Privacy
Privacy policy
PackAjo handles your money and your identity, so we collect only what a savings circle needs, keep it encrypted, and never sell it.
Last updated 28 October 2026
Who we are
PackAjo (the app “Pack Ajo” and usepackajo.com) is run by Maverick Lab Holdings, the data controller for the personal data described here. We follow the Nigeria Data Protection Act 2023. Questions or requests: privacy@usepackajo.com.
What we collect and why
| Data | Why we need it |
|---|---|
| Phone number and/or email | Signing in with one-time codes, WhatsApp and email notices about your circles, and debit confirmations from your bank. |
| Name and date of birth | Taken from your bank account and BVN record (never typed), so members know who they save with and nobody can pretend to be someone else. |
| BVN | To confirm your identity: Paystack checks that it matches your bank account. Stored encrypted; it can’t be used to move money. |
| Bank accounts | Collecting contributions by direct debit and paying out your pot and earnings. |
| Bank statements (optional) | Reviewed by our team to make you a Trusted Saver. Stored encrypted on our own servers. |
| Contributions, payouts, fees and earnings | Running your circles, your receipts, and the records the law requires us to keep. |
| Profile: username, bio, photo (optional) | How other members see you in circles, chats and the Community. |
| Messages, photos and posts | Circle and friend chats and Community posts you choose to send. |
| Friends, invites and referrals | Saving with people you know and crediting referral points. |
| Device and usage data | A push-notification token for your phone, sign-in sessions, and security logs (such as IP address) to keep your account safe and prevent fraud. |
The camera and photo library are used only when you pick a profile photo, a chat photo or a statement. We don’t collect your location, and we don’t use advertising or tracking tools.
Our legal basis
- Contract: to provide the service you sign up for (circles, debits, payouts, chat).
- Legal obligation: identity checks, fraud prevention and keeping financial records.
- Legitimate interest: securing accounts and improving the app.
- Consent: optional things like WhatsApp notices and your photo. You can withdraw consent at any time in the app.
How we protect it
Everything travels over encrypted connections. Your BVN and uploaded documents are encrypted before they are stored. Money actions need your PIN, and our staff work behind two-factor sign-in with every action recorded in an audit log.
How long we keep it
We keep your data while your account is open. When you delete your account, we erase your contact details, name, date of birth, BVN, bank statements, photo, profile and friendships, and sign you out everywhere.
Records of money that moved (contributions, payouts, fees and the bank accounts they used) are kept for as long as Nigerian law requires, usually at least five years, without your name or contact details on them. Messages you sent in circle chats stay with the circle, shown as from a deleted member.
Your rights
You can:
- see and correct your details in the app, or ask us for a copy of your data;
- withdraw consent for optional uses, such as WhatsApp notices;
- object to or restrict how we use your data, or ask us to move it to another service;
- delete your account (in the app: Profile, then Delete account);
- complain to the Nigeria Data Protection Commission if you think we have mishandled your data.
Email privacy@usepackajo.com for any of these. We reply within 30 days.
Children
PackAjo is for adults: you must be 18 or older with your own bank account and BVN. We don’t knowingly collect data from children.
Changes to this policy
When this policy changes, we update the date above and tell you in the app before the change affects you.