Legal

Privacy policy

This policy explains what personal data FirstFlip collects, why, how we protect it, and the choices and rights you have. We collect only what we need to run a safe financial service.

Last updated 16 July 2026

Terms of ServicePrivacy PolicyAML & KYC Policy

1. What we collect

Depending on how you use FirstFlip, we may collect:

  • Identity data — your name, date of birth, government ID and a liveness selfie, to verify you.
  • Contact data — email and phone number.
  • Financial data — bank details for payouts, wallet addresses, and transaction history.
  • Device and usage data — app and site interactions, device identifiers, and approximate location for security and regional availability.

2. Why we use it

We use your data to:

  • verify your identity and keep your account secure;
  • carry out the transactions you ask us to, and pay you;
  • meet anti-money-laundering, sanctions and other legal obligations;
  • prevent fraud, and detect and stop abuse;
  • support you, and improve how FirstFlip works.

3. Our legal bases

We process your data to perform our contract with you, to meet legal obligations, to pursue our legitimate interest in running a secure service, and — where relevant — with your consent. You can withdraw consent at any time where consent is the basis.

4. Who we share it with

We share data only as needed to run the service: with identity-verification, payment and crypto-settlement partners who process it on our instructions; with regulators or authorities where the law requires; and as part of protecting FirstFlip and its users from harm. We do not sell your personal data.

5. How we protect it

Sensitive actions are protected by a transaction PIN, biometrics and passkeys, and access to your account auto-locks after inactivity. Data is encrypted in transit, access is restricted on a need-to-know basis, and financial actions are audited end to end.

6. How long we keep it

We keep your data for as long as your account is active, and afterwards only for as long as we must — for example to meet financial record-keeping and anti-money-laundering obligations. When we no longer need it, we securely delete or anonymise it.

7. Your rights

Subject to law, you can ask to access, correct, export or delete your data, and object to or restrict certain processing. Some data we must keep to meet legal duties even if you ask us to delete it. To exercise a right, contact us using the details below.

8. International transfers

Some of our partners operate in other countries. Where we transfer data across borders, we take steps to ensure it stays protected to the standard described in this policy.

9. Changes and contact

We may update this policy as the service and the law change; material changes will be notified in-app or by email.

To reach our privacy team, contact contact@firstflip.ng.