Privacy Policy

• Account data — name, email, profile photo and locale (e.g. from Google sign-in).
• Order data — products purchased, amounts, recipient phone numbers/emails, voucher codes, and timestamps.
• Balance data — top-ups, debits, and running balance.
• Usage data — basic device/log information needed to operate and secure the Service.

• To fulfil your orders and deliver top-ups and vouchers.
• To maintain your account, balance, order history, and rewards.
• To send transactional messages (receipts, delivery confirmations, security notices).
• To detect and prevent fraud and abuse, and to comply with legal obligations.

We process your data to perform our contract with you (fulfilling orders), to comply with legal obligations (record-keeping, anti-fraud), and on the basis of our legitimate interests (securing and improving the Service). Where we rely on consent — e.g. optional marketing — you can withdraw it at any time.

We share the minimum necessary data with processors that run the Service:

• Fulfilment providers (e.g. Reloadly) — to deliver top-ups and vouchers.
• Infrastructure & database hosting (e.g. Supabase) — to store your account and orders.
• Email delivery (e.g. Resend) — to send transactional messages.
• Payment processor(s) — to take payment where applicable. We never store full card details ourselves.

We do not sell your personal data.

Some processors may handle data outside the EEA. Where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

We keep order, balance, and transaction records for as long as needed to provide the Service and to meet legal, accounting, and anti-fraud requirements, then delete or anonymise them.

Subject to applicable law, you can access, correct, export, or delete your data, object to or restrict certain processing, and withdraw consent. You can delete your account from Settings, or contact us to exercise any right. You also have the right to complain to your local data-protection authority.

We use encryption in transit, access controls, and row-level security so each user can only see their own data. No system is perfectly secure, but we work to protect your information and to notify you of material incidents where required.

For privacy requests email support@topupolive.com, or write to Hytrenda OÜ, Pärnu mnt 106-21, Kesklinna linnaosa, 11312 Tallinn, Harju maakond, Estonia.