GoCardNGPrivacy Policy
Last updated: 20 July 2026
This policy explains what information GoCardNG ("we", "us") collects when you use the GoCardNG mobile app and website, why we collect it, and the choices you have. GoCardNG is operated in Nigeria and handles personal data in line with the Nigeria Data Protection Act (NDPA) 2023.
1. Information we collect
- Account details: your full name, email address, phone number, and password (stored as a secure hash, never in plain text).
- Payout details: your bank name, account number, and the account name returned by our payment provider when we verify it.
- Identity verification (KYC): if you upgrade your account limits, your BVN or NIN. These numbers are stored encrypted and are used only to confirm your identity.
- Trade content: photos of gift cards or e-codes you upload, and messages you exchange with our review agents and support team.
- Technical data: device type, app version, IP address, and a device identifier we use to recognise devices you have signed in from before.
2. How we use your information
- To create and secure your account, including emailing you one-time codes when you sign up or sign in from a new device.
- To review the gift cards you submit and pay approved trades to your bank account.
- To verify your identity where the law or our trade limits require it.
- To respond to support requests and resolve disputes about trades.
- To detect and prevent fraud, and to keep records we are legally required to keep.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Who we share it with
We share data only with the service providers we need to run GoCardNG:
- Paystack — to verify bank accounts, verify BVN details, and process payouts.
- Resend — to deliver transactional emails such as verification codes.
- Stream — to power in-app chat with agents and support.
- Cloud hosting providers — our servers and database are hosted with reputable cloud providers that protect data in transit and at rest.
We may also disclose information where Nigerian law requires it, for example to law enforcement with a valid request.
4. How long we keep it
We keep your account information for as long as your account is open. Records of trades and payouts are kept for the periods required by Nigerian financial regulations, even after you close your account. Verification codes expire and are deleted automatically within minutes.
5. Security
All traffic between the app and our servers is encrypted with HTTPS. Passwords are hashed, identity numbers (BVN/NIN) are encrypted at rest, and sign-ins from new devices require an email verification code. No system is perfectly secure, so we encourage you to use a strong, unique password.
6. Your rights
Under the NDPA you can ask us to show you the personal data we hold about you, correct it if it is wrong, or delete it where we are not legally required to keep it. You can also close your account at any time from the app or by contacting us. To exercise any of these rights, email support@gocardng.com.
7. Children
GoCardNG is for users aged 18 and over. We do not knowingly collect information from anyone under 18, and we will delete such accounts if we become aware of them.
8. Changes to this policy
If we change this policy, we will update this page and the "last updated" date above. For significant changes we will also notify you in the app or by email.
9. Contact
Questions about this policy or your data: support@gocardng.com.