Privacy Policy

1. Introduction

Welcome to VTULab ("we," "our," or "us"). We provide mobile and web virtual top-up (VTU) utilities, telecom airtime/data recharges, utility bill payments, cable TV subscriptions, and fintech payment solutions.

Your privacy is paramount. This Privacy Policy details how we collect, use, store, and safeguard your personal information when you access or use the VTULab mobile application (available on Google Play Store) and our web platform at https://vtulab.com.

By using our application or services, you agree to the collection and handling of your data as described in this policy. If you do not agree with this policy, please discontinue using VTULab immediately.

2. Information We Collect

To provide secure, fast, and reliable transaction processing and to comply with financial obligations, we collect the following types of information:

• Account Information: Your full name, email address, phone number, and account access credentials.
• Identity & Regulatory Information (KYC): National Identification Number (NIN) or Bank Verification Number (BVN) where strictly required by Central Bank and financial anti-fraud regulations.
• Transaction & Order Details: Wallet balances, funding records, payment transaction references, recipient phone numbers for airtime/data top-ups, smartcard/IUC numbers for cable TV, and electricity meter numbers.
• Device & Technical Identifiers: Device model, operating system version, unique device identifiers (Android ID, Advertising ID), IP address, app version, and crash diagnostic logs to optimize performance and prevent fraudulent usage.

3. How We Use Your Information

We process your personal information for lawful and transparent business purposes, including:

• Fulfilling airtime, mobile data, cable television, and utility bill purchase orders.
• Managing your virtual wallet, processing funding deposits, and reconciling transaction status.
• Delivering transactional receipts, automated notifications, and critical security alerts.
• Preventing, detecting, and mitigating unauthorized activities, account takeover, and fraud.
• Delivering responsive customer service via email, in-app support, or live channels.
• Complying with applicable laws, financial regulations, and legal processes.

4. Advertising & Google AdMob

To support free and low-cost services, our mobile application may display advertisements served by Google AdMob (a service provided by Google LLC).

Google AdMob may use device identifiers (such as the Android Advertising ID), IP address, and cookie/app usage data to serve personalized or non-personalized advertisements within our mobile application.

• To learn how Google collects and processes data, please visit How Google uses information from sites or apps that use our services.
• You can review Google's overall Privacy Policy at Google Privacy & Terms.
• You can manage or opt out of personalized ads at any time via your device settings: Settings > Google > Ads > Reset or Delete advertising ID.

5. Data Sharing & Service Providers

We do not sell, rent, or trade your personal data to third parties. We only share necessary transaction data with trusted partners required to process your requests:

• Telecommunication Carriers: MTN, Airtel, Glo, and 9mobile to deliver purchased airtime and data bundles.
• Licensed Payment Gateways: CBN-licensed payment providers (including Paymint, Monnify, and banking partners) to securely process card payments, bank transfers, and wallet top-ups.
• Utility & Biller Partners: Electricity distribution companies (DISCOs) and cable TV providers (DStv, GOtv, Startimes) to validate customer accounts and credit units.
• Google Play Services: Core infrastructure for Android application distribution, push notifications, and crash diagnostics.
• Law Enforcement & Regulators: When legally compelled by court subpoena, anti-money laundering (AML) laws, or government authorities.

6. Data Security

We implement industry-grade security controls to protect your data. All communication between our apps, servers, and payment gateways is encrypted using HTTPS / TLS 1.3. User passwords and transaction PINs are securely hashed using cryptographic standards and are never stored in plain text.

7. Account & Data Deletion

You retain full control over your personal data and have the right to request deletion of your account and associated personal information at any time.

How to request account deletion:

• In-App Deletion: Log into the VTULab app, go to Settings > Profile > Delete Account, and confirm your request.
• Via Email: Send an email from your registered email address to [email protected] with the subject line Account Deletion Request.

Retention Policy:

• Purged Data: Your name, phone number, login credentials, saved preferences, and authentication tokens are completely deleted within 7 business days following confirmation.
• Retained Records: Financial audit laws and anti-fraud regulations require us to preserve completed transaction receipts and financial ledger records for statutory audit periods.

8. Children's Privacy

Our services and application are not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will immediately take steps to remove such information.

9. Contact Information

If you have questions, inquiries, or feedback regarding this Privacy Policy, please contact our privacy and support team: