Privacy Policy

1. Introduction

Welcome to Abujasub Data ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our mobile application on Android and iOS devices.

By installing, accessing, or using the Abujasub Data application, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the application.

2. Information We Collect

We collect several types of information to provide, secure, and improve our Virtual Top-Up (VTU) and digital payment services:

A. Personal Information You Provide

• Account Credentials: Full name, email address, phone number, and username created during account registration.
• Transaction & Beneficiary Details: Phone numbers, meter numbers, smartcard/decoder numbers, and purchase details entered to complete VTU airtime, mobile data, cable TV, and utility bill top-ups.
• Authentication Identifiers: OAuth tokens provided when signing in via Google Sign-In or Sign in with Apple.

B. Automatically Collected Information

• Device Information: Device model, operating system version (Android/iOS), unique device identifiers, network state, and app version.
• Log & Usage Data: IP address, access dates/times, error logs, and app interaction data for system performance monitoring.
• Push Notification Tokens: Unique device registration tokens generated by Google Firebase Cloud Messaging (FCM) to deliver transaction alerts and important app updates.

C. On-Device Biometric Data (Security Feature)

• Local Authentication: If you enable Biometric Lock (Fingerprint / Face ID / Touch ID) in the app, authentication is handled entirely by your device’s local operating system (local_auth). We do NOT collect, access, transmit, or store your biometric data on any external servers.

3. How We Use Your Information

We use the collected information for the following legitimate business purposes:

1. Service Delivery: Processing VTU transactions, airtime top-ups, data bundle purchases, and utility bill payments.
2. Account Management: Creating and managing user accounts, verifying user identity, and handling secure sign-ins.
3. Transaction Notifications: Sending real-time push notifications regarding transaction status, wallet top-ups, and security alerts.
4. Security & Fraud Prevention: Detecting, preventing, and addressing fraudulent activities, unauthorized access, and system abuse.
5. Customer Support: Responding to inquiries, resolving transaction failures, and offering technical support.
6. Legal & Compliance: Complying with legal obligations, financial regulations, and law enforcement requests under applicable laws (e.g., Nigeria Data Protection Regulation - NDPR, GDPR).

4. Third-Party Services & Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share necessary data with trusted third-party service providers solely to facilitate our app's core operations:

• Backend & Database Infrastructure: Supabase (for secure user database, authentication, and encrypted data storage).
• Push Notifications & Analytics: Google Firebase Cloud Messaging (FCM) (for sending real-time alerts).
• Third-Party Authentication Providers: Google Sign-In and Apple Inc. (Sign in with Apple) for single sign-on services.
• VTU & Telecom Gateways: Licensed telecommunication providers and payment aggregator gateways necessary to fulfill your requested airtime, data, and bill payment services.

All third-party partners are required by contract and law to maintain the confidentiality and security of your data.

5. Data Security

We employ industry-standard administrative, technical, and physical security measures to protect your personal data, including:

• Encryption in Transit: All network communications between the mobile app and our servers use HTTPS with TLS (Transport Layer Security) encryption.
• Secure Storage: Sensitive local data (e.g., authorization tokens) is encrypted using OS-level secure storage (EncryptedSharedPreferences on Android, Keychain on iOS).
• Access Control: Restricted backend access limited strictly to authorized personnel and automated systems.

While we take every reasonable precaution to protect your data, no method of transmission over the Internet or electronic storage is 100% secure.

6. Data Retention and Account Deletion

A. Data Retention

We retain your personal data for as long as your account remains active or as needed to provide you with services. Transaction histories are retained in accordance with financial record-keeping requirements and legal compliance.

B. Account & Data Deletion Request (Google Play & Apple App Store Requirement)

You have the right to request the deletion of your account and associated personal data at any time.

• In-App Account Deletion: You can request account deletion directly within the Abujasub Data app by navigating to Profile / Settings > Delete Account.
• Email Request: Alternatively, you can send an account deletion request to support@abujasubdata.com with the subject line "Account Deletion Request" and your registered phone number/email.

Upon verification of your request, your personal account details will be permanently deleted or anonymized within 30 days, except where retention is legally required for audit or fraud prevention purposes.

7. Children's Privacy

Abujasub Data is designed for general audiences and is not intended for use by children under the age of 13 (or 18 where required for financial transactions without parental guidance). We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to remove such information.

8. Your Rights & Choices

Depending on your jurisdiction (including NDPR, GDPR, and CCPA guidelines), you hold the following data rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate personal details via your in-app profile.
• Deletion: Request the erasure of your personal data as outlined in Section 6.
• Notification Preferences: Opt-out or disable push notifications at any time through your Android or iOS device settings.

9. Platform-Specific Disclosures

Android (Google Play Store Compliance)

• This app requests permissions only when necessary for core functionality (e.g., Internet access, Biometrics, Notifications).
• We strictly adhere to the Google Play Developer Data Safety policy requirements.

iOS (Apple App Store Compliance)

• App Tracking Transparency (ATT): We do not track users across third-party apps or websites for targeted advertising.
• Data Linked to You: Financial and contact data (phone number, transaction history) collected is linked to your account solely for service functionality.

10. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Any modifications will be posted in the app and updated with a new "Last Updated" date at the top of this document. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us at:

• Company Name: Abujasub Data
• Email: support@abujasubdata.com
• App Name: Abujasub Data (com.abujasub.data)
• Address: Abuja, FCT, Nigeria