We take your privacy seriously. Here's exactly what we collect, why we collect it, and how we keep it safe.
Last Updated: 6 July 2026 · Effective Date: 17 February 2026
Giftyview International Limited respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services. By using the Services, you agree to the collection and use of your information in accordance with this Policy.
Registered Address: 65, Owina Street, Off Igbesanmwan Street, Off Akpakpava Road, Benin City, Edo State, Nigeria. Tel: +2348085052761 · Email: support@giftyview.com
1 Scope and Applicability
This Privacy Policy applies to users globally and is designed to comply with:
Nigeria Data Protection Act (NDPA)
EU General Data Protection Regulation (GDPR)
UK GDPR
California Consumer Privacy Act (CCPA/CPRA)
Other applicable international data protection laws
2 Information We Collect
Biometric data is collected strictly for identification verification (KYC), fraud prevention, and high-value transaction authorization.
2.1 Personal Data You Provide
Full name, date of birth, gender
Email address and phone number
Residential address and country of residence
Government-issued ID (for KYC verification)
Face image / selfie captured during identity verification and high-value withdrawal authorisation (see Section 2.5 — Face & Biometric Data)
Customer support messages and in-app AI support chat transcripts
Feedback, complaints, and inquiries
2.5 Face & Biometric Data
GiftyView uses two distinct types of face/biometric technology, each handled differently:
Face ID (iOS device authentication): When you choose to unlock the app or approve transactions using Face ID, this is processed entirely on your device by Apple's Secure Enclave. GiftyView never receives, accesses, or stores your Face ID biometric template at any point.
Camera face scan (KYC & withdrawal verification): When completing identity verification (KYC) or authorising a high-value withdrawal, the app captures a live selfie/face image via your device camera. This image is transmitted securely (TLS) to our identity verification partner, Smile ID, for liveness detection and identity matching against your government-issued ID.
2A Face & Biometric Data — Full Disclosure
This section specifically addresses the collection, use, sharing, storage, and retention of face and biometric data in compliance with Apple App Store Guidelines and applicable privacy regulations.
What Face Data We Collect
The app collects the following face-related data:
Live selfie / face image — a photograph captured by the device front camera during KYC identity verification and, where applicable, during authorisation of high-value withdrawals. The image is used to perform a liveness check and to match the user's face against their submitted government-issued ID document.
Face ID biometric — processed locally by iOS only. GiftyView does not collect, receive, or store Face ID biometric templates. Apple's Secure Enclave handles all Face ID processing entirely on the device.
Camera access is also used for scanning recipient QR codes. QR scanning does not involve facial recognition or biometric processing of any kind.
How Face Data Is Used
Face images captured via the camera are used exclusively for:
Identity verification (KYC) — confirming the user is a real person and that they match the government ID they submitted, as required by Nigerian and international anti-money-laundering (AML) regulations.
High-value withdrawal authorisation — providing an additional layer of security for large transactions by confirming the account holder is present.
Fraud prevention — detecting spoofing or impersonation attempts through liveness detection.
Face data is never used for advertising, marketing, profiling, or any purpose beyond identity verification and transaction security.
Third-Party Sharing & Storage Location
Face images are shared with Smile ID (our KYC sub-processor) solely for the purposes described above. Smile ID is a licensed identity verification provider operating across Africa. Face images are transmitted over encrypted TLS connections and processed in accordance with Smile ID's own privacy policy and data processing agreement.
GiftyView does not store raw face images on its own servers. Face images exist on GiftyView infrastructure only in transit (in-memory, during the API call to Smile ID) and are not written to persistent storage by GiftyView.
No other third parties receive face data.
Retention Period
GiftyView servers: Raw face images are not persistently stored. They are processed in-memory and discarded after the verification API call completes.
Smile ID: Retains verification records (including processed biometric data) for the period required by applicable law, typically 5–7 years for AML/KYC compliance. Users may contact Smile ID directly regarding their data retention practices.
Face ID biometric: Retained exclusively by Apple's Secure Enclave on your device. GiftyView has no access to this data and it is not subject to our retention policies.
