Oremi is operated by Oremi Technologies, a product of Trade Here LTD ("Oremi", "we", "us"). We are the data controller for the personal information described in this policy. Where we act only on instructions from another party, we say so.
This policy covers information we handle when you talk to Oremi in chat, use the Oremi mobile app, visit our website, or contact support. It does not cover the messaging platforms themselves. WhatsApp and Telegram each operate under their own privacy policies, and your relationship with them is separate from your relationship with us.
It also does not cover public blockchains. Those are covered separately in section 12, because they behave differently from anything we control.
Identity and contact. Your name or chosen display name, username, phone number, and email address where you provide one.
Verification information. Where a service or applicable law requires us to confirm who you are, we collect the identifiers and documents needed for that check, and the outcome of it.
Financial information. Your wallet balances, transaction amounts, dates, references, counterparties, bank account details you save for withdrawals, and the status of each instruction.
Wallet information. Your public blockchain addresses, and an encrypted form of your recovery material. We hold that material in a form we cannot read.
Content you send us. Messages you write to Oremi, photographs you upload, voice notes you record, and support conversations.
Product records. Purchases such as airtime, data, bill payments and eSIMs, and your participation in savings circles.
Technical information. Device type and operating system, app version, notification tokens, approximate region inferred from your phone number, and security logs such as sign-in attempts.
We do not collect your contacts list, your precise location, or special category information such as health, religion or political opinions.
Most of it you give us directly, by writing to Oremi or entering it in the app. Some is generated by your use of the service, such as transaction records and security logs. A limited amount comes from the providers who carry out payments and verification on our behalf, such as confirmation that a transfer settled or that a bank account name matches.
We do not sell your personal information, and we do not share it with third parties for their own advertising.
Where data protection law requires a lawful basis, we rely on: performance of a contract, for anything necessary to give you the service you asked for; legal obligation, for identity checks, financial record keeping and reporting; legitimate interests, for security, fraud prevention and service improvement, balanced against your rights; and consent, for optional things such as marketing email, microphone access and notifications, which you may withdraw at any time.
We share only what a recipient needs, and only with these categories:
Service providers act on our instructions and are not permitted to use your information for their own purposes.
Some of our providers operate outside Nigeria and South Africa. Where information is transferred abroad, we do so on terms that require an adequate standard of protection, including contractual safeguards where the destination is not recognised as providing equivalent protection.
We keep information for as long as your account is open and you are using the service. After closure, we delete or anonymise personal information except where we are required to keep it. Financial and anti-money-laundering legislation obliges regulated businesses to retain transaction records for a minimum period after a relationship ends. We retain those records for the period the applicable legislation requires and no longer, and we detach them from your profile so they are not used for anything else.
Voice recordings are transcribed and discarded. We do not retain the audio.
We apply technical and organisational measures appropriate to the sensitivity of what we hold, including encryption of data in transit and at rest, restricted internal access on a need-to-know basis, and monitoring for unusual activity. Your recovery material is held in encrypted form that we cannot read, which means we cannot restore it for you if you lose it.
No system is perfectly secure. You protect your side by keeping your PIN and recovery material private, and by telling us promptly if you believe your account has been accessed by someone else.
Subject to the law that applies to you, you may ask us to: give you a copy of the information we hold about you; correct information that is wrong; delete your account and its data; restrict or object to certain processing; provide your information in a portable form; and withdraw consent you previously gave.
You can delete your account yourself from Settings in chat, or by writing to us. See Delete your account. We verify ownership before acting on any request, and respond within the period the applicable law allows.
If you are unhappy with how we have handled your information, you may complain to us first, and then to the relevant supervisory authority in your country.
Cryptocurrency transactions are recorded on public blockchains. Those records are permanent and public by design. Neither we nor anyone else can edit or remove them. Deleting your Oremi account removes your profile from our systems but has no effect on anything already written to a blockchain.
Oremi is not intended for anyone under 18, and we do not knowingly collect information from children. If we learn that we hold information about a child, we delete it.
Service messages, such as confirming a deposit or flagging a security event, are part of the service and are not marketing. Anything promotional is optional. Every marketing email carries a one-click unsubscribe, and app notifications can be turned off in Settings or in your device settings.
We update this policy when the service or the law changes. The date at the top always reflects the current version. Where a change materially affects your rights, we tell you directly rather than relying on you to notice.
Write to [email protected] for any privacy question, including access and deletion requests.