Privacy Policy & Terms of Service

1. Who We Are

Student Wallet (operating at studentearn.com.ng) is a Nigerian digital rewards platform designed exclusively for students and young adults enrolled in Nigerian tertiary institutions. We reward students for completing legitimate online tasks such as watching videos, joining communities, completing surveys, and referring peers.

We are not a bank, investment firm, Ponzi scheme, or financial institution. We are a task-reward aggregation platform that operates within the bounds of Nigerian law.

• Platform Name: Student Wallet
• Website: studentearn.com.ng
• Operations: Nigeria
• Support: Via WhatsApp and in-app contact

2. Data We Collect

2.1 Account Registration Data

• Full name (required for identity verification and payout)
• Email address (login credential and communications)
• Phone number (support and account verification)
• University/institution name (platform eligibility)
• Education level/status
• Username (your unique referral identifier)
• Password (stored as a bcrypt hash — we cannot see your password)

2.2 Payout & Financial Data

• Nigerian bank name (for withdrawals)
• Bank account number (NUBAN format — 10 digits)
• Account holder name (must match your registered identity)

2.3 Activity Data

• Task submissions and proof screenshots/URLs you submit
• Activation payment receipts and screenshots
• Withdrawal request history
• Referral relationships (who referred you and whom you referred)
• Login timestamps and session activity

2.4 Technical Data

• IP address (for security and fraud prevention)
• Browser type and operating system (session management)
• Device type (mobile/desktop, for UI optimisation)
• Page visit logs (to detect suspicious activity)

2.5 Profile Media

• Profile/avatar photo (if you choose to upload one — entirely optional)

3. How We Use Your Data

We use your data exclusively for the following purposes:

• Account Management: Create, maintain, and authenticate your account
• Task Processing: Review task completion proofs and credit your balance
• Payouts: Process withdrawal requests to your verified Nigerian bank account
• Fraud Prevention: Detect duplicate accounts, fake submissions, and abuse
• Support: Respond to your queries and resolve account issues
• Platform Improvements: Analyse anonymised usage patterns to improve features
• Security: Protect your account from unauthorised access
• Legal Compliance: Comply with applicable Nigerian laws and regulations
• Notifications: Send you important account activity alerts (not marketing spam)

We do NOT sell your personal data to third parties. We do NOT send unsolicited marketing emails. We do NOT share your bank details with advertisers.

4. Legal Basis for Processing

Under the Nigeria Data Protection Act 2023 (NDPA) and NDPR 2019, we process your data on the following lawful bases:

• Contract Performance: Processing necessary to provide the services you signed up for
• Legitimate Interests: Fraud prevention, security monitoring, and platform safety
• Legal Obligation: Compliance with Nigerian financial regulations when processing payouts
• Consent: For optional features such as profile photos and marketing messages (you may withdraw consent at any time)

5. How Earnings Work — Important Disclosure

• Earnings on Student Wallet are task-based rewards — not investments, interest, or returns on capital.
• You earn by completing sponsored tasks (watching videos, joining groups, surveys, referrals). You are rewarded for your time and action, not for depositing money.
• The ₦1,500 account activation fee is a one-time access fee to unlock the platform's earning features — it is not an investment and does not generate automatic returns.
• Reward amounts are set by task sponsors and Student Wallet management. They can change without prior notice.
• Rewards are credited to your in-app balance only after admin review and approval. Unapproved or fraudulent submissions will be rejected.
• Student Wallet is NOT a Ponzi scheme, pyramid scheme, or investment platform. Earnings depend entirely on your completing legitimate tasks.
• Past earnings of other users do not guarantee your future earnings.

6. Withdrawals & Payments

• Minimum withdrawal amount: ₦1,000
• Withdrawals are processed to your linked Nigerian bank account only
• Processing time: 24–72 business hours after admin approval
• A processing fee may apply (displayed clearly at the time of withdrawal request)
• Your bank account name must match your registered name. Mismatched details may delay or reject your withdrawal
• We reserve the right to request identity verification before processing large withdrawals
• Withdrawals may be temporarily suspended during platform maintenance or fraud investigations
• Referral balance and task earnings are governed by separate rules displayed on the earnings pages

7. Data Sharing & Third Parties

We only share your data with trusted third parties strictly necessary to operate our service:

• Payment Processors: Your bank account details are shared with our payment gateway partner only to execute your withdrawal. They are contractually bound to data protection obligations.
• Cloud Hosting Provider: Our servers are hosted with a provider that processes data on our behalf under strict data processing agreements.
• Task Sponsors: Only your anonymous completion proof (e.g., a screenshot) is visible to sponsors — your name and contact details are never shared.
• Legal Authorities: We will disclose data if required by Nigerian law, court order, or to prevent crime/fraud.

We never sell, rent, or trade your personal data for advertising or commercial purposes.

