TRUEPEER PRIVACY POLICY

1. Data Collection and Usage

We collect the following personal information for identity verification and service delivery:

• Full name, email address, and phone number
• Government-issued ID or verification documents
• Transaction and wallet activity history
• Device and usage information

Purpose of Collection:

• To verify user identity (KYC compliance)
• To prevent fraud and meet Anti-Money Laundering (AML) obligations
• To provide customer support and improve service experience
• To comply with legal and regulatory requirements

2. Privacy & Data Protection

We comply with the Nigeria Data Protection Regulation (NDPR) and GDPR standards. All personal data is stored securely using encryption and restricted access. We do not share your personal data with third parties without your consent, except as required by law. Users may request to access, correct, or delete their data by contacting our support team.

2.1 TrueDepth Camera Data

TruePeer may use Apple's TrueDepth camera technology only for identity verification and user authentication where supported on compatible devices. This functionality is used solely to confirm the identity of the user during Know Your Customer (KYC) verification and to enhance account security.

Any depth information or facial mapping data generated through the TrueDepth camera is processed only for the requested verification session. TruePeer does not store, retain, sell, or share TrueDepth data with third parties for advertising, profiling, or marketing purposes.

TrueDepth data is used exclusively to perform the requested authentication or identity verification and is discarded immediately after processing unless otherwise required by applicable law.

3. Security Practices

To protect your information and assets, TruePeer uses end-to-end encryption, multi-layer wallet and account security, and continuous monitoring to detect suspicious activities. We recommend enabling Two-Factor Authentication (2FA) and never sharing your login credentials.

4. Data Retention

We retain personal data only as long as necessary for legal, compliance, or operational purposes. Once retention periods expire, data will be securely deleted or anonymized.

5. User Rights

Users have the right to:

• Access their personal data
• Request correction or deletion of data
• Withdraw consent where processing is based on consent
• Lodge complaints with the Nigeria Data Protection Commission (NDPC) if dissatisfied with our response

6. Compliance and Legal Obligations

TruePeer adheres to all applicable Nigerian laws, including:

• Central Bank of Nigeria (CBN) Guidelines for Virtual Asset Service Providers
• NDPR
• AML/CFT (Anti-Money Laundering/Combating Financing of Terrorism) regulations

7. Dispute Resolution

Any privacy-related dispute will first be resolved amicably with our support team. If unresolved, it will be settled in accordance with Nigerian law.

8. Contact Information