Privacy

Guap is a wallet for holding dollars, with ways to buy them with naira and cash them out to a Nigerian bank. This explains what is collected while you use it, why, and how long it is kept. It is written to be read, so it is short.

Your account

When you sign in with Google, we keep:

• Your name, email address and profile picture, as Google provides them.
• Your wallet addresses.
• Settings you choose, such as your preferred network, avatar and savings goal.
• When you signed in and when you were last active, with the IP address, approximate location and browser of each sign-in.

We never see or store your wallet’s keys, and there is no password.

Your activity

Transfers to and from your addresses are public on the blockchain. We read them and keep a copy so your activity shows up quickly. Your balance is read from the blockchain and is not something we hold.

Buying, cashing out and the off-ramp

• For a purchase: the naira amount, the rate, the fee, what you receive and its status.
• For a cash out or an off-ramp payout: the bank account paid into (bank, account number and the name the bank returns), the amount, the rate, and the address that paid.
• For every payout, including attempts that were rejected: your IP address, the approximate location it resolves to, your browser and language, and the time of each step.

Bank accounts you have used before are saved in your browser, on your device, so you do not type them again. They are not sent to us for that, and clearing your browser’s data removes them.

Why IP address and location

Fraud prevention and audit. Moving money between crypto and bank accounts attracts attempts to launder funds or to test stolen bank details, and the patterns that reveal it are things like one address paying into many unrelated accounts, or many rejected attempts from one origin in a short window. Those are only visible if the origin is recorded.

Under the Nigeria Data Protection Act 2023 the lawful basis is legitimate interest in preventing fraud, and compliance with our obligations as a business handling payments.

Analytics

We count page views to see which parts of the service people actually reach. It records the page, the referrer, and coarse details like country and device type.

It sets no cookies, assigns no identifier that follows you, and is not connected to your account or your payouts. There is no advertising.

Who else sees it

• Dynamic, our wallet provider, handles sign-in and secures the wallet's keys. It receives what Google shares at sign-in.
• Our naira settlement partner receives the bank account and amount of a payout, and the amount and refund account of a purchase, because they move the naira. They do not receive your IP address or location.
• Our routing partner receives your wallet address and the amount when a payment is converted or swapped. They do not receive your bank details.
• Our database provider stores the records described here on our behalf.
• Our hosting provider serves the site and processes the page-view counts, and necessarily sees the IP addresses of requests, as any host does.
• When a payout fails, its amount, the bank account and name, and the refund address are sent to the person who runs Guap as a private Telegram message, so it can be dealt with.

Nothing is sold, and nothing is shared for marketing. Records may be disclosed to a bank, a regulator or law enforcement where we are legally required to.

How long it is kept

Payout and purchase records, and the origin data attached to them, are kept for seven years, which is the retention period expected of financial records in Nigeria. Records of rejected attempts that never became a payout are kept for twelve months. Your account details are kept while you use Guap, and deleted when you ask, except where they are part of a financial record above.

When a payout fails

A payout that a bank cannot accept is refunded. Where you paid from an address we can refund to directly, that happens automatically. Where you paid from a chain that cannot receive the refund, the funds return to an address Guap controls and are sent back to you by hand. That is the only point at which we hold your funds at all, and it only happens when something has already gone wrong.

Your rights

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Deletion is limited by the retention periods above: a completed payout or purchase is a financial record and cannot be erased on request. Deleting your account does not touch your wallet, because the money in it was never ours to hold. You can also complain to the Nigeria Data Protection Commission.

Contact

Message @dxFareed on Telegram. That reaches a person directly, which for something this small is faster than a support address that nobody is watching.