PRIVACY
POLICY

1. Information We Collect

When you create an account and use Numoie, we collect the following categories of data:

• Account Data: Name, email address, country, and hashed password at registration. If you sign in with Google, we receive your name, email, and Google profile ID — never your password.
• Transaction Data: Records of wallet top-ups, virtual number purchases, and temporary email sessions, including timestamps and amounts in USD.
• Device & Session Data: IP address, browser type, device model, and session timestamps for security and abuse prevention. We never use this for advertising.
• Support Communications: Messages and emails you send to our support team.

What we never collect: The content of SMS messages beyond displaying them to you. Your real personal phone number. Payment card numbers (handled entirely by Paystack).

2. How We Use Your Data

Your data is used exclusively to:

• Provide, operate, and improve the Numoie service
• Process payments and maintain wallet balances via Paystack
• Send transactional notifications (SMS received, number expiring, wallet top-up confirmed)
• Detect, investigate, and prevent fraud and unauthorized access
• Respond to your support requests
• Comply with applicable Nigerian and international legal obligations

We do NOT sell, rent, or share your personal data with advertisers, data brokers, or third-party marketers.

3. Data Retention

We retain your account data for as long as your account is active. SMS message content is automatically deleted when the number expires (20 minutes). Temporary email messages are cleared after session expiry (60 minutes). Transaction and wallet records are retained for 3 years for financial compliance. You may request deletion at any time.

4. Third-Party Services

Numoie integrates with the following services, each governed by their own privacy policies:

• Payment Gateways — Payment processing.
• SMS providers — Virtual number provisioning API
• Mail providers — Temporary email generation API
• Firebase (Google) — Push notification delivery. See firebase.google.com/support/privacy
• Google OAuth — Optional Google Sign-In. See policies.google.com/privacy

5. Cookies & Local Storage

Numoie uses session cookies for authentication and localStorage for user preferences such as your chosen app theme (dark/light mode). We do not use tracking cookies, advertising cookies, or third-party analytics. Disabling cookies will prevent you from staying logged in.

6. Data Security

We implement industry-standard security measures: bcrypt password hashing (cost factor 12), HTTPS-only connections with HSTS, server-side session tokens, rate limiting on all auth endpoints, and Two-Factor Authentication (2FA) available to all users. No electronic transmission is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Under applicable data protection laws you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your account and all associated data
• Object to certain processing activities
• Portability of your transaction history in CSV format

To exercise any of these rights, contact privacy@numoie.com.

8. Children’s Privacy

Numoie is not directed at anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us personal data, please contact us immediately at privacy@numoie.com.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email and an in-app notification at least 7 days before they take effect. Your continued use of Numoie after the effective date constitutes acceptance.

10. Contact

For all privacy-related questions or requests:
Email: privacy@numoie.com
Numoie Technologies.