Your data, handled with bank-grade care.

We collect the following categories of personal data:

Permissions such as camera, microphone, contacts, location, biometrics, and NFC are requested only when a feature needs them, and you can manage them in your device settings.

• Create and secure your account and verify your identity (KYC/AML).
• Process transfers, deposits, withdrawals, bill payments, crypto, gift cards, and insurance.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Provide support, send service messages, and improve the app.
• Enable optional features you turn on — voice, scan-to-pay, contacts-based sending.
• Comply with legal, regulatory, tax, and reporting obligations.

• Performance of a contract — to provide the Services you request.
• Legal obligation — to meet KYC/AML, safeguarding, and regulatory duties.
• Legitimate interests — to keep the platform secure and prevent fraud.
• Consent — for permissions-based features (camera, microphone, contacts, location, biometrics), which you can withdraw at any time.

We do not sell your personal data. We share it only with categories of recipients who help us deliver the Services:

• Identity & banking partners (e.g. Mono) — verification, bank linking, and payments.
• Crypto exchange partner (Quidax, SEC-licensed) — crypto buy, sell, and swap.
• Bill-payment aggregators (e.g. VTpass, Reloadly) — airtime, data, and utility bills.
• Insurance partners (including MyCover) — underwriting and policy management.
• Infrastructure & analytics providers — hosting, cloud, communications, and product analytics.
• Regulators, law enforcement, and professional advisers — where legally required or to protect our rights and users.

We keep personal data only as long as necessary for the purposes described here. Because we are a regulated financial service, we must retain certain identity and transaction records for a number of years after your account closes to meet legal, tax, and anti-fraud obligations. When data is no longer needed, we delete or anonymise it.

• Encryption in transit and at rest, and secured infrastructure.
• Strong authentication, transaction PINs, and optional biometrics.
• Access controls limiting staff access to a need-to-know basis.
• Continuous monitoring, rate limiting, and fraud controls.

Subject to applicable law, you can:

• Access, correct, or update your personal data.
• Request deletion of your account and data (subject to legal retention) — see account deletion in our Terms.
• Object to or restrict certain processing, and withdraw consent for permissions.
• Request a copy of data you provided in a portable format.
• Complain to the relevant data protection authority.

To exercise any right, email [email protected].

Lazervault is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

Some of our partners and infrastructure providers may process data outside your country. Where data is transferred internationally, we take steps to ensure it is protected by appropriate safeguards consistent with applicable data protection law.

Our website uses cookies and similar technologies for essential functionality, security, and to understand how the site is used so we can improve it. You can control cookies through your browser settings. The mobile app uses device identifiers and local storage for equivalent purposes.

For privacy questions or to exercise your rights, contact our privacy team at [email protected]. For general support, email [email protected].