Your data, in plain words.
What we collect, how we protect it, and what you control.
What we collect
Five files. Here's what's in each.
Open a folder. Hosted on AWS, encrypted in transit and at rest. Full privacy policy
Inside
- Name, date of birth, gender
- NIN or BVN
- Government ID and selfie
- Liveness check
- Utility bill
Your liveness check isn't kept after you're verified.
Kept for
5+ yrs
- Why
- To confirm it's really you and stop fraud. The law requires it before credit.
- Who sees it
- DIDIT checks your ID for us.
- How long
- At least 5 years after you close your account.
Inside
- School, faculty and course
- Matric number
- Level and CGPA
- Student ID
- Start and graduation dates
We never sell your academic data.
Kept for
+3 yrs
- Why
- To decide if you can pay in instalments, and to set your limit.
- Who sees it
- Only Pody. Others only learn that you're a verified student.
- How long
- While your account is open, plus 3 years.
Inside
- Bank details
- Transactions and repayments
- Balance and limit use
- Card details, tokenised
- Credit bureau reports
Kept for
Up to 7 yrs
- Why
- To run your plan, remind you to pay, and report repayments as the law requires.
- Who sees it
- Licensed payment processors and credit bureaus (CRC, FirstCentral, CreditRegistry).
- How long
- Transactions at least 6 years. Credit records up to 7 years.
Inside
- Email and phone
- Address
- Support chats and calls
- Feedback
- Marketing choices
Kept for
2 yrs
- Why
- To run your account and help you. Marketing only if you opt in.
- Who sees it
- Only Pody.
- How long
- Support chats 2 years. Marketing until you opt out.
Inside
- Phone model and OS
- IP and rough location
- Device IDs
- App version and crash logs
- Pages visited and sign-ins
Kept for
12 mo
- Why
- To keep the app working, fix crashes and spot fraud.
- Who sees it
- Sentry, Firebase and Mixpanel.
- How long
- 12 months, unless needed for a security investigation.
How it's protected
Locked on the way. Locked when stored.
Watch a sample ID number lock on its way to us.
- Your phoneReadable only to you
- On the wayLocked with TLS 1.2+
- Pody serversStored locked, AES-256
On your phone
NIN 1234 5678 901
Plain text, only on your device.
Cards tokenised
We never store raw card numbers.
Staff access limited
Multi-factor sign-in, and only for staff who need it.
Watched in real time
Sentry and AWS CloudWatch flag anything odd.
Breaches reported
To the NDPC within 72 hours, and to you if you're at high risk.
Scams
We never…
- Sell your data.
- Sell your academic records.
- Ask for your password, PIN or codes.
- Raise your limit for a fee.
Anyone who asks is not Pody. Report it to hello@pody.network.
"Pody Support"
Unknown sender
Hi, this is Pody support. Send your transaction PIN so we can verify your wallet.
What you control
Lock your own account.
In the app: Profile, then Security. Try it here.
Two-factor sign-in
A code by email every time you sign in. The best way to protect your account.
Transaction PIN
Six digits that approve money leaving your wallet. Never share it.
Profile › Security
- Transaction PINTap to set
Change: needs your current one. Stays signed in.
Reset: by email code. Signs out other devices.
Signing in
Password
Change it any time. A reset signs you out everywhere else.
Leaving?
Delete your account in the app once any balance is paid.
How long we keep it
Kept for a set time. Then gone.
Drag across the chart to move through time.
7/7
still kept today
- MarketingUntil you opt outEnds when you opt out
- Device data12 monthsFrom collection
- Support chats2 yearsFrom the chat
- Student record3 yearsAfter you close your account
- Identity5+ yearsAfter you close your account
- Transactions6+ yearsFrom each transaction
- Credit recordsUp to 7 yearsFrom your last credit activity
- Until you opt out
- 12 months
- 2 years
- 3 years
- 5+ years
- 6+ years
- Up to 7 years
Credit records stay with licensed credit bureaus even after you delete your account. After its time, data is deleted or anonymised.
Your rights
Your data, your say.
Pick what you want. We'll reply within 30 days.
Todpo@pody.network
SubjectData request: See your data
Get a copy of everything we hold about you.
We may ask you to confirm it's you.
Write to our DPO- See your data
- Get a copy of everything we hold about you.
- Correct it
- Fix anything wrong or missing, including academic data.
- Delete it
- Ask us to erase it, within the legal time limits above.
- Take it with you
- Get it in a file you can move elsewhere.
- Object
- Stop marketing, or pause some processing while we check a request.
- Ask a person
- Have a human review an automated credit decision.
- Withdraw consent
- Take back consent you gave us, any time.
Privacy questions
privacy@pody.networkReport a scam
hello@pody.networkReport a security issue
dev@pody.networkNot happy with our answer
ndpc.gov.ng
Read the full privacy policy.
Start today
Get the device. Own your future.
No salary slip, no guarantor, zero interest - just your academic record.
Pody Network Limited is not a bank. BNPL approval is subject to our due diligence and approval process. Device availability is also subject to stock levels and may vary by time and location.