Privacy policy

Last updated 13 November 2026

AVI Friendly ("AVI Friendly", "we") lends money to people in Nigeria through this website. This policy explains what personal data we collect when you apply for a loan, why we need it, who sees it, how long we keep it and your rights under the Nigeria Data Protection Act 2023. We are the data controller for this data.

What we collect

What you give us

Your National Identity Number (NIN) and Bank Verification Number (BVN).
Your name and date of birth.
A selfie, taken with your camera or uploaded, and a photo of your ID (NIN slip or card, driver's licence, international passport or voter's card).
Your home address, and a utility bill for it.
Your mobile number, a WhatsApp number if it's different, and your email address if you give one.
The bank, account number and account name we pay your loan into.
The amount and length of loan you ask for.

We don't get data about you from anyone else, and we don't check your details with any outside service. Our staff check them against your ID.

What we record

When you accept the loan agreement: the time, the version you accepted, the loan terms shown to you, and your device's IP address and browser type.
Your loan's history: our decision, the payments we receive, and when we sent you WhatsApp messages.
Your IP address, briefly, to limit repeated attempts on the application and My loan pages.

On your device

The application form saves what you've typed in your browser so a dropped connection doesn't lose your work. It's cleared when you submit. We use one cookie, which protects the form against forged requests. We don't use advertising or analytics cookies. The camera is used only to take your selfie, when you allow it. This website sees only the photos and files you choose to upload, and can't see your contacts, messages or location.

Why we use it

To confirm who you are and prevent fraud. Your NIN and BVN identify you. Our staff check your name, date of birth and NIN against your photo ID, compare your selfie with it, and check that the bank account is in your name.
To decide on your application. A member of our staff reviews every application and makes the decision. The form automatically applies our lending rules: one loan at a time, a waiting period after some rejections, and a higher limit once you've repaid a loan on time.
To pay out your loan and collect repayments, under the loan agreement you accept.
To contact you. We'll message you on WhatsApp about this application and your repayments. Never for marketing.
To keep the records the law requires, and to settle any dispute about your loan.

We rely on your consent to use the details, photos and documents in your application, on the loan agreement for running your loan, on our legal obligations for record keeping, and on our legitimate interest in preventing fraud.

Who we share it with

Railway hosts this website and its database.
Google Fonts supplies the fonts on our pages and receives your device's IP address when a page loads.
WhatsApp carries the messages you and we send each other.
Regulators, law enforcement and courts, when the law requires it.

We never sell your data. We never contact your family, your employer or anyone else about your loan.

Data stored outside Nigeria

Railway's and Google's servers are outside Nigeria, so your data is transferred abroad. It travels encrypted (HTTPS), and your selfie, photo ID and bills are encrypted before they are stored, with a key kept apart from the data.

How we protect it

Only our signed-in staff can open your selfie, photo ID and bills.
Staff sign in with a password and an authenticator app, and every time someone opens your application it's recorded.
Your NIN, BVN and photos are never written to our server logs.

How long we keep it

What	How long
From an application that was rejected, withdrawn or expired: your selfie, photo ID and bills, date of birth, BVN, address, phone and WhatsApp numbers, email, bank account, and the IP address and browser you accepted the agreement from	12 months after it closed
The same details from a loan	5 years after you finish repaying
Applications under review and loans not yet repaid	Until they close, then as above

After that we keep only a short record: your NIN and name, the reference, the amount and length you asked for, the dates, our decision and any block, and the loan terms you accepted. For a loan we also keep when it was paid out and repaid, the payments we received and whether any were late. This is what keeps waiting periods, fraud blocks, your borrowing limit and your history on My loan working. Deleted data can stay in our backups for up to 3 months.

Your rights

You can ask us to:

give you a copy of the personal data we hold about you;
correct it if it's wrong;
delete it, where we don't have to keep it by law or under your loan agreement;
stop or limit how we use it, or give it to you in a form you can take elsewhere.

You can withdraw your consent at any time. This doesn't affect what we've already done with your data, and we can't consider an application without it.

To use any of these rights, contact us using the details below. If you're not happy with our answer, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Contact us

AVI Friendly

Changes

If we change how we use your data, we'll update this page and the date at the top.