Privacy Policy
Draft, last reviewed 28 August 2026.
1. What we collect
When you create an account, we store:
- Your email address and phone number.
- Your password, only as a salted hash. The password itself is never stored and cannot be recovered by us, only reset.
- Your tier (free or Smart) and the date your account was created.
- Your wallet's transaction history: every amount, whether it was a purchase, a refund, a funding or the Smart tier upgrade fee, and when it happened. This is the same record you can see yourself in your dashboard.
When you sign in, we set a session cookie. Only a one way hash of that session's token is ever stored, the same reasoning as your password, a stolen database row should not by itself hand over a working session.
To slow down abuse on sign up and sign in, we briefly record the IP address an attempt came from against a counter, not against your account or any other data about you. That record is deleted automatically within roughly twenty minutes of being written.
2. Third parties we share data with
We are not the network, biller or payment processor ourselves, so fulfilling an order or funding a wallet means sharing a limited amount of data with the partners who actually do that work. When you buy data, airtime, cable or an exam pin, we send only what delivery requires, your phone number or meter/decoder number, the plan and the amount, to our delivery partners, ClubKonnect and Gsubz. When you fund your wallet, Monnify, our payment infrastructure provider, issues you a dedicated bank account number and tells us when a transfer lands in it; it does not receive anything else about you. No analytics or advertising trackers run on this site, and we do not sell your data to anyone, for any purpose.
3. How we use what we collect
- To create and secure your account and let you sign in.
- To operate your wallet correctly: the right balance, the right history.
- To deliver the data, airtime, cable or exam pin you buy, by sharing the minimum details above with the relevant delivery partner.
- To detect and slow down abuse, such as repeated failed sign in attempts.
We do not sell your data. We do not use it for advertising, because none exists here.
4. Who inside Rebundle can see your data
An admin account, held only by the platform's operators, can see every user's email, phone, tier and wallet balance. A wallet funding transfer lands in our own settlement account, not directly into your wallet, so today an admin confirms the transfer and credits your wallet by hand; that manual step is being replaced with automatic crediting. An admin can also generate a session that shows them your account exactly as you see it, for support and debugging. Every one of these actions is recorded against the admin who performed it, in the same database, it is not hidden or anonymous on our side even though it is not visible to you directly today.
5. How long we keep it
Your account and wallet history are kept for as long as your account exists. If you ask us to close your account, we will do so and remove what we reasonably can, though a wallet's transaction history may need to be retained longer where money movement needs a record, the same reason a bank keeps statements after an account closes.
6. Your rights
There is no self serve way yet to export or delete your data from within the product. Until there is, contact us on WhatsApp or at iamayobamirokeeb@gmail.com, and we will handle the request by hand.
7. Changes to this policy
We may update this policy as the service develops, particularly as wallet funding becomes more automated. Material changes will be reflected here with an updated review date.