Last updated: 23 September 2026
1. Information we collect
| Category | Examples |
|---|---|
| Account | Email, phone number, password (stored by our authentication provider as a secure hash; ACHIEVER never sees it) |
| Identity | Legal names, date of birth, gender, nationality; ID type, last four characters and a one-way fingerprint of the number; ID images you upload |
| Address | State, LGA, city, residential address (optional for members, required for organisers and collectors) |
| Optional profile | Preferred name, photo, occupation, employment, business name |
| Financial | Contributions, payouts, savings plans, bill payments, payment references and status; payout bank name, account name and last four digits |
| Security | Sign-in times, devices (a random device identifier stored as a fingerprint), approximate network address, security events |
| Communications | Messages, attachments, call records (not call audio or video), support cases and evidence |
2. Why we use it
- To run your account and the savings arrangements you join.
- To verify identities so members know who organisers and collectors are.
- To confirm payments and send payouts to the right person.
- To prevent, detect and investigate fraud and misuse.
- To resolve disputes using accurate records.
- To send you service, security and (if you choose) marketing messages.
- To meet legal and regulatory obligations.
3. Identity verification
Identity documents are stored in private storage. We keep only the last four characters of your ID number and a keyed one-way fingerprint used to stop the same ID being used on several accounts. Authorised compliance staff can open a document only after recording a reason, and every access is logged.
4. Payment information
Card and bank details you enter at checkout are handled by Paystack; ACHIEVER does not receive or store full card numbers. For payouts we keep your bank name, account name and last four digits; the full account number is sent to the payment provider to create a transfer recipient and is not stored by ACHIEVER.
5. Security, device and session information
We record sign-ins, sessions and devices so you can see where you are signed in, receive new-device alerts, and so we can detect account takeover. Network addresses are shown to you only in partly masked form.
6. Communications
Messages and attachments are visible to the members of the conversation. Voice and video calls are connected through our calling provider and are not recorded by ACHIEVER. Staff may review messages linked to a dispute case you open.
7. How we protect data
- Encryption in transit (HTTPS) and secure, HTTP-only session cookies.
- Least-privilege staff access with permissions per role, and two-person approval for high-impact actions.
- A permanent log of who viewed sensitive information and why.
- Financial and security records that cannot be edited or silently deleted.
9. How long we keep data
We keep account data while your account is open. After closure we retain identity/verification records, transactions, contributions, payouts, disputes, audit and security logs for as long as required by law and for fraud prevention and dispute resolution; optional profile data is erased on request.
10. Your rights
Subject to applicable Nigerian data-protection law, you may ask to access, correct or delete your personal data, object to certain uses, and withdraw consent to optional processing such as marketing. Most corrections can be made in Settings; contact us for anything else.
11. Account deletion
You can request account or personal-data deletion in Settings. See Delete Data for what is erased and what must be kept.
12. Contact
Privacy questions: stlsupport1515@gmail.com.