Privacy Policy — Olvra Boost

🔐 Our promise

Olvra Boost ("we", "us") respects your privacy and handles personal data in line with the Nigeria Data Protection Act 2023 and related regulations. This policy explains what we collect, why, who we share it with, and the choices you have. Operator: Testimony Inaweoghena Jacob, Nigeria — olvraboost@outlook.com.

📋 What we collect

Data	Why we need it
Account details — name, email, phone number, password (handled by our sign-in provider; we never see it in plain text), Transaction PIN (stored only as a one-way hash)	To create and secure your account, verify your email and authorise spending.
Wallet & payment records — funding amounts, references, wallet balance, Olives, transaction history. Card details are entered with our payment processor and are not stored by us. Where you create a permanent funding account number, the processor may collect identity-verification details.	To credit your wallet, prevent fraud, provide receipts and meet accounting duties.
Order data — services ordered, links, usernames, comments, hashtags or other details you submit, quantities, delivery status and progress	To fulfil your orders with our providers and show you their status.
Numbers & email data — numbers or temporary addresses rented, and the verification messages received on them	To deliver codes to you and process refunds.
Support messages — what you send us, including any screenshot you attach	To answer your request.
Technical data — device/browser type, theme preference, and information stored on your device (local storage, caches) to make the app faster	To run, secure and improve the app.
Referral data — who referred whom, and Olives earned	To run the referral programme.

🎯 How we use your data

To provide the service: run your account, process payments, place and track orders, deliver codes and send refunds.
To keep things safe: detect fraud, abuse and chargebacks, and enforce our Terms.
To communicate with you: verification and security emails, order and wallet notifications, support replies, and service announcements. You can opt out of marketing messages at any time; we will still send essential account and transaction messages.
To improve Olvra Boost, and to comply with legal obligations.
Our legal bases are: performing our contract with you, our legitimate interests (security, fraud prevention, improving the service), compliance with law, and your consent where we ask for it.

🤝 Who we share it with

We do not sell your personal data. We share only what is needed, with service providers acting on our behalf:

Google Firebase — sign-in, account records, wallet, orders and notifications.
Supabase — hosts our services catalogue (service names and prices; no personal data).
Flutterwave — payment processing and funding accounts.
Netlify — website hosting and server functions.
Boost fulfilment partner — receives the link/username and order details needed to deliver your order.
Number and email providers (5sim and Mail.tm) — receive the request needed to supply a number or temporary address and relay the verification messages.
Email delivery services — to send you verification, security and support emails.

Some of these providers process data outside Nigeria. Where that happens we rely on providers that apply appropriate safeguards. We may also disclose information if required by law, a court order or a regulator, or to protect our rights, users and the public from fraud or harm.

🧑‍⚖️ Your rights

Ask for a copy of the personal data we hold about you, and ask us to correct anything inaccurate.
Ask us to delete your data, restrict or object to certain processing, or withdraw consent you previously gave. We may need to keep some records (for example payment and order history) where the law requires it or to deal with fraud and disputes.
Complain to the Nigeria Data Protection Commission if you believe your data has been mishandled.
To exercise any right, email olvraboost@outlook.com from your registered email address. We will respond within a reasonable time.

🛡️ Security

We use industry-standard protections: encrypted connections (HTTPS), access controls on our systems, hashed Transaction PINs, and server-side checks on every wallet and order operation. No system is perfectly secure, so please use a strong, unique password, never share your PIN, and tell us at once if you notice anything suspicious. If a breach affecting your personal data occurs, we will notify you and the regulator as the law requires.

🗄️ Retention

We keep your data for as long as your account is active and as long as needed afterwards for legal, accounting, fraud-prevention and dispute purposes. Temporary email accounts and their messages are deleted shortly after they expire. When data is no longer needed we delete or anonymise it.

🍪 Cookies & local storage

Olvra Boost does not use advertising or cross-site tracking cookies. We use your browser's local storage and a service worker to keep you signed in, remember your theme, and cache the service list so pages load quickly. You can clear this at any time in your browser settings; the app will simply be a little slower the next time you visit.

👶 Children & changes

Olvra Boost is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it. We may update this policy; material changes will be announced in the app or by email.