Privacy Policy

IRYX is operated by IRYX LTD, a private company limited by shares registered in Nigeria with the Corporate Affairs Commission under registration number RC 9779602. Our registered office is No. 5 Dada Street, Bosso LGA, Minna, Niger State, Nigeria.

For anything in this policy, including a request to access or delete your data, write to info@getiryx.com.

When you use IRYX, we hold:

• Your WhatsApp phone number. This is how we identify your account. We do not ask for a separate username or password.
• Your name, as you give it during setup.
• Your transaction PIN, stored only as a bcrypt hash. We cannot read it, we never write it to our logs, and it is never sent to the AI that reads your messages.
• Your transactions, including amounts, recipients, dates and any note you attach.
• Recipients you save, including account name, account number and bank.
• Your messages to IRYX, and voice notes you send, for as long as needed to act on them.

If you join the waitlist, we hold your email address and anything you write in the suggestions box, and nothing else.

Nigerian regulation requires identity verification before an account can hold or move money. When you provide your Bank Verification Number, we pass it directly to our licensed verification provider and use the result. IRYX does not store your BVN and does not write it to logs.

IRYX is built on services provided by other companies. Only what each one needs is shared with it.

• Our payments provider receives your name, BVN, account details and transaction instructions, so that money can actually move and so that your identity can be verified. They are licensed in Nigeria.
• Meta (WhatsApp) carries the messages between you and IRYX, under their own terms.
• Our AI provider receives the text of your messages so IRYX can work out what you are asking for. Your PIN is never included. When you are being asked for your PIN, nothing you send is passed to the AI at all.
• Our speech provider receives voice notes you send, in order to transcribe them.
• Our email provider receives your email address if you are on the waitlist.

We do not sell your data, and we do not share it for advertising.

Some of the providers above operate outside Nigeria, including in the United States and Europe, so your data is processed abroad. We share only what each provider needs to do its job. If you would rather not have your messages processed this way, IRYX is not able to work for you, and we would rather say so plainly than bury it.

Transaction records are kept for as long as Nigerian financial record-keeping rules require, which is currently a minimum of five years, and we keep them even if you close your account because we are obliged to. Conversation history and saved recipients are deleted when you close your account. Waitlist emails are deleted when you ask, or when the waitlist ends.

Under the Nigeria Data Protection Act 2023 you can ask us for a copy of your data, ask us to correct it, ask us to delete it where we are not required to keep it, and object to how we use it. Write to info@getiryx.com and we will respond within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.

Your PIN is hashed, never stored in readable form, and required for every transfer. Traffic between you and our servers is encrypted. Access to production data is limited and logged.

IRYX will never ask for your PIN except when you are confirming a transfer you started. Nobody from IRYX will ask for it by phone, by email, or in a chat. If someone does, they are not us.

If we change this policy we will update the date at the top of this page, and we will tell you in WhatsApp if the change affects how your data is used.