Privacy Policy

Last updated: September 2026

RobinBit (“we”, “our”, “the app”) is a digital wallet and trading platform that lets you sell and buy gift cards, pay bills, fund a wallet through a virtual account, and withdraw to Nigerian bank accounts. This policy explains what information we collect, why we collect it, and the choices you have. It is written to comply with the Nigeria Data Protection Act 2023 (NDPA).

1. Information we collect

• Account details — name, email address, phone number, and authentication credentials you provide at sign-up (including Google or Apple sign-in identifiers).
• Identity verification data — government ID details, BVN/NIN or selfie verification you submit through our KYC provider (Dojah) when required for account tiers or security checks.
• Transaction data — gift card details you submit for trade, bill-payment records, wallet funding and withdrawal history, transaction PIN usage, and receipts.
• Payment data — virtual account numbers assigned to you and card-payment confirmations processed by our payment partners. We do not store full card numbers.
• Device & usage data — IP address, device model, app version, push-notification tokens, and log data used for security and troubleshooting.

2. How we use your information

• Create and secure your account, including PIN and session management.
• Process gift-card trades, bill payments, wallet funding, and bank withdrawals.
• Verify your identity and prevent fraud, stolen-card trading, and money laundering.
• Send transaction receipts, security alerts, and service notifications.
• Meet legal obligations, including financial-crime and record-keeping requirements.
• Improve the app — e.g. diagnosing errors and understanding feature usage in aggregate.

3. Who we share it with

We share only what is needed, only with the partners that make the service work:

• Payment processors (e.g. Flutterwave) — to fund your wallet and send payouts.
• Bill-payment aggregators (e.g. ClubKonnect) — to fulfil airtime, data, electricity and TV payments.
• Identity verification (e.g. Dojah) — to complete KYC checks.
• Infrastructure providers — cloud hosting, secure storage (e.g. Cloudinary for media), and push delivery (e.g. Firebase).
• Regulators or law enforcement — only where required by Nigerian law.

We do not sell your personal information to anyone.

4. How we protect it

• All traffic is encrypted in transit with TLS.
• Sensitive fields (PINs, tokens, verification data) are encrypted at rest.
• Trades and withdrawals require your transaction PIN.
• Administrative access to your account is logged and auditable.

No system is perfectly secure, but these controls are designed so that a single failure does not expose your money or identity.

5. Data retention

We keep your information while your account is active and for the period required afterwards by financial record-keeping and fraud-prevention obligations. When data is no longer needed, it is deleted or anonymised.

6. Your rights

Under the NDPA you can request to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, subject to legal retention requirements.
• Object to or restrict certain processing.
• Lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these, email info@robinbit.com. Deleting your account may first require withdrawing your wallet balance and completing open trades.

7. Cookies & web storage

The web app uses local storage and cookies strictly for sign-in sessions and preferences — no advertising trackers.

8. Children

RobinBit is for users 18 and older. We do not knowingly collect data from minors; accounts found to belong to minors are closed.

9. Changes to this policy

If we update this policy, the new version is posted here with a revised date. Material changes are also flagged inside the app.

10. Contact

Questions or requests about your data: info@robinbit.com