Privacy Policy
We handle your money and your identity, so we collect only what the service needs, never sell it, and tell you here exactly what happens to it.
Last updated 29 September 2026
01Who we are
NyZen is operated by NyZen (company registration in progress), Registered address to be published before launch. We decide how your personal data is used in the NyZen app and on nyzen.one, so we are responsible for it.
Questions about your data go to privacy@nyzen.one.
02What we collect
What you give us
- Account: your name, email, phone number, country, date of birth, username and address. Your password and transaction PIN are stored only as one-way hashes; we cannot read them.
- Identity checks: a photo of your ID document and a selfie, taken by our verification partner, and the result of the checks.
- Payments: the people, banks, mobile wallets and billers you pay, and the details needed to reach them.
- Support: what you write to us and any files you attach.
What we record as you use NyZen
- Every transaction: amounts, currencies, times, references and status.
- Sign-in and security events, such as new sign-ins and PIN changes.
- The device token that lets us send you notifications, and basic device information.
What stays on your phone
If you let the app read your contacts, it does so only on your phone to help you pick someone to pay. We do not upload your address book, and we do not use your location: your country is suggested from your SIM card, your phone's region setting and the country your connection comes from.
Your bank or mobile wallet passwords and PINs (bKash keeps those), or anything from other apps on your phone.
03Why we use it
| Purpose | What it involves | Legal basis |
|---|---|---|
| Running your account | Holding balances, moving money, statements, receipts | Our contract with you |
| Knowing who you are | Identity checks before cards, accounts and larger payments | Legal obligation |
| Keeping money safe | Spotting fraud, unusual payments and account takeover | Legal obligation and legitimate interest |
| Talking to you | Codes, receipts, security alerts and service messages | Our contract with you |
| News and offers | Only if you turn marketing on; off with one tap | Your consent |
| Improving NyZen | Understanding which features work, in aggregate | Legitimate interest |
05Where your data goes
Some partners store data outside Bangladesh. When that happens we use contracts that require them to protect it to the standard of this policy, and we send only what their job needs.
06How long we keep it
- Transactions and identity records: for as long as anti-money-laundering law requires, usually at least five years after your account closes, even if you ask us to delete them.
- Everything else: while your account is open, and deleted or anonymised after it closes, once any dispute or legal claim is settled.
- One-time codes: minutes. Waitlist sign-ups: until launch, or until you ask us to remove you.
07Your choices and rights
You can ask us to:
- give you a copy of the data we hold about you;
- correct anything that is wrong;
- delete your data, where the law lets us;
- stop or limit some uses, such as marketing;
- send your data to you in a form another service can read.
Write to privacy@nyzen.one from the email on your account. We answer within 30 days. To close your account and have your data deleted, see Close your account.
08How we protect it
- Everything travels encrypted, and sensitive details are encrypted where they are stored.
- Every payment needs your PIN, and repeated wrong PINs lock it.
- Changing your password signs out your other devices.
- Only the people who need to see data for their work can, and their access is logged.
09Children
NyZen is for adults. We do not knowingly open accounts for anyone under 18.
10Changes to this policy
When we change this policy we update the date at the top. If a change matters to how we use your data, we tell you in the app or by email before it takes effect.
11Contact and complaints
Write to privacy@nyzen.one. If you are not happy with our answer, see Complaints; you can also complain to your data protection authority.
