Privacy Policy
DataLens is built on a simple promise: your data belongs to you. We collect only what we need to run the app, we never sell your information, and you can delete your account at any time. This policy explains everything in plain language — not legalese.
01Who we are
DataLens is a product of FBIS Technologies Limited, a company incorporated in Nigeria. Our registered address is Victoria Island, Lagos, Nigeria.
When we say "DataLens", "we", "us", or "our" in this policy, we mean FBIS Technologies Limited operating the DataLens mobile application and website at datalens.ng.
We are subject to the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023.
02Information we collect
We collect the following categories of personal data:
Name, email address, and phone number you provide when you sign up.
Device model, OS version, and a unique device identifier. Used for bug reports and compatibility.
Your mobile carrier (MTN, Airtel, Glo, or 9mobile), SIM slot, and detected data balance. This is the core of the service — we cannot provide usage breakdowns without it.
Data consumed per app, per website, and per hour, as reported by your device's network statistics API. We read byte counts only — never the content of your traffic.
Records of data bundles and airtime bought through the app, plus transaction reference numbers from our payment partners. We never store card numbers.
Anonymised in-app events (e.g. opened data report, set low-data alert) used to improve the product. These are aggregated and cannot identify you individually.
We do not collect the content of your messages, your browser history, or any data from apps beyond the byte count they consume.
03How we use your information
We process your data for these purposes, each with its legal basis under the NDPR:
04Who we share your data with
We do not sell your personal data. We share it only with:
Paystack and Flutterwave, to process data bundle and airtime purchases. They are bound by their own privacy policies and PCI-DSS standards.
Amazon Web Services (EU-West region). Data is stored in ISO 27001-certified data centres.
Sentry — anonymised stack traces only; no personal data appears in error reports.
We will disclose data if required by Nigerian law, a court order, or to protect the rights and safety of our users.
05Data security
- All data in transit is encrypted with TLS 1.3
- Data at rest is encrypted using AES-256
- Production access is restricted to authorised engineers on a need-to-know basis
- We conduct regular security reviews and penetration tests
- Passwords are hashed with bcrypt — we never store plaintext passwords
If we become aware of a breach affecting your personal data, we will notify you within 72 hours as required by the NDPR.
06Data retention
We retain your data for as long as your account is active. When you delete your account:
- Your profile and usage history are deleted within 30 days
- Purchase records are retained for 7 years to satisfy Nigerian tax and financial reporting requirements
- Anonymised, aggregated statistics are retained indefinitely
07Your rights
Under the NDPR and Nigeria Data Protection Act 2023, you have the right to:
Request a copy of all personal data we hold about you
Update inaccurate or incomplete information
Delete your account and associated personal data
Export your data in a machine-readable format
Object to processing based on legitimate interest
Opt out of marketing emails at any time
To exercise any right, email support@fbistech.com. We respond within 30 days.
08Children
DataLens is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has registered an account, contact support@fbistech.com and we will delete the account promptly.
09Changes to this policy
We may update this policy from time to time. We will notify you of material changes via the app or by email at least 14 days before they take effect. Continued use of DataLens after the effective date means you accept the updated policy.
10Contact
You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA), Nigeria's data protection authority.