Effective date: 1 January 2026 · Last updated: 29 September 2026
Your privacy matters to us. This Privacy Policy explains how LUNTRA collects, uses, shares, protects, retains, and deletes personal and device data when you use our website, mobile application, and related services.
LUNTRA is a CAC-registered Nigerian digital payment and VTU platform that enables users to purchase airtime and data bundles, pay supported utility and service bills, fund supported betting wallets, purchase gift cards, and access other digital services. References to "we", "us", or "our" refer to LUNTRA.
This Privacy Policy applies to our website, our Android mobile application (the LUNTRA App), and related services that link to this policy.
For privacy enquiries or requests, contact us at info@luntra.com.ng or via WhatsApp.
Depending on the features you use, we collect information that is reasonably necessary to provide our services, secure accounts, process transactions, comply with applicable law, and support users.
| Data Type | What We Collect | Purpose |
|---|---|---|
| Account Information | First name, last name, email address, phone number, account identifiers, and securely hashed password | Account creation, authentication, account management, communication, and support |
| Transaction Data | Service purchased, amount, recipient or beneficiary details, transaction reference, timestamp, status, and outcome | To process services, maintain transaction history, issue receipts, investigate failed transactions, and resolve disputes |
| Wallet & Payment Data | Wallet funding amounts, payment references, payment status, and information received from our payment partners | To verify payments, fund wallets, prevent fraud, and reconcile transactions. We do not store full payment-card details |
| Cashback & Referrals | Bonus credits, cashback records, withdrawal history, referral codes, and referral activity | To calculate, track, and pay eligible rewards and prevent abuse |
| Identity / KYC Data | Identity information and government-issued identification or related verification information where required | Identity verification, fraud prevention, security, and legal or regulatory compliance |
| Technical & Security Data | IP address, device type, operating system, browser or app information, timestamps, security logs, and diagnostic information | Account security, fraud detection, troubleshooting, service reliability, and performance improvement |
| Support Communications | Information you provide when you contact customer support, including messages and details needed to investigate your request | To answer enquiries, resolve complaints, investigate transactions, and provide support |
Mobile app permissions: The LUNTRA App may request device permissions only when needed for a feature you choose to use. Where Android requires permission, you will be asked through the device permission system. You may manage eligible permissions through your device settings. We do not use device permissions to collect unrelated information.
We do not sell or rent your personal information. We may disclose only the information reasonably necessary for the following purposes:
Service providers are expected to process information only for authorised purposes and to apply appropriate safeguards. Where a deletion request applies to information processed for us by a service provider, we will take reasonable steps to instruct the relevant provider to delete or return that data where required and legally permitted.
We use reasonable administrative, technical, and organisational safeguards designed to protect personal and sensitive user data. These include:
No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we continually work to protect information using safeguards appropriate to the nature of the data and our services.
We retain account information while your account is active and thereafter only for as long as reasonably necessary for the purposes described in this policy or as required by applicable law. Certain transaction, financial, security, fraud-prevention, dispute, and compliance records may need to be retained after account deletion where a legal or regulatory obligation applies.
Where applicable to our financial records, transaction records — including relevant wallet, cashback, and referral records — may be retained for up to 7 years or for another period required by applicable Nigerian law. Information that we are not required or permitted to retain will be deleted or anonymised when it is no longer needed.
Data retained after an account-deletion request is not kept for continued ordinary use of the deleted account and remains subject to appropriate safeguards and applicable retention requirements.
You may request permanent deletion of your LUNTRA account and personal data associated with that account. Account deletion is different from temporary deactivation or suspension.
For security, we may need to verify that the requester is the account owner before completing deletion. Once a valid deletion request is processed, we will permanently delete or anonymise personal data associated with the account that we are not required or permitted to retain. Data that must be retained for legitimate purposes such as legal compliance, financial record keeping, fraud prevention, security, or dispute resolution will be retained only for the applicable purpose and retention period described in this policy or required by law.
Subject to applicable Nigerian data-protection law, including the Nigeria Data Protection Act 2023 and applicable regulations, you may have rights concerning your personal data, including:
Access
Request information about or a copy of personal data we hold about you, subject to applicable law.
Correction
Ask us to correct inaccurate or incomplete personal information.
Deletion
Request deletion of your account and eligible associated personal data, subject to lawful retention requirements.
Objection / Restriction
Object to or request restriction of certain processing where provided by applicable law.
To exercise a privacy right, contact us at info@luntra.com.ng. We may request reasonable information to verify your identity before acting on a request. We aim to respond promptly and within applicable legal time limits.
Our website uses session technologies necessary to maintain authenticated sessions and operate essential features. We do not use this website's essential session cookie to build an advertising profile. If we introduce analytics, advertising, or other non-essential tracking technologies, we will update this policy and provide any notice or choices required by applicable law.
The mobile App may use local application storage, authentication tokens, or similar technologies necessary to keep you signed in, remember eligible preferences, protect sessions, and provide App functionality.
Our services may interact with third-party payment processors, telecommunications or utility providers, verification providers, or other service partners. Their own services may be governed by their respective privacy policies. We encourage you to review the privacy information presented by a third party when you interact directly with that third party.
LUNTRA is intended for users aged 18 years and above. We do not knowingly permit children under 18 to create or operate an account or knowingly collect their personal information for use of our services. If you believe that a person under 18 has provided personal information or created an account, please contact us so that we can investigate and take appropriate action.
Some service providers or technical infrastructure used to operate our services may process information from locations outside Nigeria. Where personal data is transferred or processed across borders, we take reasonable steps to use appropriate safeguards and comply with applicable data-protection requirements.
We may update this Privacy Policy to reflect changes to our App, website, services, data practices, service providers, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. Where required or appropriate, we may also notify users through the App, website, email, or another suitable method.
If you have questions about this Privacy Policy, how we handle personal data, or a privacy or deletion request, contact us using the details below.
Contact our team regarding privacy, personal-data, or account-deletion requests.