Legal
Privacy Policy
Last updated 11 October 2026
This explains what UnityLedger does with your personal information, in plain language. Where something matters more than the rest, we have said so rather than buried it.
It applies to members of cooperative societies that use UnityLedger, to the officers who run those societies, and to visitors to this website.
1Who we are
UnityLedger is cooperative finance software for registered cooperative societies in Nigeria. We are a company registered in Nigeria with our office in Lagos.
This policy covers the UnityLedger member app, the society console and this website. It explains what we do with personal information under the Nigeria Data Protection Act 2023.
Where your society decides what happens to your information, your society is the data controller and we act on its instructions. Where we decide, for example on security and on how the software itself works, we are the controller.
2The short version
- We collect what is needed to identify you, give you account numbers, and keep your cooperative books straight. Nothing beyond that.
- We do not sell your information, we do not run advertising, and we do not track your location.
- Your money is held by a licensed bank, not by us. The account is in the name of your cooperative society.
- The officers of your society can see your contributions, your loans and your repayments. That is the point of belonging to a cooperative.
Your Bank Verification Number is used to verify who you are and is never written to our storage. We keep only the last four digits.
3What we collect
Who you are
Your full name, date of birth, residential address, phone number and email address. For society officers, the position you hold in the society.
Identity verification
Your Bank Verification Number, used once to verify you, and the result of that check. Where a society is being onboarded, its certificate of registration, its bye-laws and the details of its officers.
Money
Your account numbers, your contributions, your loan schedule, your repayments, your balance, and the record of every transaction on your account including its narration and the time it happened.
How you use the software
Sign in records, the actions you take in the app, and technical logs such as error reports. These exist so that we can tell what happened when something goes wrong, and so that we can show who approved a payment.
We do not collect card numbers, because we do not accept card payments. We do not fingerprint your device and we do not record your location.
4Your BVN
A Bank Verification Number is sensitive, so we handle it differently from everything else on this page.
- It is sent straight to our regulated banking partner for verification, over an encrypted connection.
- It is not saved in our database. Only the last four digits are kept, so that an officer can confirm which BVN was used without being able to read the whole number.
- It is used to confirm your identity and to match your name against your bank account. It is used for nothing else, and it is never shown to other members.
5Why we are allowed to process it
Under the Nigeria Data Protection Act 2023, every use described above rests on one of the following.
Performing our contract
We cannot issue an account number, post your contributions or administer your loan without your name, your bank details and your transaction history.
Legal obligation
Identity verification and record keeping are required of our banking partners under Nigerian anti money laundering rules, and those obligations reach us as the party that collects the information.
Legitimate interest
Keeping accounts secure, investigating suspected fraud, and keeping an audit trail of who approved which payment.
Consent
Anything optional, such as marketing messages. You can withdraw consent at any time, and doing so affects neither your membership nor your account.
6Who sees your information
Your cooperative society
The officers of your society see your contributions, your loan balance and your repayments, because the society holds the account and administers the loan. They do not see your full BVN.
Our banking partner and its licensed bank
Anchor and its partner bank hold the account, carry out the identity checks and move the money. They receive what they need for that, and they keep their own records under their own obligations.
Payment providers
Where collections run through a payment provider, that provider receives what it needs to create your pay in account number and to report the payments made to it.
Service providers
Hosting, error reporting and messaging providers that keep the software running. They act on our instructions and may not use your information for their own purposes.
Regulators, courts and law enforcement
Where Nigerian law requires us to disclose, or where disclosure is needed to investigate fraud.
We do not sell personal information, and we do not share it with advertisers or data brokers.
7Where it is stored
Your records are held in managed cloud infrastructure. Some of our providers, hosting included, operate outside Nigeria, which means your information may be processed abroad.
Where that happens we use providers that are contractually bound to protect it to a standard adequate under the Nigeria Data Protection Act 2023, and we transfer only what the provider needs in order to do its job.
8How long we keep it
- While you are a member of a society that uses UnityLedger, we keep your records so that your account works.
- After your membership ends, identity and transaction records are kept for at least five years, because Nigerian anti money laundering rules require it.
- Technical logs are kept for a short period, long enough to investigate an incident.
- After that, records are deleted or stripped of anything that identifies you.
A request to delete your information cannot override the five year retention rule. Where that is the reason we cannot delete something, we will say so plainly.
9How we protect it
- Everything travels over an encrypted connection. Nothing about your account is sent in the clear.
- Your BVN is never stored, as described above.
- Outbound payments require two different approvers, re-checked on our servers at the moment the payment is sent rather than trusted from the screen.
- Access to member records is limited to the staff who need it, and administrative actions are logged.
No system is perfect. If we discover a breach that puts you at risk, we will notify you and the Nigeria Data Protection Commission as the law requires.
10Your rights
Under the Nigeria Data Protection Act 2023 you may ask us to do any of the following.
- Show you the personal information we hold about you.
- Correct anything that is wrong.
- Delete information we no longer have a reason to keep.
- Stop any processing that rests on consent, by withdrawing it.
- Object to processing that rests on our legitimate interest.
- Hand your information to you, or to another provider, in a portable form.
Write to hello@getunityledger.com and we will respond within 30 days. Where your request concerns records your society controls, we will pass it to your society and tell you that we have done so.
11Children
UnityLedger is not for children. Membership of a registered cooperative society requires you to be at least 18, and we do not knowingly collect information about anyone younger. If you believe we have, write to us and we will delete it.
12Cookies
This website and the society console use a small number of cookies, and only for the following.
- Keeping you signed in for the length of your session.
- Remembering preferences you set, such as light or dark appearance.
- Counting page visits in aggregate, so that we can tell which pages are read.
We use no advertising cookies and no cross site tracking. You can clear or block cookies in your browser, though without the session cookie you will not be able to sign in to the console.
13Changes to this policy
If we change this policy we will update the date at the top. Where a change materially affects you, a new category of information or a new recipient for example, we will tell you in the app or by email before it takes effect.
14Contact and complaints
For anything in this policy, including a request about your own information, write to hello@getunityledger.com.
If you are not satisfied with how we have handled it, you may complain to the Nigeria Data Protection Commission, which supervises data protection in Nigeria.