Privacy Policy
This Privacy Policy explains how Urgent2k collects, uses, stores, and protects personal data for emergency support, contributions, and payouts.
Effective date: 1 February 2026 | Last updated: 29 July 2026
1. Data Controller
Urgent2k is the data controller for personal data processed through the platform. Contact our Data Protection Officer at dpo@urgent2k.ng.
2. Personal Data We Collect
- Full name
- National Identification Number (NIN), where used for verification
- Phone number
- Email address
- Date of birth when returned by identity verification
- Bank name and account number
- Transaction records for contributions and payouts
- Payment reference numbers
- Device type, OS, browser
- Device fingerprint for fraud prevention
- IP address and approximate location
- App interaction logs and timestamps
- Assistance request status and timestamps
- Payout status and provider references
3. Why We Use Data
- Identity verification - confirming identity via NIN checks.
- Eligibility enforcement - applying one lifeline every 30 days and checking duplicate identities.
- Payout execution - sending 2K support to a saved bank account.
- Fraud detection - using device and behavioural signals to block abuse.
- Customer support - investigating and resolving issues.
- Legal compliance - responding to lawful requests from regulators or law enforcement.
4. Who We Share Data With
We share the minimum account details needed by our payment processor and partner banks to process payments and payouts.
NIN data is verified through approved identity checks under a data processing agreement. We share only the identity number and the name used to match the record. We do not store raw biometric data.
Cloud hosting, database, and email providers process data on our behalf under data processing agreements.
We may disclose data when required by court order, subpoena, or regulatory directive under Nigerian law.
5. Retention And Security
- Active account data is retained while the account is active.
- Deleted account data is anonymised or deleted within 90 days unless legal retention is required.
- Financial records may be retained for at least 6 years.
- Sensitive data is encrypted in transit and at rest. NIN values are stored as hashes, never in plain text.
6. Your Rights
You may request access, correction, deletion, restriction, portability, objection, consent removal, or human review of automated decisions. Email dpo@urgent2k.ng.
You can delete your account yourself at any time from Profile → Delete Account in the Urgent2k mobile app or on the web, or by emailing support@urgent2k.ng from your registered address. See our Account Deletion page for the full steps and the records we may retain.