Privacy Policy

1. What we collect

To create and run your account, we collect:

• Your name, email address, and phone number, given at signup
• Your bank name, account number, and the account name returned by your bank when you verify an account, used to confirm your identity and to pay out referral earnings
• Transaction records: deposits, purchases, referral activity, and premium membership status
• Basic technical data such as IP address, used for security purposes like rate-limiting and detecting suspicious login activity

We do not ask for or store your card number, bank PIN, or one-time passwords. Card payments are handled entirely by Flutterwave, we never see or store your card details.

2. How we use it

• To create, secure, and operate your account and wallet
• To verify your identity and prevent one person from creating multiple accounts to abuse the referral program
• To process deposits and purchases through our payment and airtime/data providers
• To pay out referral earnings to the correct, verified bank account
• To respond to support requests and investigate account security issues

3. Who we share it with

We share only what's necessary, with:

• Flutterwave, to process card/bank payments and to verify bank account names
• VTPass, to fulfil airtime, data, cable TV, and electricity purchases
• Law enforcement or regulators, only where we are legally required to

We never sell your personal information to advertisers or other third parties.

4. How we protect it

Passwords and transaction PINs are stored as one-way hashes, never as plain text. Bank details are only ever sent to Flutterwave over encrypted connections for verification. We log security-relevant account activity (password changes, PIN changes, logging out of other devices) so you can review it in Settings.

5. Your choices

• You can update your nickname and password at any time from Settings
• You can log out of every other device from Settings if you suspect unauthorized access
• You can contact us to ask what data we hold about you, or to request account closure

Note that your legal name, once verified through a bank account, cannot be changed to an unrelated identity, this is a safety measure to protect your referral earnings, not a data restriction we can lift on request.

6. Data retention

We keep transaction and identity-verification records for as long as your account is active, and for a reasonable period after closure to meet financial record-keeping and fraud-prevention obligations.

7. Changes to this policy

We may update this Privacy Policy from time to time. Continued use of the platform after a change means you accept the updated policy.

8. Contact

Questions about this policy, or requests about your data, can be sent to support@topupbaba.com.