Privacy policy

• Identity data: your name, date of birth, gender, nationality, and your BVN or NIN, collected to satisfy CBN KYC requirements.
• Business data (business accounts): registration number, TIN, and details of directors and signatories.
• Contact data: your email address, phone number and postal or residential address.
• Account and transaction data: your account numbers, balances, transfers, bill payments and statements.
• Technical data: information about the device and connection you use, and a record of security events such as sign-ins and PIN changes.

• To open and operate your account and to carry out the transactions you instruct.
• To verify your identity and to meet our legal obligations on KYC, anti-money-laundering and sanctions screening.
• To detect, investigate and prevent fraud and unauthorised access.
• To communicate with you about your account, including transaction alerts and one-time passwords.
• To keep the records that banking regulation requires us to keep, and to improve the service.

We rely on the performance of our contract with you, our legal obligations as a licensed bank, and our legitimate interest in preventing fraud, as the bases for this processing.

We do not sell your personal data. We share it only where it is necessary:

• With the Central Bank of Nigeria, the NDIC and other regulators or law-enforcement agencies where we are required to.
• With NIBSS and other banks, to verify identities and to route transfers you have instructed.
• With the identity-verification and payment-processing providers that support the service, under contracts that restrict what they may do with the data.
• With credit bureaux and the courts, where the law permits or requires it.

Banking regulation requires us to keep customer identification and transaction records for a minimum period after a relationship ends — generally at least five years. We retain your data for at least that long, and delete or anonymise it once no legal, regulatory or legitimate business reason to keep it remains.

Connections are encrypted in transit. Access to customer data inside the bank is restricted to staff who need it for their work. Your transaction PIN is stored only as a one-way hash and cannot be read back by anyone, including our staff. Your BVN, NIN and PIN are never displayed in full in the app. See our security page for more detail.

Stark App uses cookies that are strictly necessary to run the service — principally to keep you signed in securely and to remember your display preferences. We do not use advertising cookies. Blocking necessary cookies will prevent you from signing in.

• Ask for a copy of the personal data we hold about you.
• Ask us to correct information that is inaccurate or out of date.
• Ask us to delete data, where no legal or regulatory obligation requires us to keep it.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent where our processing was based on consent.
• Complain to the Nigeria Data Protection Commission if you are unhappy with how we have handled your data.

You can update your phone number and address yourself in Settings → Profile. Changes to your legal name or identity data must be made at a branch, because they are tied to your verified KYC records.

We may update this policy from time to time. The current version is always published here, and we will notify you of material changes.

To exercise any of your rights, or to ask a question about this policy, contact support@tudunwadamfb.com.ng or call 0700 000 0000.