Privacy Policy

Ziki is operated by Ziki Wealth Limited, a company registered in Malawi (Reg. No. COY-4A4S5E6G), Area 25 C, Sector 1, EML Complex, First Floor, Lilongwe, Malawi. We are the data controller for the personal information described here, and we process it in line with the Data Protection Act, 2024 of Malawi.

Account details: your name, phone number, email address (if you add one), date of birth and the PIN or password you set (stored only in hashed form).

Identity verification: to meet anti-money-laundering rules we verify who you are. This includes your ID document (such as your national ID or passport), a selfie or short face video used to match you to that document, and the results of checks against sanctions and politically exposed persons lists.

Money and investments: your balances, deposits, withdrawals, the mobile money or bank account you pay from or to, currency conversions, orders and holdings.

Support: messages, attachments and call notes when you contact us.

Device and usage: device model, operating system, app version, IP address, push notification token, crash and error reports, and logs of sign-ins and security events.

On this website: what you send us through a form, and basic technical data (IP address, browser) used to keep the site secure. We do not use advertising cookies or sell your information.

• To open and run your account, and carry out the deposits, withdrawals and investments you ask for.
• To verify your identity and prevent fraud, money laundering and the financing of terrorism, as the law requires.
• To keep your account secure, including sending one-time codes by SMS and alerting you to sign-ins.
• To send you receipts, statements and notifications about your account.
• To answer your questions and resolve complaints.
• To find and fix problems and improve the app.
• To meet our legal, regulatory, tax and audit obligations.

We rely on the performance of our contract with you, our legal obligations, our legitimate interest in running a safe service and, where we ask for it, your consent (which you can withdraw at any time).

We share personal information only where it is needed to provide Ziki, and only with:

• Identity verification and screening providers, who check your documents and selfie.
• Licensed payment partners and mobile money operators (such as Airtel Money and TNM Mpamba) and banks, to move your money.
• Brokerage and custody partners, to place and hold your investments.
• Service providers who send SMS, email and push notifications, host our systems and report errors, under contracts that require them to protect your data.
• Regulators, law enforcement, courts and the Financial Intelligence Authority, where the law requires it.
• A buyer or successor, if our business is sold or merged, under this policy.

Some of these providers process data outside Malawi. Where they do, we make sure the transfer is allowed under the Data Protection Act and that your information is protected to an adequate standard.

Data is encrypted in transit and at rest, access is limited to staff who need it and is logged, and sensitive actions by our staff require additional verification. No system is perfectly secure; if a breach affects you, we will tell you and the regulator as the law requires. See our Security page.

We keep your information while your account is open. When you delete your account, we delete your profile and app data within 30 days.

We keep transaction and identity verification records for the period required by Malawian financial and anti-money-laundering regulations after your account is closed, then delete them. Support messages are kept for as long as needed to resolve the matter and handle any follow-up.

Under the Data Protection Act, 2024, you can ask us to:

• Tell you what personal information we hold about you and give you a copy.
• Correct information that is wrong or incomplete.
• Delete your information, subject to what we must keep by law. See Delete your account.
• Restrict or object to how we use it, or withdraw consent you gave.
• Move your information to another provider where this applies.

Contact us using the details below. We may need to confirm your identity first, and we will reply within the time the law allows. If you are unhappy with our answer, you can complain to the Malawi Communications Regulatory Authority (MACRA), the data protection authority.

Ziki is for people aged 18 and over. We do not knowingly open accounts for children.

We may update this policy. We will change the date at the top and, for significant changes, tell you in the app or by email before they take effect.

Email [email protected], call +265 99 579 9348 or write to Ziki Wealth Limited, Area 25 C, Sector 1, EML Complex, First Floor, Lilongwe, Malawi.