Great question, and it's the split we designed around intentionally.
MavaPay only touches the naira leg. The Bitcoin side stays fully client-side keys never leave the device, MavaPay never sees the wallet or the sats. They're handling fiat rails, not Bitcoin custody.
So user data on the Bitcoin side: zero.
On the naira side: whatever KYC the ramp requires, same as any bank transfer.