Privacy Policy.

At Sovia Technologies ("Sovia", "we", "our", or "us"), we take your privacy and financial data protection seriously. This Privacy Policy outlines how we collect, handle, process, and safeguard your information when you download or use the Sovia mobile application, visit our web portal at soviaapp.com, or access our digital utilities, virtual accounts, dealer tools, AI services, and reward platforms.

1. Prominent Disclosures of Sensitive Permissions (Google Play Policy)

To deliver core digital utility services, protect against financial fraud, and ensure transaction integrity, the Sovia application requests the following Android runtime permissions. We adhere strictly to the Google Play Developer Policy and prominent in-app disclosure requirements:

• Contacts (READ_CONTACTS): When using utility recharge features (transferring airtime or data bundles to friends and family), Sovia requests permission to access your device's contacts list. This access is strictly local and ephemeral. Contact information is accessed exclusively to allow you to easily select a recipient phone number without manual typing. Your contacts are never uploaded, shared, harvested, or stored on our servers or with any third party.

• Microphone & Voice Input (RECORD_AUDIO): The application requests microphone access solely to enable optional voice commands for the Sovia AI Assistant, voice support inquiries, and natural language search. Audio input is streamed in real time for immediate speech-to-text conversion and is never recorded, monitored, archived, or listened to in the background.

• Camera & Media Files (CAMERA / READ_MEDIA_IMAGES): The app uses the device camera to scan payment QR codes and accesses device storage solely to allow you to upload screenshot proofs of completed campaigns/tasks in the Promote Hub, or to attach images for customer support inquiries. Files are transmitted over encrypted TLS channels and used strictly for verification.

• Biometric Verification (USE_BIOMETRIC / USE_FINGERPRINT): For maximum account safety, Sovia integrates native Fingerprint and Face ID authentication to unlock the application and authorize high-value wallet transactions. Biometric verification is handled entirely by your device's hardware Secure Enclave; Sovia never accesses, collects, or stores raw biometric samples.

• Offline SMS Mesh (SEND_SMS Intent): For our optional Offline Purchase Vault, the application enables you to format transactional SMS instructions to our dedicated gateway when you have 0.0 MB mobile data. The app does not request background SMS permissions, does not read your inbox, and never sends text messages automatically without your explicit manual tap in your phone's default SMS app.

• Device Integrity & Root Detection: To prevent multi-account referral fraud and protect financial balances, we perform cryptographic checks on device integrity, unique hardware IDs, and emulator parameters to ensure Sovia runs in an untampered environment.

2. Information We Collect

We collect only the minimum required information to provide safe financial and telecom utility services:

• Account Details: Full name, verified mobile phone number, email address, and encrypted 4-digit Transaction PIN.

• Financial & Wallet Ledgers: Wallet balance history, dedicated virtual bank account details (provisioned by licensed partners, including Monnify), and detailed order logs (airtime, data, electricity tokens, cable TV, and exam PINs).

• Support & Task Verification: In-app chat messages with our support team and voluntarily uploaded campaign screenshots.

3. How We Use Your Data

Your data is processed strictly for legitimate operational and compliance purposes:

• To fulfill instant telecom top-ups across MTN, Airtel, Glo, and 9Mobile networks.

• To manage dedicated virtual account funding, wallet balances, and instant bank withdrawals.

• To provide context-aware assistance via the Sovia AI Assistant.

• To deliver real-time push alerts and transaction receipts via Firebase Cloud Messaging.

• To prevent fraudulent activities and maintain financial ledger consistency.

4. Information Sharing & Third Parties

We never sell, monetize, or rent your personal data. Data is shared only with licensed infrastructure partners necessary to fulfill your orders:

• Payment & Banking Partners (e.g., Monnify): To provision virtual accounts and execute instant bank transfers.

• Telecommunications Networks: Direct aggregators and telco switches to deliver airtime, SME data, and cable/power tokens.

• Cloud Infrastructure: Enterprise cloud storage and databases hosted securely on Supabase and Google Cloud Firebase.

5. NDPR / NDPA Compliance & Your Rights

Sovia complies with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA, 2023). Under Nigerian data privacy law, you have the right to:

• Request access to the personal data we hold about you.

• Request immediate rectification of inaccurate or outdated information.

• Object to or restrict the processing of your personal information.

• Request the complete, permanent erasure of your account and personal records.

6. Account & Data Deletion (Google Play Compliance)

In strict compliance with Google Play's Account Deletion Policy, users have the absolute right to delete their account and all associated personal data at any time. You can initiate account deletion through two easy methods:

Method 1 (In-App): Navigate to Profile > Account Settings > Security > Delete Account inside the Sovia mobile app and confirm your 4-digit PIN.

Method 2 (Email Request): Send an email from your registered address to support@soviaapp.com with the subject line "Account Deletion Request".

Upon verification, your account, credentials, and non-regulatory transaction records will be permanently purged from our active databases within 30 days.