1. Who We Are
Aditus Pay is a product of MeerTech Ltd, a Nigerian company (meertech.tech). In this policy, "we", "our" and "us" mean MeerTech Ltd. MeerTech Ltd decides why and how your personal information is used in your Aditus Pay account, so under Nigerian data protection law (the NDPR and the Nigeria Data Protection Act 2023) we are the data controller for your account, your wallet and your purchases.
This policy explains, in plain words, what information we collect, why we need it, how we keep it safe, and who we share it with, when you use the Aditus Pay app or website.
Mini-grid and meter companies that connect to Aditus Pay sell electricity to you through it. They are our customers. They do not own Aditus Pay and they do not own your Aditus Pay account. They keep their own records about their own staff and about the meters they run.
2. Information We Collect
Account Information
When you open an account, we collect your name, your phone number, your email address if you give us one, and the password you choose. We never store your password or PIN in a form anyone can read. If you turn on two-step sign-in, we keep the secret it needs, locked with encryption.
Meter and Purchase Records
We keep a record of the money you put in your wallet and the electricity you buy: the amounts, the meter numbers, the dates and times, the tokens, how you paid, and the receipts. If you save a meter, we keep its number, the nickname you give it, and the name of the meter holder that the meter company shows us for that meter. You can buy electricity for someone else's meter. In that case we keep that meter number and the holder's name in your records.
Checking a Meter Before You Pay
When anyone with an Aditus Pay account types a meter number to buy electricity for it, we show them the full name that the meter company has for that meter, so they can be sure they are paying for the right meter. A token cannot be moved to another meter once it is bought, so this check matters. We show the name only. We never show the address, the phone number or the purchases of the person whose meter it is.
To stop people using this to look up many meters, we limit how many new meter numbers one account can check, and we keep a record of which account checked which meter and when. That record does not contain the name, and we keep it for 2 years.
If the meter is yours and you do not want your name shown, write to support@pay.aditusos.com or ask your meter company. We will stop showing your name, and people paying for your meter will need to check the meter number with you.
Identity Verification (BVN and NIN)
You can choose to verify your identity with your Bank Verification Number (BVN) or National Identification Number (NIN). This is optional. It raises the amount you can hold and spend. We send the number once, to an identity verification provider, so it can check the number against your name. We do not keep your full BVN or NIN. We keep only the result (verified or not), the date, and a reference code from the provider as proof that the check was done. The law on money laundering requires us to keep that proof.
If you ask for a permanent bank account number for your wallet, we send your BVN to our payment provider, Flutterwave, to open it. We keep only the last four digits and a scrambled fingerprint of the number, so we can stop the same BVN being used twice.
Notification Tokens and Device Information
If you allow notifications, your phone gives us a push notification token. It is a code that lets us send a message to your phone, such as "your token is ready". We keep it with the type of phone system (Android or iPhone) and the last time it was used. We also keep a random identifier created when you install the app. We use it to keep your sign-in secure, and to let you sign out of every phone. You can refuse notifications in your phone settings and still use the app.
Our servers also keep short technical records, such as the time of a request and the internet address it came from, to find fraud and fix faults.
What We Do Not Collect
The Aditus Pay app does not use advertising, analytics or crash reporting tools. We do not collect which screens you open, we do not collect your phone model, and we do not collect your location, your contacts, your photos, or your text messages. The app asks only for permission to show notifications. You type your card details on the payment provider's page, so we never see them.
Information Kept on Your Phone
Your sign-in, your PIN and your lock settings are kept on your phone in its protected storage. Queued purchases and saved balances are kept on your phone in an encrypted store, so the app can work when the network is weak. When you check a meter, the app keeps the meter holder's name on your phone for quick display: at most 30 names on the phone app and 8 on the website, each for up to 90 days. They are erased when you sign out.
3. How We Use Your Information
We use your information to:
- Complete your electricity purchases and wallet payments
- Confirm who you are and stop fraud
- Send you confirmations, notifications and your tokens
- Help you when you contact our support team
- Keep the money records that Nigerian law requires
- Follow the law in Nigeria
We send you advertising messages only if you agree to it separately. You can say no and still use Aditus Pay.
4. Information Sharing
We never sell your personal information. We share it only with the companies below, and each one gets only what it needs to do its part.
- The meter company and the mini-grid company that serves your meter (and the metering system it uses): your meter number and the amount you are buying, so their system can create your token. The mini-grid company can also see your name, your phone number and what you bought for its meters, so it can match its sales and help you if something goes wrong. It sees nothing about purchases for other companies' meters.
- Our payment provider (Flutterwave): your name and email address, and the details needed to take your payment, when you put money in your wallet. Card details go straight to the payment provider's page.
- The identity verification provider: your BVN or NIN and your name, only if you choose to verify your identity.
- Our email service provider: your email address and the message, to deliver sign-in codes and receipts by email.
- Expo (push notifications and app updates): your push notification token and the message, to deliver notifications to your phone. The app also asks Expo's servers for app updates, so Expo sees the internet address of your phone when it does.
- Our hosting companies: DigitalOcean runs our servers and database. Vercel delivers the Aditus Pay website at app.pay.aditusos.com. They store and carry data for us and do not use it for their own purposes.
- The police or courts: only when the law or a court order requires it
5. Data Held Outside Nigeria
Some of the companies above, including our hosting companies, may keep or handle your data outside Nigeria. We send only what is needed, and we protect it with the measures in the next section.
6. Data Security
We protect your information by scrambling it (encryption) while it travels over the internet and while it is stored. Passwords are stored only in scrambled form that cannot be turned back into the password. Each power company's own records are kept in a separate, walled-off section of our database, and a mini-grid company sees only the customers who bought for its meters. Only you can open your account, with your own login. In the app you can also lock it with a PIN or your fingerprint, and turn on two-step sign-in.
7. Data Retention
We keep your account details while your account is open. Records of money that moved (top-ups, electricity purchases, tokens, refunds and wallet movements) must be kept for at least 5 years, because Nigerian financial and tax law requires it.
When you delete your account, we erase your name, email address, phone number, password, PIN, two-step sign-in, saved meters, push notification tokens, notifications and sign-in codes straight away. We keep the money records and the proof that your identity was checked, but they no longer carry your name, email or phone number. Backup copies of our database are replaced on a rolling basis, so a deleted detail can remain in an old backup for a short time and is not restored into your account. Read the full details on our Delete Your Account page.
8. Your Rights
You have the right to:
- Get a copy of the personal information we hold about you (in the app under Security, or on the website at app.pay.aditusos.com/account/privacy)
- Ask us to correct anything that is wrong
- Ask us to delete your account and your personal information. See how to delete your account, which works even if you no longer have the app
- Take back your agreement to any optional use of your information, such as advertising messages, without losing your account
- Complain to the Nigeria Data Protection Commission if you are not happy with how we handled your information
To use any of these rights, contact us at support@pay.aditusos.com. We answer within 30 days.
9. Cookies
Our website uses only the small files (cookies) and browser storage it needs to remember your settings, such as light or dark mode, and keep you signed in. We do not use cookies that track you for advertising.
10. Children's Privacy
The Service is not meant for anyone under 18. We do not knowingly collect information from children. If we find out that a child has given us personal information, we will delete it.
11. Changes to This Policy
We may change this policy from time to time. When we do, we will post the new version on this page with a new date. If the change is important, we will also tell you by email or a notice in the app.
12. Contact
If you have questions about this policy or about how we handle your information, contact MeerTech Ltd, the maker of Aditus Pay:
Email: support@pay.aditusos.com
Phone: +234 814 342 3808
Address: Abuja, Nigeria