Skip to content
MiHome

Legal

Privacy policy

Written to be read. If any part of this is unclear, that is our failure and we would like to know — tell us and we will rewrite it.

Last updated 9 August 2026

01Who we are

MiHome is a product of Miftah Capital, an early-stage company building a finance-readiness and matchmaking platform for ethical home financing in Nigeria and the diaspora. In this policy, "we" and "us" mean Miftah Capital.

For any question about your data, or to exercise any right described below, write to admin@mihome.finance. A person reads and replies to every message.

02What we collect, and when

We collect the least we can at each stage, and we tell you what a stage needs before you begin it. Nothing is collected silently.

  • Waitlist (closed): while we were pre-launch we collected a name, email address, phone number, country and which journey you were on. We no longer collect this, and those entries are never converted into accounts — but we still hold the ones already given, so they are described here.
  • Account creation: the above, plus a password, which is stored only as a cryptographic hash and can never be read back by us or anyone else.
  • Identity verification: date of birth, gender, nationality, residential address, identity document details and images, a selfie for the liveness check, next-of-kin details, and your BVN. Your NIN is optional.
  • Readiness assessment: employment and income details, banking details, bank statements, existing commitments, expenses, savings, and your property preferences.
  • Technical data: IP address, browser type, device information and pages visited — used for security and to understand which parts of the site are useful.

03Why we process it

Every category above is processed for a specific, stated purpose. We do not collect data speculatively in case it becomes useful later.

  • To create and secure your account, and to verify that you are who you say you are.
  • To assess your finance readiness and produce your score, plan and certificate. We do not make financing decisions — a partner does.
  • To meet legal obligations under Nigerian financial regulation, including KYC and anti-money-laundering requirements.
  • To communicate with you about your assessment, or — if you joined the waitlist before we opened — to tell you that we have.
  • To detect and prevent fraud, and to protect the security of the platform.

04Artificial intelligence, and its limits

We use AI to read your uploaded documents and produce your readiness score, the reasoning behind it, and the summary a finance partner would receive.

A person reviews anything the AI flags before it goes anywhere. And no financing decision is ever made by us or by a model — that decision belongs to a licensed finance partner. If you want to know how an assessment about you was reached, ask and we will tell you.

05Who we share it with

We do not sell your data. We do not share it with third parties for their own marketing. Ever.

We share it only where it is necessary to deliver the service or where the law requires it:

  • Service providers who host our infrastructure, store documents, send email, or provide AI document analysis — each bound by contract to process data only on our instructions.
  • Identity verification and credit reference providers, where you have consented to a check.
  • Regulators and law enforcement, where we are legally obliged to disclose.
  • A finance partner, once you are certified and have agreed to the introduction — they receive a clean summary, not your raw documents.
  • A property developer, but only what is necessary to progress a purchase you chose to pursue — never your financial details.

06How we protect it

Data is encrypted in transit and at rest. Documents are held in private, access-controlled storage and are reachable only through short-lived links issued to authorised staff. Access is limited to the people who need it to do their job, and every access to a document is logged.

No system is perfect, and we will not claim otherwise. If a breach ever affects your data, we will tell you and the relevant regulator promptly, and we will tell you what actually happened.

07How long we keep it

Waitlist details are kept until you ask us to remove them, or until we have told you the platform is open and there is nothing left to tell you.

Where you have completed a readiness assessment, Nigerian financial regulation requires records to be retained for a defined period after the relationship ends. We keep them for that period and no longer, then delete them.

If you never proceed, your assessment is retained only as long as needed to evidence what we did, and is then deleted.

08Your rights

Under the Nigeria Data Protection Regulation, and under the GDPR where you are in Europe or the United Kingdom, you have rights over your data. You can exercise any of them by writing to us.

  • Ask what we hold about you and receive a copy.
  • Correct anything inaccurate.
  • Ask us to delete your data, where no legal obligation requires us to keep it.
  • Withdraw a consent you previously gave — we will tell you plainly what withdrawing it affects.
  • Object to processing, or ask us to restrict it.
  • Receive your data in a portable format.
  • Complain to the Nigeria Data Protection Commission, or to your local supervisory authority.

09Cookies

We use the minimum necessary for the site to work — keeping you signed in between visits, for instance.

We do not use advertising cookies and we do not permit third parties to track you across other websites from here.

10Changes to this policy

If we change anything material, we will update the date at the top of this page and, where the change affects you meaningfully, tell you directly rather than relying on you to notice.