Security

nxtPay moves money and extends credit, so security is designed into the data layer, not bolted on.

How we protect people and money

• Rules live in the database. Every table has row-level security; money-moving functions can only be called by the server, never directly by an app.
• Signed agreements. Each pay-in-4 plan is signed with the shopper's nxtPay PIN (hashed; 5 wrong tries lock it) and stored as an unchangeable agreement with the plan, terms version and device.
• Outcomes verified at the source. Payment callbacks are hints; results come from the provider's status API, settled exactly once.
• Proof of delivery. A one-time hand-over code only the shopper can see.
• Private documents and photos. ID documents, business documents and profile photos are kept in private storage, opened only through short-lived links.
• App lock. Shoppers can lock the app with their fingerprint or Face ID.
• Least privilege. Merchants see only their shop; shoppers only their own orders and tickets; staff need two-step sign-in and admin actions are logged.

Data protection

We process personal data in line with Uganda's Data Protection and Privacy Act, 2019. See the privacy notice.

Report a vulnerability

Found a security issue? Email business@nxtlaunch.tech with "Security report" in the subject. Please don't access other people's data or disrupt the service while testing. We'll acknowledge within 3 working days.