Data Collection
What Information We Collect
NetFuse collects personal information solely to operate the biometric-verified mentorship platform, facilitate session bookings, and ensure the safety of all participants.
Identity Data
Full legal name and display name
Email address (account anchor)
Phone number (2FA & push notifications)
Profile photo and professional bio
Identity Verification (KYC)
Government ID verification (via accredited identity providers)
NIN / BVN submitted directly to licensed verification channels
NetFuse receives only a cryptographic compliance status token
Verification timestamp and audit record stored for regulatory compliance
Financial Data
Secure payment token (no raw card data on our servers)
Bank subaccount reference (coaches only)
Payment ledger transaction history
Payout settlement records (retained per financial regulations)
Session & Usage Data
Encrypted media session duration and room tokens
Booking timestamps and session ratings
Device type, OS version, and app version
IP address and security logs (fraud prevention)
Payment Privacy
Payment & Financial Data Handling
All financial transactions are handled exclusively by licensed, PCI DSS Level 1 certified payment processors. NetFuse operates as an application layer utilizing automated subaccount split mechanisms.
We do not store, log, or access raw credit/debit card numbers, CVVs, or full bank account credentials.
Payment processors tokenize your payment methods. NetFuse only stores a non-sensitive customer token identifier.
Coach earnings flow directly into verified bank subaccounts cleared by licensed payment institutions.
Booking payments are automatically split between the coach and the platform via automated subaccount settlement, with full dispute protection coverage.
Transaction records are retained for 24 months in compliance with statutory financial regulations.
Refund instructions are executed programmatically — no human agent ever has access to your payment methods.
Data Use
How We Use Your Information
Account Identity & Access
Authenticate users, enforce identity verification standards, and maintain verified coach profiles.
Session Booking & Delivery
Schedule 1-on-1 sessions, generate secure ephemeral access tokens, send booking confirmations, and deliver push notifications.
Payment & Split Execution
Process booking transactions via automated subaccounts, distributing split earnings directly to verified mentors.
Fraud Prevention & Safety
Cross-reference verified identity credentials to prevent impersonation, detect payment abuse patterns, and enforce community standards.
Dispute Resolution
Encrypted session attendance logs and dual-party ratings are stored for up to 30 days to facilitate fair refund adjudication.
Platform Improvement
Aggregated, anonymized usage analytics improve session matching quality, app performance, and product features. Never sold to third parties.
Security Architecture
Technical Security Measures
AES-256 Encryption at Rest
All database records, transaction logs, and profile records are encrypted at rest using industry-standard AES-256 encryption.
TLS 1.3 in Transit
All traffic between the NetFuse mobile app, our backend services, and external service gateways is encrypted in transit over TLS 1.3.
Ephemeral Session Access Tokens
Each live video session utilizes short-lived, dynamically signed tokens tied to verified participant identities that expire immediately upon call termination.
Zero-Knowledge Identity Isolation
Raw identity documents and biometric scans never touch NetFuse servers. Our compliance partners return only a signed verification status.
Row-Level Access Security (RLS)
Database access policies enforce tenant-level isolation — users can never query or inspect other users' confidential records.
Immutable Audit Logs
All critical financial and identity events are recorded in append-only audit journals for regulatory compliance.
Session Data
Session Recordings & Communication Data
NetFuse sessions take place over end-to-end encrypted real-time communication channels within the mobile app. The following data is handled:
Video/Audio Streams
Live audio and video is never recorded by default. Both participants must explicitly opt in within the app to enable session recording. Recording consent is logged with timestamp.
Session Metadata
Room ID, session duration, participant presence timestamps, and connection quality metrics are retained for 30 days for dispute resolution, then purged.
In-App Chat Messages
Messages between mentee and coach are encrypted in transit and at rest. Chat history is retained for 24 months and accessible only to the conversation participants.
Push Notifications
Booking confirmations, session reminders, and platform updates are sent via Expo push infrastructure. You can disable all marketing notifications from app settings.
Third Parties
Third-Party Service Categories
To maintain high reliability, confidentiality, and performance, NetFuse partners with accredited, industry-compliant third-party infrastructure providers. We enforce strict contractual safeguards and data isolation standards. We never sell, rent, or trade your personal data with advertisers or data brokers.
In compliance with the Nigeria Data Protection Regulation (NDPR), third-party access is strictly limited to authorized functional categories under confidentiality agreements:
Payment & Settlement Infrastructure
Licensed, PCI-DSS Level 1 certified payment processors handle encrypted card billing, bank disbursements, and automated mentor settlements. NetFuse never stores or processes raw credit/debit card numbers.
PCI-DSS Level 1 & CBN Regulated
Accredited Identity & Compliance Partners
Government-licensed identity verification partners corroborate legal credentials to prevent fraud and multi-accounting. Only verification result tokens are transmitted back to NetFuse.
NIMC & NDPR Aligned Verification
Real-Time Video & Audio Infrastructure
Enterprise telecommunications providers deliver encrypted, low-latency live audio and video streaming. Sessions are transient and never recorded without dual-party cryptographic consent.
TLS 1.3 & Encrypted RTC Tokens
Secure Cloud & Database Facilities
Hardened cloud database and server clusters protect user accounts and transaction histories behind row-level access barriers and multi-tier network firewalls.
AES-256 Encryption at Rest & in Transit
Mobile Delivery & Push Notification Services
Cryptographically secured mobile messaging channels deliver transactional alerts, session reminders, and booking updates directly to registered user devices without tracking SDKs.
Zero Ad-Tracking & Data Minimization
For specific compliance inquiries or data controller information, contact our Data Protection Officer at support@netfuse.ng with the subject “Data Privacy Request”.
Your Rights
Your Data Rights (NDPR Compliance)
Under the Nigeria Data Protection Regulation (NDPR) and international best practice, you have the following enforceable rights over your personal data:
Right to Access: Request a full export of all personal data we hold about you. Fulfilled within 72 hours of a verified request.
Right to Rectification: Correct inaccurate profile details, professional credentials, or contact information at any time from app settings.
Right to Erasure: Request permanent deletion of your account and associated data. Note: financial records required by Nigerian law (24 months) are retained even after deletion.
Right to Object to Marketing: Opt out of promotional emails and push notifications at any time via app notification settings or email unsubscribe link.
Right to Withdraw Recording Consent: Revoke session recording consent at any time. Existing recordings will be deleted within 7 days of your request.
Right to Lodge a Complaint: You may escalate data concerns to the Nigeria Data Protection Bureau (NDPB) at ndpb.gov.ng if your request is not resolved satisfactorily.
To exercise any of these rights, email support@netfuse.ng with subject line "Data Rights Request". We respond within 48 hours.
Cookies & Local AnalyticsNetFuse does not deploy third-party advertising cookies. We use first-party session cookies for authentication state only. Anonymous app usage analytics are collected via self-hosted tooling — never sent to Google Analytics, Meta Pixel, or similar ad platforms.
Questions about your data?
Email support@netfuse.ng with subject "Privacy Request". We respond within 48 hours.