Privacy policy

HashPay is a payments application that lets individuals and merchants hold and transfer HNGN (Hash Naira), a token backed 1:1 by Naira reserves. This policy explains what data we handle when you use the HashPay app or chat with HashPay on WhatsApp.

Account data: phone number, email (optional), name, nickname, and identity details you provide for KYC verification.

Wallet data: your HashPay wallet address, encrypted wallet keys, balances and on-chain transaction references.

Transaction data: transfers, funding and payout requests, bill payments, merchant charges and settlement records.

Bank data: bank account numbers and account names you add for payouts.

Messaging data: WhatsApp phone number, message content you send to our business number, and message timestamps, used to process your instructions.

Technical data: device and log information needed for security, fraud prevention and debugging.

To create and secure your account and wallet.

To execute payments, funding, payouts and bill purchases you request.

To verify your identity and apply regulatory transaction limits.

To detect and prevent fraud, abuse and unauthorised access.

To provide support and to send transaction notifications.

We share data only where necessary: with our banking and settlement partners to move Naira, with bill and airtime providers to fulfil purchases, with identity-verification providers for KYC, and with regulators or law enforcement when legally required.

Transactions in HNGN are recorded on the Kross blockchain, which is a public ledger. Wallet addresses and amounts are visible on-chain; your name and identity documents are not published on-chain.

We do not sell your personal data.

Wallet keys are encrypted at rest with a master key held in our secured backend. Money movements require your transaction PIN, and PIN attempts are rate-limited and locked after repeated failures. Access to your records is restricted by row-level security rules on our database.

We keep account and transaction records for as long as your account is active and afterwards for the period required by financial regulations. Chat sessions expire quickly; message logs are retained for audit and dispute resolution.

You can request access to, correction of, or deletion of your personal data. Some records must be retained where the law requires it, for example completed transaction records.

To delete your HashPay data, email privacy@hashpayai.app from your registered address, or send DELETE MY DATA to HashPay on WhatsApp. We confirm every request and complete it within 30 days, except for records we must keep by law.

If you removed HashPay from your Facebook or WhatsApp account, you can check the status of that deletion request on our data deletion status page.