So, how do we handle your data?

Clear roles, clear bases for processing, and rights you can exercise anytime.

Last updated: August 11, 2026

Registration

NDPC/DCP/11710

Udara Global Limited is a registered data controller/processor of major importance with the Nigeria Data Protection Commission.

Entity

Udara Global Limited

Product

Udara · Udara Technologies

Channel

WhatsApp + useudara.com

Who this covers.

Merchants of one: anyone using Udara on WhatsApp, on the site, or on our waitlist.

This policy applies to people who use Udara through WhatsApp, visit www.useudara.com, join our waitlist or newsletter, use account block/unblock flows, or otherwise interact with Udara websites, applications, and connected channels (including WhatsApp where integrated).

Udara Global Limited ("Udara", "we", "us", or "our") operates Udara as a Udara Technologies product. By using our services, you acknowledge the practices described herein.

Roles & partners.

We are the controller for Udara account data. Rubies holds customer funds. Meta powers WhatsApp delivery.

As a data controller: Udara is the controller for personal data we collect to operate the product: WhatsApp identifiers, preferences you share, waitlist emails, support messages, and website analytics.

Banking partner: Customer funds related to Udara savings are held with Rubies Microfinance Bank. Rubies remains responsible for banking, settlement, and regulated financial records. We exchange information with Rubies only as needed to deliver the service and meet legal obligations.

As a data processor: In limited cases where we process personal data solely on another organisation's documented instructions under a DPA, we act as a processor for that activity.

What we collect.

Only what we need to run strict savings on WhatsApp: identity, messages, and technical signals.

3.1 Data you provide

Identity data: full name and, where required for KYC or account recovery, government-issued ID details.

Contact data: email address, WhatsApp-linked phone numbers, and other contact details you share.

Savings preferences: goals, lock windows (for example the 7PM transfer lock), and instructions you send on WhatsApp.

Financial data: where needed to open or operate a savings relationship, identifiers such as BVN/NIN and settlement or wallet account details may be processed with our banking partner.

3.2 Meta / WhatsApp

Message metadata: timestamps, delivery/read status, and sender/receiver identifiers.

Conversation content: temporary processing of text so Udara can understand intent, answer spending questions, and apply discipline features such as transfer locks.

3.3 Technical data

Essential cookies for sessions; analytics (Google Analytics / Vercel Analytics where enabled); IP addresses, browser types, and OS versions for security and reliability.

AI, carefully.

Models help with chat and discipline. We don’t sell your messages to AI labs.

Udara uses proprietary and third-party AI models to power WhatsApp conversations, spending insights, and savings discipline features.

  • No data sale: we do not sell personal data or message content to third-party AI labs.
  • Privacy-first AI: systems are configured to identify and redact sensitive financial information (such as full card numbers) before processing where possible.

Who we share with.

Banks, Meta, infrastructure, and law enforcement only when required.

  • Financial institutions: Rubies Microfinance Bank (and other regulated partners as required).
  • Platform providers: Meta Platforms, Inc. for WhatsApp Business API / messaging.
  • Infrastructure & analytics: encrypted cloud hosting and analytics (for example Vercel, Google Analytics).
  • Law enforcement: only with a valid legal order or mandatory AML/regulatory reporting.

Cross-border transfers follow Section 41 of the NDPA with safeguards such as Standard Contractual Clauses (SCCs).

We use AES-256 at rest and TLS 1.3 in transit where supported. Transaction/KYC logs: 5 years. Marketing/waitlist: deleted within 12 months of inactivity (unless law requires longer).

Your rights.

Access, fix, delete, export, subject to Nigerian retention rules.

  • Access : request a copy of your personal data.
  • Rectification : correct inaccurate data.
  • Erasure : request deletion, subject to regulatory retention.
  • Portability : export in a structured, machine-readable format.

Talk to our DPO.

Questions, complaints, or rights requests. We respond. You can also escalate to the NDPC.

Data protection officer

Ndubueze Ikechukwu Samuel

25, Herbert Macaulay Way, Yaba, Lagos State, Nigeria.

If you are unsatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).