Privacy Policy

1. Introduction

Welcome to MobileZone ("the Service", "we", "us", "our"). We respect your privacy and are committed to protecting your personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the regulations issued by the Nigeria Data Protection Commission (NDPC). This policy explains how we collect, use, share, and safeguard your data when you use our AI image-to-video service.

2. Data controller

MobileZone is operated by MindRay Technologies Limited, which acts as the data controller for the personal data described in this policy. The Service is distributed in Nigeria in partnership with Airtel Nigeria as the billing operator.

For any question about this policy or about how your data is handled, contact us at [email protected].

3. What data we collect

• Mobile number (MSISDN). Used to identify your subscription and to give you access to the Service. We receive it from your mobile operator when you subscribe.
• Subscription and billing status. Whether your subscription is active, the plan you are on, and its renewal dates. We do not receive or store your card or bank details — charges are made by your mobile operator against your airtime balance.
• Images you upload. The photographs you submit to generate a video.
• Generated videos. The output files produced from your images.
• Technical data. IP address, device type, browser, and timestamps, collected in server logs for security and troubleshooting.

4. Lawful basis for processing

Under section 25 of the NDPA we process your personal data on the following bases:

• Performance of a contract — to deliver the Service you subscribed to.
• Consent — for the processing of the images you choose to upload. You give this consent by uploading an image, and you may withdraw it at any time by deleting your content or ending your subscription.
• Legal obligation — to keep the records required by Nigerian law and by our agreement with the mobile operator.
• Legitimate interest — to keep the Service secure and to prevent abuse and fraud.

5. How we use your data

We use your data only to operate the Service: to authenticate you, to generate the videos you request, to keep your library of generated videos available to you, to manage your subscription with the operator, and to protect the Service against abuse. We do not sell your personal data, and we do not use your images or videos to train AI models.

6. Third parties and cross-border transfers

To generate your videos we send the image you upload to specialised AI providers who process it on our behalf: Runway, Luma AI, Kling AI and fal.ai. These providers act as data processors under contract and may process the data on servers located outside Nigeria.

Section 41 of the NDPA permits such transfers where adequate safeguards are in place. We rely on contractual clauses with each provider that require them to protect the data to a standard comparable to the NDPA, to process it only on our instructions, and not to retain it beyond what is needed to return the result.

We also share your subscription status with Airtel Nigeria, which is the operator that bills the Service.

7. How long we keep your data

• Uploaded images: deleted within 30 days of generation.
• Generated videos: kept while your subscription is active, so that you can access your library, and deleted within 90 days after it ends.
• Subscription and billing records: kept for as long as required by Nigerian law and by our agreement with the operator.
• Server logs: kept for up to 12 months.

8. Your rights under the NDPA

As a data subject in Nigeria you have the right to:

• be informed about how your data is processed;
• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting processing already carried out.

To exercise any of these rights, write to [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).

9. Security

We serve the Service over HTTPS, restrict access to stored content, and keep the credentials used to reach our providers under controlled access. No system can be guaranteed to be completely secure, but we take reasonable technical and organisational measures proportionate to the risk, as required by section 39 of the NDPA.

10. Children

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us and we will delete the data.

11. Cookies

We use a session cookie to keep you signed in and a cookie to remember your language preference. We do not use advertising or third-party tracking cookies.

12. Changes to this policy

We may update this policy. When we do, we will change the date shown at the top of this page. Continuing to use the Service after a change means you accept the updated policy.

13. Contact

Email: [email protected]

Support: [email protected]

Regulator: Nigeria Data Protection Commission (NDPC)