Hepay VTU App ("we", "our", or "us") operates as a Virtual Top-Up (VTU) service. This Privacy Policy explains what information we collect, how we use it, who we share it with, and how you can contact us about your data.
1. Information We Collect
When you use our app we may collect the following types of information:
- Personal information: name, phone number, email address, billing / payment details required to complete transactions.
- Account & transaction data: purchase history, transaction references, airtime/data bundles purchased, and related logs.
- Device & technical data: device model, operating system, IP address, mobile network operator, unique identifiers, and crash logs.
- Usage data: app interactions, preferences, and analytics for improving app performance.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and process VTU services (airtime, data, bill payments).
- To process payments and prevent fraud.
- To communicate with you about transactions, account activity, and service updates.
- To improve and personalize the app experience and troubleshoot issues.
- To comply with legal and regulatory obligations.
3. Legal Basis for Processing
Where applicable (for users in jurisdictions which require it), we process personal data on bases including:
- Performance of a contract (processing payment/transactions you request).
- Legitimate interests (fraud prevention, analytics, service improvement).
- Compliance with legal obligations (tax, regulatory reporting).
4. Sharing & Disclosure
We do not sell or rent your personal information. We may disclose information to:
- Service providers: payment processors, network operators, hosting providers, analytics and support partners who help deliver the service.
- Regulatory or law enforcement bodies: when required by law or to protect rights, property, or safety.
5. Data Security
We implement reasonable technical and organizational measures to protect data. However, no method of transmission or storage is 100% secure — if you suspect a security issue please contact us immediately.
6. Data Retention
We retain personal data for as long as necessary to fulfill the purposes described in this policy, to comply with legal obligations, and to resolve disputes. Transaction records may be kept for accounting and regulatory purposes.
7. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access and obtain a copy of your personal data.
- Request correction of inaccurate data.
- Request deletion or restriction of processing.
- Object to processing and withdraw consent where processing is based on consent.
8. Children’s Privacy
Our services are not directed to children under 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us to request deletion.
9. Third-Party Links & Services
The app may contain links to third-party services or use third-party SDKs (for payments, analytics, crash reporting). Those third parties have their own privacy policies and we encourage you to review them.
10. International Transfers
We may transfer data to locations outside your country for processing and storage. When we do, we take steps to ensure appropriate safeguards are in place.
11. Changes to This Privacy Policy
We may update this policy occasionally. When we do, we will publish the updated policy here and update the "Effective date" above. Significant changes may also be communicated via the app or email.
12. Contact Us
If you have questions, requests, or concerns about this Privacy Policy, contact us:
Note: This document is provided as a template and may need to be adjusted to reflect your app's exact data flows and any local legal requirements (for example, GDPR, CCPA, or Nigerian data protection regulations). Consult legal counsel if you need a legally bespoke policy.