Privacy Policy
A pot carries people’s names, messages and money. Here is exactly what we collect, why, and the control you have over it.
Last updated 11 November 2026On this page
The short version
- We collect what a pot needs: names, contact details, messages and recordings, contributions, and the identity and bank details needed before money can leave a pot.
- We never sell your personal data, and we never show anyone how much you gave unless the organiser chooses to show totals.
- Pot money and card payments are handled by Flutterwave, a payment company licensed by the Central Bank of Nigeria. We never see your full card number or your bank PIN.
- You can ask to see, correct or delete your data at any time, and you can complain to the Nigeria Data Protection Commission.
This summary helps you read the full text below; the full text is what applies.
1. Who we are
Ayopot (“Ayopot”, “we”, “us”) helps groups collect money and messages for a person or an occasion. Ayopot is a product of TribeMingle, which is the data controller for the personal data described in this policy.
This policy explains what we collect when you use ayopot.com or our apps, why we collect it, who we share it with and the choices you have. It is written to meet the Nigeria Data Protection Act 2023 and, where it applies to you, other data protection laws such as the GDPR.
Questions about your data go to privacy@ayopot.com.
2. What we collect
What we collect depends on how you use Ayopot.
If you start a pot (the organiser)
- Your name, phone number and email address, and your sign-in details.
- What you put in the pot: the title, occasion, photos, description, close date, wishlist items and the amount each person is asked to give.
- Before money can leave a pot, the details needed to check who you are and pay you: your Bank Verification Number (BVN) or National Identification Number (NIN), a selfie where we ask for one, and your bank account. For memorial, medical and charity pots we may also ask for a document that shows the pot is genuine.
If you are on a member list
For aso-ebi, dues and levies, an organiser can add the people expected to pay, with their name, phone number and the amount due. If an organiser added you, we use these details to show whether you have paid and to send you reminders the organiser asks for. You can ask us to remove you at any time.
If you give to a pot or leave a message (a contributor)
- The name you give, and your phone number or email address if you leave one for a receipt.
- Your message and anything you add to it: emojis, stickers, GIFs, photos, videos and voice notes.
- Your contribution: the amount, the fee, the time, and the name and bank shown on a bank transfer. Card payments are taken by Flutterwave, our payment partner; we receive a confirmation and the last four digits, never the full card number.
If a pot is for you (the celebrant)
The name and contact details the organiser gives us so we can deliver the card, and, if you withdraw or spend the money, the identity and bank details described above.
When anyone uses Ayopot
- Device and usage information: your device type, browser, IP address, pages viewed and actions taken, and approximate location from your IP address.
- Messages you send us, reports you make about a pot, and the outcome of any review.
3. How we use it
- To run pots: show the pot page, take contributions, keep the pot’s balance and history, and deliver the card to the celebrant.
- To pay money out: check identity and bank details, and send withdrawals, airtime, data, bill payments and gift cards.
- To send the messages you expect: receipts, reminders to members, updates to organisers and the card itself, by WhatsApp, SMS or email.
- To keep Ayopot safe: spot and stop fraud, scams and money laundering, review reported pots, and apply holds and limits.
- To help you write a message: if you tap “Help me write it”, the words you have typed and the occasion are sent to an AI service to suggest a message. Nothing is posted until you choose to post it.
- To answer you when you contact us, and to improve Ayopot by understanding how it is used.
- To meet our legal duties, including financial record keeping and requests from regulators and law enforcement.
4. Our legal reasons
We only use personal data when the law allows it. Our reasons are:
- To provide the service you asked for, such as running your pot, taking your contribution or paying you out.
- To meet legal obligations, such as identity checks before payouts, anti-money-laundering rules and keeping financial records.
- Our legitimate interests in keeping Ayopot safe and working well, where your rights do not outweigh them.
- Your consent, for example for non-essential cookies or marketing messages. You can withdraw consent at any time.
5. Who can see what in a pot
- The organiser sees every contribution, including amounts, and the member list.
- Other guests see your name and message, never your amount, unless the organiser chooses to show totals or amounts.
- The celebrant sees the messages, recordings and the total, and the amounts only if the organiser shares them.
- You can give anonymously: other guests and the celebrant then see “Anonymous” instead of your name. The organiser still sees who gave, for safety.
- Anyone with a pot’s link can open its page. Organisers choose what the page shows; please do not put private information in a pot’s title or description.
7. Data outside Nigeria
Some of our providers store or process data outside Nigeria, for example on cloud servers in Europe or the United States. When that happens we rely on the protections the Nigeria Data Protection Act allows, such as contracts that require the same level of protection as Nigerian law.
8. How long we keep it
- Pots, messages and recordings stay while the organiser’s account is open, so the celebrant can keep replaying the card. Organisers can delete a pot’s messages and media.
- Records of contributions, payouts and identity checks are kept for at least five years after the transaction, as Nigerian anti-money-laundering law requires, even if you close your account.
- Reports and fraud reviews are kept as long as we need them to keep Ayopot safe.
- When we no longer need data, we delete it or remove anything that identifies you.
9. How we protect it
We encrypt data in transit, limit who in our team can see personal data, ask for a PIN or a code before money leaves a pot, and check every pot’s balance against Flutterwave’s records each day. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.
10. Your rights
You have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct it if it is wrong;
- ask us to delete it, unless we must keep it by law (for example financial records);
- object to, or ask us to limit, how we use it;
- withdraw your consent where we rely on it;
- receive your data in a common format to take elsewhere.
Email privacy@ayopot.com and we will reply within 30 days. We may ask you to confirm who you are first. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
11. Children
You must be 18 or older to start a pot, verify your identity or withdraw money. Pots are often for children, such as a naming ceremony or a school trip, but an adult runs them. If we learn that we have collected data from a child without a parent’s permission, we will delete it.
13. Changes to this policy
We will update this policy when Ayopot changes. If a change matters to you, we will tell you in the app or by email before it takes effect. The date at the top shows when it last changed.
14. Contact us
For anything about your data, email privacy@ayopot.com. For everything else, write to hello@ayopot.com.