Privacy Policy

This policy covers everyone who uses Bloomayo: senders and recipients using our consumer app to send gifts and money to loved ones, corporate clients sending bulk gifts to employees or customers, and partner businesses (restaurants, retailers, and service providers) that redeem or fulfill gifts through our partner console. Where this policy applies differently to one of these groups, we say so explicitly.

Bloomayo is a presence delivery network. When you can't physically be there for someone, we let you send money, gift cards, and messages that a partner business turns into something real — a meal, groceries, a bill paid, a moment celebrated. Consumers fund a wallet, choose a gift vertical and a partner, and send it to a recipient by phone number or email. Corporate clients do the same at scale, for teams or customers. Partners redeem gifts and receive settlement into their own accounts.

Account information: name, email address, phone number, and password (stored as a salted hash — we never store your plain-text password).

Identity verification (KYC): for wallet funding, withdrawals, and larger transactions, Nigerian financial regulation requires us to verify who you are. This can include a government-issued ID, a BVN, and a selfie or liveness check, submitted through our KYC flow and reviewed before certain limits are lifted.

Financial information: wallet balance, transaction history, and the bank account details you provide for withdrawals or partner settlement. We do not store your card number or bank login credentials — those are handled directly by our licensed payment processor, described in Section 5.

Gift and message content: the recipient's name and contact details, any message, photo, voice note, or video you attach to a gift, and delivery/redemption status.

Device and usage information: IP address, device type, app version, crash logs, and how you interact with the app, collected to keep the service reliable and secure.

Push notification tokens: used only to deliver notifications about your gifts, wallet, and account — not for advertising.

To create and secure your account, process gifts and payments, and deliver the wallet, KYC, and support features you rely on.

To verify your identity where required by law, prevent fraud, and investigate suspicious activity.

To communicate with you — transactional emails and SMS about your gifts, wallet, and account, and, if you opt in, product updates.

To improve Bloomayo — understanding what's working, fixing bugs, and building features people actually need.

To meet our legal and regulatory obligations, including record-keeping requirements tied to processing payments in Nigeria.

Flutterwave, our licensed payment processor, handles all money movement on Bloomayo — wallet funding, withdrawals, and partner settlement. We never build our own payment rails; every transaction goes through Flutterwave's regulated infrastructure. Flutterwave has its own privacy policy governing the payment data it processes directly.

Email and SMS providers we use to deliver OTPs, receipts, and notifications — they process only what's needed to send that message.

Partner businesses see the information necessary to fulfil a gift you send them (recipient name, gift value, redemption code) — nothing more.

We do not sell your personal information to anyone, for any reason.

We may disclose information if required by law, court order, or regulatory request, or to protect the rights, safety, or property of Bloomayo, our users, or the public.

We keep account and transaction records for as long as your account is active, and for a period afterward as required by Nigerian financial recordkeeping regulations. Gift messages and media are retained for as long as needed to support delivery, disputes, and your own access to gift history, after which they may be deleted.

You can access, correct, or update most of your account information directly in the app. You can request a copy of your data, or ask us to delete your account and associated personal data (subject to what we're legally required to retain, such as financial transaction records). To make a request, contact us using the details in Section 10.

We use industry-standard safeguards — encrypted connections, hashed passwords, access controls, and regular review of our systems — to protect your information. No system is perfectly secure, but we take this seriously and will notify affected users if a breach puts their data at meaningful risk.

Bloomayo is not intended for children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we'll remove it.

Questions about this policy or your data can be sent to hello@bloomayo.com.

We may update this policy as Bloomayo grows. If we make a material change, we'll let you know in the app or by email before it takes effect. The date below reflects the last update.