Daha Service (the website and the Android app) is owned and operated by Data Smart Tech, a company registered in the Federal Republic of Nigeria with the Corporate Affairs Commission (CAC), Kebbi, Nigeria ("we", "us"). We are the data controller for the personal data described here and process it in line with the Nigeria Data Protection Act 2023.
1. Data we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Full name, email address, phone number, password and 4-digit transaction PIN (both stored only as one-way hashes), referral code | You, when you register |
| Wallet and transactions | Funding amounts and bank transfer references, purchases, amounts, the phone, meter or smartcard number you enter, receipts, refunds | You and our payment and service partners |
| Funding account | The dedicated bank account number created for your wallet | Our payment partner |
| Verification lookups | NIN, BVN, TIN or RC number you search and the record returned (e.g. name, date of birth, phone, company details) | You and the official data sources our verification partners query |
| Device and security data | IP address, device and browser type, login times, failed log-in attempts, account activity | Your device, automatically |
| Support | Messages and emails you send us | You |
We do not collect your contacts, photos, location or anything else on your phone. The Android app asks for no special permissions beyond internet access and saving the receipts you choose to download.
2. Why we use it
- To provide the service (performance of our contract with you): run your account and wallet, carry out purchases and verifications, send receipts and notifications, refund failed transactions.
- To keep accounts and money safe (legitimate interest and legal obligation): confirm it is really you, detect fraud and abuse, and keep audit records.
- To meet legal duties (legal obligation): financial record-keeping, anti-money-laundering checks and responding to lawful requests from regulators or law enforcement.
- To support you: answer questions and resolve disputes.
NIN, BVN, TIN and CAC lookups are only carried out when you ask for them, and you must confirm you have the consent of the person whose number you enter. We do not use your data for advertising, we do not sell it, and we do not make automated decisions about you that have legal effects.
3. Who we share it with
Only with the partners needed to deliver what you ask for, under contracts that require them to protect it:
- Payment partner (for example Paystack): creating your funding account and confirming bank transfers.
- Airtime, data and bills partners: the number, meter or smartcard and amount needed to complete your purchase.
- Identity, tax and business verification partners: the number you look up, to return the official record.
- Infrastructure providers: hosting, email delivery, encrypted backups and error monitoring (error reports never include form contents such as PINs or ID numbers).
- Authorities: regulators, courts or law enforcement when the law requires it.
Some of these providers may process data outside Nigeria. When they do, we rely on the safeguards allowed under the Nigeria Data Protection Act.
4. How long we keep it
- While your account is open: everything above, so the service works.
- If you delete your account: it is closed straight away and your personal data (name, email, phone, PIN, lookup results, login history, support messages, funding account) is erased after 30 days.
- Transaction records (amount, date, service and reference) are kept for as long as financial and anti-money-laundering laws require. Where the law requires us to keep details that identify you, we keep them securely and use them only for that legal purpose.
- Backups are encrypted and overwritten on a rolling schedule.
5. How we protect it
- All traffic is encrypted in transit (HTTPS).
- Passwords and PINs are stored as one-way hashes; verification results are encrypted in our database.
- Every purchase needs your PIN, with lockout after repeated wrong attempts.
- Staff access is limited, protected by two-factor authentication and recorded in an audit log.
6. Your rights
You can ask us to:
- access the personal data we hold about you, or receive a copy (you can also export your transaction history from the app);
- correct data that is wrong;
- delete your account and data: in the app under Account → Delete account, or on our account deletion page;
- object to or restrict some uses, and withdraw consent where we rely on it.
Email dahatechorg1@gmail.com and we will reply within 30 days. If you are unhappy with our answer you may complain to the Nigeria Data Protection Commission.
7. Cookies
We only use cookies that the service needs: to keep you logged in, to protect forms against forgery and to remember that you have seen the app's welcome screens. We do not use advertising or tracking cookies.
8. Children
Daha Service is for people aged 18 and over. We do not knowingly open accounts for children; if you believe a child has an account, contact us and we will close it.
9. Changes to this policy
If we make important changes we will tell you in the app or by email before they take effect. The date at the top shows the latest version.
10. Contact us
Data Smart Tech, Kebbi, Nigeria
Data protection: dahatechorg1@gmail.com
Support: dahatechorg1@gmail.com
Phone & WhatsApp: +234 703 258 3360 · +234 906 691 1202 · +234 816 861 0744 · +1 407 668 8736