Privacy Policy
Welcome to Hiwallet. To comply with the Nigeria Data Protection Act (NDPA) and
international data security standards, Corestone Technology Nigeria Limited ("Hiwallet", "We", "Us",
or "Our") provides this Privacy Policy to explain how we collect, use, and protect your personal
data.
By clicking "Agree" or continuing to use our Services, you provide explicit consent to the data
practices described herein. You may revoke your consent at any time through device settings, though
this may limit your access to certain financial services.
We adhere to the Principle of Data Minimization. We only request permissions essential for identity verification, risk assessment, and fraud prevention.
Geographic Location (Approximate)
Our services are exclusively for users within Nigeria. We access your approximate location data to verify regulatory compliance and ensure transaction security. This prevents unauthorized account access from high-risk or unsupported regions.
Camera Access (KYC)
We require one-time camera access to perform Live Identity Verification. This ensures that the person applying for credit is the authorized account holder. We do not use this permission for any other purpose, and images are encrypted during transmission.
Financial Safety Reminders (Calendar)
With your explicit consent, we may access your calendar to set automated repayment reminders. This helps you maintain a healthy credit standing by avoiding accidental late payments. You may manage or delete these entries at any time through your device settings.
Device Integrity & Security (Meta-data)
To protect against automated fraud and bot attacks, we collect
non-sensitive device meta-data, including:
● Device Model & Manufacturer
● System Version & RAM capacity
● Google Advertising ID (GAID)
● Network Type (e.g., Wi-Fi/4G) Note: We strictly DO NOT access hardware-level identifiers
such
as IMEI, IMSI, or SIM serial numbers.
Application Optimization (Storage)
We may store small, necessary data files on your device to optimize app performance and reduce mobile data usage. You retain full control over these cached files through your system settings.
To ensure the highest level of user privacy and comply with Google Play policies, Hiwallet explicitly guarantees that we DO NOT collect, read, or upload the following:
NO Access to your Contact list or frequent contacts.
NO Access to your Call Logs or telephony history.
NO Access to your SMS messages or private communications.
NO Access to the list of other Applications installed on your device (Installed Applications).
NO Access to your private photos or media gallery.
We process your data exclusively for:
Credit Evaluation:Determining appropriate credit limits based on provided KYC data (Name, Phone, BVN, NIN).
Fraud Prevention:Detecting if the app is running in a compromised environment (e.g., simulators or rooted devices).
Regulatory Compliance:Meeting the statutory requirements of the Central Bank of Nigeria (CBN) and other authorities.
Encryption:All data is transmitted via high-level SSL/TLS encryption.
Storage:Data is stored on secure, firewalled cloud servers.
Retention:We only retain personal data for the period necessary to fulfill legal obligations or until your account is closed and deletion is requested.
Cross-Border Transfer:Your data may be stored on secure servers located outside Nigeria. We ensure these transfers comply with NDPA standards through rigorous data protection protocols.
In accordance with Nigerian law, you have the following rights:
Right to Access:Request a copy of the data we hold about you.
Right to Rectification:Correct inaccurate or incomplete information.
Right to Erasure:Request the permanent deletion of your data (subject to legal retention requirements).
Right to Object:Withdraw your consent for data processing at any time.
If you have questions regarding this policy or wish to exercise your data rights, please contact our Data Protection Officer:
Email: [email protected]
Address: Plot 900B, Gbolahan Owolabi Crescent, Omole Phase 1 GRA, Ojodu, Lagos State.