Privacy Policy

When you create an account or use NetPlug, we collect the following categories of information to provide and improve our services:

Your personal data is used strictly for the following purposes:

• Process and fulfil data, airtime, and bill payment transactions instantly
• Create and manage your NetPlug account and wallet
• Send transaction receipts, OTPs, and service alerts via SMS and email
• Detect and prevent fraudulent transactions and unauthorized account access
• Comply with regulatory requirements including KYC (Know Your Customer) obligations
• Improve app performance, fix bugs, and enhance user experience
• Respond to your support requests and complaints
• Send optional promotional offers and updates (you can opt out at any time)
• Generate anonymized, aggregated analytics to understand usage patterns

We do not sell your personal data. We may share your data only with the following categories of parties, and strictly for operational purposes:

• All data is stored on secure servers hosted within Google Cloud infrastructure
• Data is encrypted in transit using TLS 1.2+ (HTTPS) and encrypted at rest using AES-256
• Passwords are hashed using bcrypt; we never store plaintext passwords
• Payment card details are tokenized and handled exclusively by PCI-DSS-certified processors
• Access to your data is restricted to authorized personnel on a need-to-know basis
• We perform regular security audits and penetration tests
• Your data is retained for as long as your account is active or as required by Nigerian law (minimum 5 years for financial records per CBN guidelines)
• Upon account deletion, personal identifiers are removed within 30 days; transaction records required by law are anonymized and retained

The NetPlug Android app requests the following permissions. Each permission is used only for the stated purpose:

* "Dangerous" is Android's technical classification for permissions that access sensitive data — not a reflection of how we use them. You will be prompted to grant these individually and can revoke them at any time in your device settings.

Under the Nigeria Data Protection Regulation (NDPR) and applicable laws, you have the following rights over your personal data:

• Right to Access — Request a copy of the personal data we hold about you
• Right to Rectification — Correct any inaccurate or incomplete data in your profile
• Right to Erasure — Request deletion of your account and associated personal data (subject to legal retention requirements)
• Right to Portability — Receive your data in a structured, machine-readable format
• Right to Object — Object to processing of your data for marketing purposes at any time
• Right to Withdraw Consent — Withdraw consent for any optional data processing without affecting past processing
• Right to Lodge a Complaint — File a complaint with the National Information Technology Development Agency (NITDA)

NetPlug is designed for individuals aged 18 years and older. Our services involve financial transactions and require a valid Nigerian bank account or BVN, which are only available to adults.

We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@netplug.com.ng and we will delete that information promptly.

Our website and app use the following types of tracking technologies:

• Essential cookies — Required for login sessions and security. Cannot be disabled.
• Functional cookies — Remember your preferences (e.g. saved beneficiaries, default network). Can be cleared in app settings.
• Analytics (Firebase) — Anonymized crash reports and usage statistics to improve the app. No personally identifiable information is sent.
• No advertising cookies — We do not use advertising or cross-site tracking cookies.

Our app may contain links to third-party websites or services. NetPlug is not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any data.

Third-party SDKs integrated into our app (such as Firebase and payment SDKs) operate under their own privacy policies. These have been reviewed to ensure they meet acceptable data protection standards. A full list is available on request.

We may update this Privacy Policy periodically to reflect changes in our practices, regulatory requirements, or new features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an in-app notification and/or email to registered users
• Where required by law, request your renewed consent before the changes take effect

Continued use of the NetPlug app after changes become effective constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to our Data Protection Officer: