Official Legal Policy

Privacy Policy

Application: BJ Data Sub (Package ID: com.bjdatasub.app)
Website: https://bjdatasub.com
Effective Date: January 1, 2024 | Last Updated: October 06, 2026

Summary: This Privacy Policy applies to the BJ Data Sub mobile application (distributed on the Google Play Store and iOS App Store) and the website at https://bjdatasub.com. We take your privacy very seriously. We do NOT sell your personal data. We only collect the minimal information necessary to deliver automated telecommunications data, airtime top-up, electricity tokens, cable TV subscriptions, and wallet management services.

1. Introduction & Entity Identification

BJ Data Sub ("we", "our", or "us") operates the website https://bjdatasub.com and the mobile application BJ Data Sub (Application ID: com.bjdatasub.app).

This Privacy Policy governs your use of our mobile application and web portal. By creating an account, accessing, or using BJ Data Sub, you acknowledge and agree to the practices outlined in this policy. If you do not agree with any part of this policy, please discontinue use of our application and services.

2. Information We Collect

To provide fast, automated VTU, utility bills payment, and secure wallet services, we collect the following categories of information:

A. Personal Information You Provide

Full Name: Collected during account registration to identify your account and personalize your service.
Email Address: Used for account authentication, password recovery, important security notices, and electronic transaction receipts.
Phone Number: Used as your primary account identifier, login credential, customer support communication, and delivery validation.
Authentication Credentials: Securely salted and hashed passwords and 4-digit Transaction Security PINs. We never store passwords or PINs in plain text.

B. Financial & Transaction Data

Transaction Records: Detailed logs of your purchases, including network provider (MTN, Airtel, Glo, 9mobile), data plan selected, destination phone number, amount paid, status, timestamp, and unique transaction reference codes.
Wallet & Deposit Logs: Virtual account transaction logs, Monnify / Paystack transaction session references, and bank deposit timestamps. (Note: We do NOT store your sensitive debit/credit card CVV or card PIN. All payment processing is handled through PCI-DSS certified payment processors).
Biller Identifiers: Electricity prepaid meter numbers, Cable TV IUC/Smartcard numbers, and examination candidate numbers provided by you solely to fulfill bill payment requests.

C. Device & Technical Information

Device Model & OS Version: Used to ensure application compatibility and optimize app layout.
IP Address & Connection Type: Logged strictly for security, rate-limiting, and fraud prevention purposes.
Crash Logs & Performance Diagnostics: Anonymous diagnostic telemetry to troubleshoot app crashes and improve stability.

D. Biometric Authentication Data (Fingerprint / Face ID)

If you enable biometric login or transaction authorization, all biometric matching is performed locally on your own device via Apple Touch ID / Face ID or Android BiometricPrompt APIs. BJ Data Sub servers never receive, process, or store your biometric data.

3. How We Use Your Information

We use the data collected strictly for legitimate business and operational purposes:

To process your automated data bundle top-ups, airtime recharges, and bill payments via licensed telecommunication and utility aggregators.
To manage and safeguard your prepaid in-app wallet balance.
To verify user identity and prevent unauthorized access, multi-accounting, fraud, or chargebacks.
To provide timely electronic transaction receipts and notifications.
To provide responsive 24/7 customer service and resolve dispute tickets.
To comply with statutory financial reporting and regulatory requirements under Nigerian law (including NDPR and Central Bank regulations).

4. Sharing & Disclosure of Information

We do not sell, rent, or trade your personal information to third parties or advertising networks. We only share necessary data with authorized service providers under strict data processing agreements:

Service Provider Type	Partner / Entity	Purpose
Telecommunication Aggregators	MTN, Airtel, Glo, 9mobile & authorized VTU gateways	Fulfilling airtime and internet data purchases to the destination number.
Utility & Cable Aggregators	DisCos (IKEDC, EKEDC, AEDC, etc.), MultiChoice, StarTimes	Validating meter/IUC numbers and vending prepaid electricity tokens.
Licensed Payment Processors	Monnify, Paystack, Providus Bank, Wema Bank	Generating automated dedicated virtual bank accounts for instant wallet funding.
Cloud Infrastructure	Secure cloud hosting providers	Encrypted database storage and backend API execution.

5. Data Security & Storage

We implement comprehensive technical and organizational security measures to protect your personal data:

Encryption in Transit: All data transmitted between the mobile application and our servers is secured using Transport Layer Security (TLS 1.3 / HTTPS) with 256-bit encryption.
Encrypted Credential Storage: Account passwords and 4-digit transaction PINs are stored using industry-standard irreversible one-way cryptographic hashing (Bcrypt).
Server Hardening: Firewalls, automated rate limiting, IP whitelisting, and continuous vulnerability scans protect our production infrastructure.

6. Data Retention Policy

We retain your personal information for as long as your account remains active and as required to provide you with our services. Financial transaction records (purchase histories, deposit references, and invoices) are retained for a minimum statutory period of six (6) years in compliance with financial record-keeping laws and anti-money laundering (AML) regulations in Nigeria. Once the retention period expires or upon a valid deletion request, data is securely permanently purged.

7. User Account & Data Deletion Policy (Google Play Compliant)

In full compliance with Google Play Developer Policies and data protection laws, BJ Data Sub guarantees users the right to request permanent deletion of their account and all associated personal data.

How to Request Account & Data Deletion:

Method 1 (Email Request): Send an email from your registered email address to support@bjdatasub.com with the subject line "Account & Data Deletion Request". Please include your registered phone number.
Method 2 (In-App Support): Navigate to Profile > Contact Support within the BJ Data Sub mobile app and submit an account closure ticket.
Method 3 (Web Contact): Visit our contact page at https://bjdatasub.com and submit a deletion request via our live support channel.

What happens upon deletion:
1. Your account will be deactivated immediately.
2. Your personal details (name, email, phone number, hashed password, security PIN) will be permanently deleted from our active databases within thirty (30) days.
3. Historical financial logs strictly required for regulatory compliance and tax audit purposes will be anonymized and archived in accordance with financial regulations.

8. Children's Privacy (COPPA Compliance)

Our services and mobile application are not intended for use by children under the age of thirteen (13), or minors under the legal age of majority in their jurisdiction. We do not knowingly collect or solicit personal identifiable information from children under 13.

If we discover that a child under 13 has provided us with personal information without parental consent, we will promptly delete such information from our servers. If you believe that a child has provided us with personal data, please contact us immediately at support@bjdatasub.com.

9. Your Data Rights (NDPR & GDPR)

Under the Nigeria Data Protection Regulation (NDPR) and international privacy frameworks, you have the following rights regarding your personal information:

Right to Access: You can request a summary copy of the personal information we hold about you.
Right to Rectification: You can update or correct incomplete or inaccurate profile information directly in the mobile app settings.
Right to Erasure: You can request that your personal information be deleted as detailed in Section 7.
Right to Restrict or Object: You can object to certain data processing activities, such as non-essential marketing emails.

10. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect changes in our operational practices, application features, or regulatory requirements. When revisions are made, the "Last Updated" date at the top of this document will be updated. We encourage you to review this page periodically to stay informed about how we are protecting your data.

11. Contact Information

If you have any questions, inquiries, complaints, or data deletion requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer:

Platform: BJ Data Sub
Official Website: https://bjdatasub.com
Support Email: support@bjdatasub.com
Alternative Email: uteach38@gmail.com
Address: Lagos, Nigeria