← All legal documentsLegal

Privacy Policy

We handle your money and your identity, so we collect only what the service needs, never sell it, and tell you here exactly what happens to it.

Last updated 29 September 2026

01Who we are

NyZen is operated by NyZen (company registration in progress), Registered address to be published before launch. We decide how your personal data is used in the NyZen app and on nyzen.one, so we are responsible for it.

Questions about your data go to privacy@nyzen.one.

02What we collect

What you give us

  • Account: your name, email, phone number, country, date of birth, username and address. Your password and transaction PIN are stored only as one-way hashes; we cannot read them.
  • Identity checks: a photo of your ID document and a selfie, taken by our verification partner, and the result of the checks.
  • Payments: the people, banks, mobile wallets and billers you pay, and the details needed to reach them.
  • Support: what you write to us and any files you attach.

What we record as you use NyZen

  • Every transaction: amounts, currencies, times, references and status.
  • Sign-in and security events, such as new sign-ins and PIN changes.
  • The device token that lets us send you notifications, and basic device information.

What stays on your phone

If you let the app read your contacts, it does so only on your phone to help you pick someone to pay. We do not upload your address book, and we do not use your location: your country is suggested from your SIM card, your phone's region setting and the country your connection comes from.

What we never collect

Your bank or mobile wallet passwords and PINs (bKash keeps those), or anything from other apps on your phone.

03Why we use it

PurposeWhat it involvesLegal basis
Running your accountHolding balances, moving money, statements, receiptsOur contract with you
Knowing who you areIdentity checks before cards, accounts and larger paymentsLegal obligation
Keeping money safeSpotting fraud, unusual payments and account takeoverLegal obligation and legitimate interest
Talking to youCodes, receipts, security alerts and service messagesOur contract with you
News and offersOnly if you turn marketing on; off with one tapYour consent
Improving NyZenUnderstanding which features work, in aggregateLegitimate interest

04Who we share it with

We share data only with the companies that help run the service, each for its own job and no more. They may not use it for anything else.

PartnerWhat they doWhat they receive
DiditIdentity verification (ID document and selfie checks)Your ID document, a selfie and the checks on them
ZiiroPayIssuing and running virtual cards, and USDT deposit addressesYour name, contact details, date of birth, address, ID document and photo (for the card check), card activity and USDT deposits
bKashAdding money from bKashThe payment you make and its reference
ReloadlyMobile top-upsThe number you top up and the amount
currencyapiExchange ratesNo personal data
ResendSending email (codes, receipts, statements)Your email address and the message
OneSignalSending push notificationsA device token and the notification
WhatsAppSending the code that confirms your mobile numberYour mobile number and the code
Google and AppleSigning in with Google or Apple, if you choose toYour name and email address from that account
CircleHolding and moving USDC for the crypto featuresYour crypto wallet and its transactions
BinanceReceiving crypto depositsThe deposit and its reference

We also share data when the law requires it: with regulators, law enforcement or courts, and with a recipient’s bank or wallet when you send money. We never sell your data, and we do not share it with advertisers.

05Where your data goes

Some partners store data outside Bangladesh. When that happens we use contracts that require them to protect it to the standard of this policy, and we send only what their job needs.

06How long we keep it

  • Transactions and identity records: for as long as anti-money-laundering law requires, usually at least five years after your account closes, even if you ask us to delete them.
  • Everything else: while your account is open, and deleted or anonymised after it closes, once any dispute or legal claim is settled.
  • One-time codes: minutes. Waitlist sign-ups: until launch, or until you ask us to remove you.

07Your choices and rights

You can ask us to:

  • give you a copy of the data we hold about you;
  • correct anything that is wrong;
  • delete your data, where the law lets us;
  • stop or limit some uses, such as marketing;
  • send your data to you in a form another service can read.

Write to privacy@nyzen.one from the email on your account. We answer within 30 days. To close your account and have your data deleted, see Close your account.

08How we protect it

  • Everything travels encrypted, and sensitive details are encrypted where they are stored.
  • Every payment needs your PIN, and repeated wrong PINs lock it.
  • Changing your password signs out your other devices.
  • Only the people who need to see data for their work can, and their access is logged.

09Children

NyZen is for adults. We do not knowingly open accounts for anyone under 18.

10Changes to this policy

When we change this policy we update the date at the top. If a change matters to how we use your data, we tell you in the app or by email before it takes effect.

11Contact and complaints

Write to privacy@nyzen.one. If you are not happy with our answer, see Complaints; you can also complain to your data protection authority.