Privacy Policy

Last updated: October 10, 2026

1. Information we collect

Information you give us

• Account details: full name, username, mobile phone number, date of birth, gender, region and a password (stored only in encrypted/hashed form).
• Profile photo: only if you choose to upload one (taken from your camera or photo library with your permission).
• Payments: the mobile money number, network and amount you use to deposit or withdraw, and the transaction references returned by our payment provider. We never see or store your mobile money PIN.
• Activity: matches you create, bids you place or respond to, results, winnings, refunds and wallet transactions.
• Messages and feedback: what you send to our support team, comments you post on matches and feedback you submit.

Information collected automatically

• Device token: a push-notification token (Firebase Cloud Messaging) so we can send you match and account notifications.
• Technical data: app version, network connectivity status and basic server logs (such as IP address and time of a request) used to operate and secure the service.

Biometrics: if you turn on fingerprint / Face ID unlock, the check happens entirely on your device using its built-in security. Nitusue never receives or stores your fingerprint or face data.

2. How we use your information

• To create and manage your account and verify your identity.
• To run matches and bids, settle results, credit winnings and process refunds.
• To process deposits and withdrawals to and from your mobile money account.
• To send notifications about your matches, bets, payments and important account updates.
• To answer your support messages and improve the app.
• To prevent fraud and abuse, enforce our rules and meet legal, tax and accounting obligations.

We do not sell your personal information and we do not use it for third-party advertising.

3. Who we share it with

• Payment provider: Snippe (snippe.sh) processes mobile money deposits and payouts. We share the phone number, name, amount and reference needed to complete each payment.
• Mobile money networks (M-Pesa, Airtel Money, Mixx by Yas, Halotel / HaloPesa) receive payment details through our payment provider to complete transactions.
• Google Firebase delivers push notifications using your device token.
• Hosting provider: our servers and database are hosted by a third-party hosting company that stores data on our behalf.
• Other players: your username and, where shown, your profile photo, picks and match activity are visible to other players (for example on leaderboards and match pages).
• Authorities: when required by law, court order or to protect the rights and safety of our users and the service.

4. How we protect your information

Data is sent over encrypted connections (HTTPS). Passwords are hashed, payment-provider keys are encrypted, payment notifications are verified with cryptographic signatures, and access to our admin tools is limited to authorised staff with role-based permissions. No method of storage or transmission is 100% secure, but we work to protect your information.

5. How long we keep it

We keep your account information while your account is active. Payment, wallet and betting records are kept for as long as required for accounting, tax, dispute and anti-fraud purposes, even after an account is closed. Support messages and feedback are kept as long as needed to help you.

6. Your choices and rights

• Access and correction: you can view and edit your profile details in the app (Profile → Edit Profile).
• Notifications: you can turn push notifications off in the app or in your phone's settings.
• Profile photo: you can replace your photo at any time.
• Account deletion: you can ask us to delete your account and personal data by contacting us (see below) from your registered phone number or email. We will delete or anonymise your data, except records we must keep by law (for example completed payment records). Any remaining wallet balance should be withdrawn before deletion.

7. Children

Nitusue is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a minor has created an account, contact us and we will remove it.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date above shows the latest version; significant changes will be announced in the app.

9. Contact us