Summary Table
Data Type
Collected By
Shared With
Stored By
Retention
Face image (KYC selfie)
GiftyView app
Smile ID (KYC)
Smile ID only
5–7 years (legal)
Face image (withdrawal auth)
GiftyView app
Smile ID (KYC)
Smile ID only
5–7 years (legal)
Face ID biometric
Apple iOS (Secure Enclave)
Not shared
Device only (Apple)
Per Apple iOS policy
QR code scan (camera)
Device camera only
Not shared
Not stored
Not retained
3 How We Use Your Information
We process your data for the following purposes:
To provide and operate the Services, including gift card trading, bill payment facilitation, and wallet management
To verify your identity (KYC) as required by financial regulations
To comply with legal and regulatory obligations (AML/CTF)
To process transactions and prevent fraud
To facilitate AI-powered customer support chat and support ticket messaging
To improve our platform and user experience
To communicate with you (updates, support, security alerts)
3.1 Bill Payment Services
GiftyView provides a bill payment facilitation service that allows users to pay third-party utility and subscription bills (including electricity, cable TV subscriptions, and airtime top-ups) directly from their GiftyView wallet. GiftyView acts as a payment intermediary and does not sell, distribute, or provide access to any third-party digital content. All payments are made to licensed third-party service providers on behalf of the user. This service is equivalent in nature to paying a utility bill through a banking or fintech application.
3.2 Messaging & Chat
The app includes an AI-powered support assistant and in-app messaging functionality. Chat transcripts may be retained for customer service quality purposes and to improve our AI assistant. Users must be 18 or older to use the Services.
4 Legal Basis for Processing (GDPR Users)
If you are in the European Economic Area (EEA) or UK, we rely on:
Contractual necessity — to provide our Services
Legal obligations — compliance with AML/KYC laws
Legitimate interests — fraud prevention and platform improvement
Consent — where required (e.g., marketing communications)
5 Sharing and Disclosure of Data
We do not sell personal data to third parties. We may share your information with:
In the event of a merger, acquisition, or asset sale
6 International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. Where required, we implement safeguards such as:
Standard Contractual Clauses (SCCs)
Data Processing Agreements (DPAs)
Transfers to jurisdictions with adequate data protection laws
7 Data Retention
We retain personal data only as long as necessary:
To fulfill the purposes outlined in this Policy
To comply with legal and regulatory obligations
To resolve disputes and enforce agreements
KYC and financial records may be retained for a minimum period required by law (e.g., 5–7 years)
8 Your Privacy Rights
Depending on your jurisdiction, you may have the following rights:
8.1 Access and Portability
Request a copy of your personal data
8.2 Correction
Request correction of inaccurate or incomplete data
8.3 Deletion
Request deletion of your data, subject to legal obligations
Right to deletion cannot apply to transaction data that has already been published to a public immutable blockchain
8.4 Restriction and Objection
Restrict or object to certain processing activities
8.5 Withdraw Consent
Withdraw consent where processing is based on consent
8.6 CCPA Rights (California Residents)
Right to know what data is collected
Right to request deletion
Right to opt out of data sale (we do not sell data)
Right to non-discrimination
To exercise your rights, contact: support@giftyview.com
9 Data Security
We implement appropriate technical and organizational measures, including:
Encryption of sensitive data
Secure servers and access controls
Continuous monitoring for vulnerabilities
No system is completely secure. You use the Services at your own risk. If you believe your account has been compromised, contact us immediately at security@giftyview.com.
10 Cookies and Tracking Technologies
We use cookies and similar technologies to:
Enhance user experience
Analyze traffic and usage patterns
Improve platform performance
You can control cookies through your browser settings.
11 Children's Privacy
Our Services are not intended for individuals under 18. We do not knowingly collect data from minors. If identified, such data will be deleted immediately. If you believe a minor has registered, contact us at privacy@giftyview.com.
12 Automated Decision Making
We may use automated systems to:
Detect fraud
Assess risk levels
Enforce compliance measures
These decisions may impact your ability to use certain features of the platform.
13 Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
14 Changes to This Policy
We may update this Privacy Policy periodically. Changes will be effective upon posting. Continued use of our Services after any changes constitutes your acceptance of the updated policy.