Talk 2

Privacy policy

Last updated: 4 October 2026

Talk 2 is a chat app with a wallet attached, so we hold two kinds of information about you: the things you say to people, and the things you need in order to move money. This page explains both.

1. Who we are

Talk 2 is operated by Talk 2 Technologies Ltd, a company registered in Nigeria.

  • Registered office: [Company address]
  • Registration number: [RC number]

We are the data controller for the information described here. That means we decide what is collected and why, and we are answerable to you for it.

2. What we collect

Your account

When you sign up we ask for your name, email address, phone number, city and country. You choose a username and a password, and you can add an avatar. We record your timezone so that message times read correctly. We send a one-time code to your email to confirm the address is yours.

You also set a 4-digit PIN, which is what authorises money leaving your wallet. You can turn on two-factor sign-in using either an authenticator app or a code by SMS.

Identity verification

Before we can open a funding account for you, Nigerian rules require us to confirm who you are. You give us one number — a BVN or a NIN — and we check it against the name on your account. We also accept identity documents: an ID card, a passport, a driver's licence, a utility bill and a selfie.

Wallet and payments

We hold your wallet balance, your dedicated virtual account number, the bank accounts you save for payouts, and a record of every transaction — transfers to other people, payouts, bill and airtime payments, and money coming in.

If you save a card, the card number is held by our payment provider in tokenised form. Talk 2 never sees or stores your full card number or your CVV.

Messages

One-to-one and group messages, images, files and voice notes are stored on our servers, along with reactions, read receipts and typing indicators.

Location

If you start a live location share, we collect your position roughly every 30 seconds for as long as the share runs — 15 minutes, 1 hour, or until you switch it off. You choose who can see it. You can also create a link that works without an account, which anyone holding the link can open until the share ends.

We do not collect your location at any other time. Nothing is tracked in the background.

Contacts

On our mobile apps you can let us match your phone contacts against Talk 2 accounts. Numbers are hashed before they are sent, and we use them only to tell you which of your contacts is already here. On the web there is no address book, so you find people by searching.

Support and security records

Support tickets you open, the notifications we send you, and a record of actions our staff take on your account. We also keep basic technical records needed to run the service, such as sign-in times and the device or browser used.

3. Why we use it, and our legal basis

The Nigeria Data Protection Act 2023 says we must have a lawful reason for everything we do with your information. Here is ours.

  • To give you the service you asked for — your account, your messages, your wallet, your location shares. Legal basis: performance of our contract with you.
  • To verify your identity and to keep records of transactions. Legal basis: compliance with a legal obligation under Nigerian anti-money-laundering and know-your-customer rules.
  • To keep accounts safe — spotting fraud, blocking abuse, investigating reports. Legal basis: our legitimate interest in a service people can trust, and our legal obligations.
  • To answer you when you open a support ticket. Legal basis: performance of our contract with you.
  • To share your live location with the people you pick. Legal basis: your consent, given each time you start a share, and withdrawn the moment you stop it.
  • To match your phone contacts on mobile. Legal basis: your consent.

4. Your messages are not end-to-end encrypted

We want to be plain about this. Talk 2 messages are not end-to-end encrypted. They are encrypted while they travel between your device and our servers, and the servers and backups are protected, but the messages are stored in a form we could in principle read.

In practice that means:

  • Our staff do not read your messages as a matter of course, and access is restricted and logged.
  • We may access specific messages to investigate a report of abuse or fraud, or where the law requires it.
  • If a message would be damaging in the wrong hands, please do not send it through Talk 2.

5. Who we share information with

We do not sell your information. We share it only with the companies that make parts of Talk 2 work, and only the part each one needs.

  • Dojah — identity verification. Dojah receives the BVN or NIN you submit and the name on your account, and tells us whether they match.
  • Flutterwave — payments. Flutterwave issues your dedicated funding account, processes payouts and card payments, and holds your card details in tokenised form. To open the funding account, Flutterwave is given your verified BVN or NIN and your name.
  • Bill and airtime providers — the details needed to complete the payment you asked for, such as a meter number or a phone number.
  • Our hosting and infrastructure providers — they store the data on our behalf and may not use it for anything else.
  • Our own staff — a small number of people use an admin console to review verification documents, answer tickets and investigate fraud. Every action they take is recorded in an audit trail.
  • Courts, regulators and law enforcement — where we are legally required to hand something over.

Some of these providers process data outside Nigeria. Where they do, we rely on the transfer rules in the Nigeria Data Protection Act 2023 and require them by contract to protect your information to the same standard.

6. How long we keep things

  • Account details — for as long as your account is open, then [retention period] after you close it.
  • Verification records and transaction history — [retention period], because the law requires us to keep them even after you leave.
  • Messages and attachments — until you or the other person deletes them, or [retention period] after your account closes.
  • Location points from a live share — [retention period] after the share ends. Share links stop working as soon as the share stops.
  • Support tickets — [retention period].

7. How we protect it

  • Traffic between your device and Talk 2 travels over an encrypted connection.
  • Your BVN or NIN is stored encrypted and is never shown back to you or to our staff — only the type and the last few digits appear in Settings.
  • Your password and your wallet PIN are stored hashed, not in readable form.
  • Card numbers never reach our servers.
  • Sign-in tokens live in cookies your browser will not hand to scripts, which limits the damage a malicious page can do.
  • Staff access to accounts is limited to the people who need it and is written to an audit trail.
  • You can add two-factor sign-in, and we recommend it.

No service is perfectly secure. If we discover a breach that puts you at risk, we will tell you and notify the Nigeria Data Protection Commission as the Act requires.

8. Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to do any of the following, free of charge.

  • See what we hold about you, and why.
  • Correct anything that is wrong. Most of it you can edit yourself in Settings.
  • Delete your information, except where we are legally required to keep it — transaction and verification records, mainly.
  • Object to a particular use, or withdraw consent you gave earlier, such as contact matching or a location share.
  • Take your data elsewhere — we will give you a copy in a common machine-readable format.
  • Restrict what we do with your information while a dispute about it is being sorted out.

Write to us at [Data Protection Officer email] and we will reply within 30 days. If you are not satisfied with how we handle it, you can complain to the Nigeria Data Protection Commission (NDPC). Complaining to us first is not a condition of going to them.

9. Deleting your account

You can close your account yourself. Go to Settings → Danger Zone. To confirm it is really you, we ask for three things:

  1. your wallet PIN;
  2. your password;
  3. a short phrase typed out by hand.

We will refuse the request while there is money in your wallet. Withdraw or send the balance first — we would rather block the deletion than let a balance disappear.

Once the account is closed, your profile, your messages and your location history are removed on the schedule in section 6. Your transaction and verification records stay for as long as the law says they must, and nothing else.

10. Children

Talk 2 is not for anyone under 18. We do not knowingly collect information about children. If you believe a child has created an account, tell us at [support email] and we will close it and delete what we hold.

11. Cookies and browser storage

Talk 2 uses a small number of cookies to keep you signed in, and no advertising, analytics or tracking cookies at all. Our cookie policy lists every one of them by name.

12. Changes to this policy

When we change how Talk 2 handles your information, we will update this page and move the date at the top. If the change matters to you — a new provider, a new use of your data, anything to do with tracking — we will tell you in the app or by email before it takes effect.

13. Contact us

  • General and support: [support email]
  • Data protection questions and rights requests: [Data Protection Officer email]
  • By post: Talk 2 Technologies Ltd, [Company address]

You may also want to read our terms of service.