NDPC without undue delay if a breach is likely to put you at risk.

Under the NDPA you can ask us to:

• tell you what personal information we hold and give you a copy;
• correct information that is wrong or incomplete;
• delete it, or stop or limit how we use it, where we no longer have a lawful reason to keep it;
• send it to you or another provider in a commonly used format;
• stop using it for marketing; and
• withdraw any consent you have given, without affecting what we did before.

Email privacy@digitmonie.com. We reply within 30 days, and we may need to confirm your identity first. Some information must be kept even if you ask us to delete it, for example records anti-money laundering law requires. If you are unhappy with how we handle your information, you can complain to the Nigeria Data Protection Commission.

DigitMonie is only for people aged 18 and over. We do not knowingly collect information about children. If you believe a child has given us information, contact us and we will delete it.

We use a small number of essential cookies to keep you signed in and secure. We don't use advertising cookies. See our Cookie Policy.

We will update this policy when how we use information changes, and tell you about important changes in the app or by email. The date at the top shows when it last changed.