Galafy Ltd (“Galafy”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of its users. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you access or use the Galafy mobile application, website, and related services.
This Privacy Policy is issued in compliance with the Nigeria Data Protection Act, 2023 (NDPA), the Central Bank of Nigeria (CBN) Consumer Protection Framework, and applicable CBN AML/CFT Regulations.
This Policy applies to all users of the Galafy platform. Wema Bank Plc operates wallet and settlement services and acts as Data Controller for financial data.
We may collect personal data including name, phone number, email address, identity information for KYC data (BVN, NIN, address verification, facial verification), transaction records, device data, and usage information. We do not collect data beyond what is necessary for core gifting, wallet, and compliance functions.
Personal data is used to provide gifting and wallet services, verify identity, prevent fraud, comply with regulatory obligations, and improve the Platform.
We may share personal data with our payment processors, regulators, service providers or where required by law. Galafy does not sell personal data.
Galafy applies appropriate technical and organizational measures to safeguard personal data.
Personal data is retained only for as long as necessary to meet legal, regulatory, and operational requirements.
Users have rights to access, correct, or request deletion of their personal data, subject to NDPA provisions.
Users may request account deletion via in-app support, subject to regulatory retention requirements.
Galafy is for users aged 18 and above only.
For privacy-related inquiries or complaints regarding these Terms, please contact Galafy at:
Email: support@galafy.co
Website: https://www.galafy.co
All Rights Reserved © 2026 Galafy Ltd