8. Data Security

We take security seriously and have implemented the following protections:

• HTTPS/TLS Encryption: All data in transit is encrypted using TLS 1.2+
• Password Hashing: Passwords are hashed using bcrypt — even our staff cannot see your password
• CSRF Protection: All forms use cryptographic CSRF tokens to prevent cross-site request forgery
• SQL Injection Prevention: All database queries use PDO prepared statements
• XSS Prevention: All user-input output is escaped using htmlspecialchars()
• Security Headers: HTTP headers including X-Frame-Options, X-Content-Type-Options, and Referrer-Policy are enforced
• Rate Limiting: Login attempts are rate-limited to prevent brute-force attacks
• IP Logging: Suspicious login attempts and financial transactions are IP-logged for fraud detection
• Session Security: Sessions expire after 30 minutes of inactivity
• Admin Access: Admin areas are protected by separate authentication and are not publicly indexed

Despite these measures, no internet transmission is 100% secure. We encourage you to use a strong, unique password and to never share your login credentials with anyone.

9. Data Retention

• Active accounts: Data retained for the lifetime of your account
• Inactive accounts: Data retained for 12 months of inactivity, then anonymised
• Transaction records: Kept for 7 years to comply with Nigerian financial record-keeping requirements
• Deleted accounts: Personal identifiers removed within 30 days of account deletion request; anonymised transaction logs retained for compliance
• Uploaded files: Proof screenshots deleted within 90 days after task review completion

10. Your Rights Under NDPR/NDPA

As a data subject under Nigerian law, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate personal information via your profile settings
• Right to Erasure: Request deletion of your account and associated personal data (subject to legal retention requirements)
• Right to Restriction: Request that we limit how we process your data in certain circumstances
• Right to Data Portability: Receive a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us via WhatsApp at +234 810 580 1386 or email our support team. We will respond within 30 days.

11. Anti-Fraud Policy & Fair Use

Student Wallet has zero tolerance for fraud. The following activities are strictly prohibited:

• Creating multiple accounts (one account per person)
• Submitting fake, edited, or recycled proof screenshots for tasks
• Using bots, scripts, or automation tools to complete tasks
• Referral fraud (self-referrals, buying referrals, or using fake identities)
• Attempting to manipulate your balance through technical exploits
• Submitting withdrawal requests using bank accounts belonging to other people
• Impersonating Student Wallet staff or creating fake support channels
• Encouraging others to submit false proofs or game the system

We actively monitor for fraud using IP tracking, proof hash deduplication, submission pattern analysis, and manual admin review. Suspicious accounts will be suspended pending investigation.

If you witness fraud or impersonation of Student Wallet, report it immediately to our official WhatsApp support.

12. Cookies & Session Data

Student Wallet uses strictly necessary cookies only:

• Session Cookie: A server-side session to keep you logged in during your visit. Expires when you close your browser or after 30 minutes of inactivity.
• CSRF Token Cookie: A security token attached to all form submissions to prevent cross-site request forgery attacks.

We do NOT use advertising cookies, tracking pixels, or third-party analytics cookies (e.g., Google Analytics). You can disable cookies in your browser settings, but this will prevent you from logging in.

13. Age Policy

Student Wallet is intended for users aged 16 years and above. Users under 18 should have parental or guardian awareness of their account and activities on this platform.

If we discover that a user under 16 has created an account without appropriate consent, we will delete the account and all associated data immediately upon notification.

14. Disclaimer of Warranties

Student Wallet is provided on an "as-is" and "as-available" basis. We make no warranties, express or implied, regarding:

• The uninterrupted availability of the platform
• The accuracy or completeness of task information provided by sponsors
• Specific earning amounts or timelines
• The continued availability of any specific task or earning opportunity

We are not liable for: losses arising from account suspension due to policy violations; delays in withdrawal processing due to banking system issues; or earnings lost due to task rejection for incomplete proof submission.

15. Terms of Service Summary

Account Rules

• One account per person. Duplicate accounts will be banned.
• You are responsible for maintaining the confidentiality of your login credentials.
• You must provide accurate registration information. False information will result in account termination.
• You must be a Nigerian student or young adult to register.

Earning & Task Rules

• Tasks must be completed genuinely. Fake or recycled proofs will be rejected.
• Balance credits are subject to admin review and approval — not instant.
• We reserve the right to adjust task reward amounts and rules at any time.
• Referral commissions are only earned from verified, activated referrals.

Platform Rights

• We reserve the right to suspend or terminate any account that violates these terms.
• We reserve the right to withhold earnings pending fraud investigation.
• We reserve the right to modify these terms at any time — continued use constitutes acceptance.

Governing Law

These terms are governed by the laws of the Federal Republic of Nigeria. Any disputes shall be resolved under Nigerian jurisdiction.

16. Contact Us

For privacy inquiries, data requests, complaints, or support:

• WhatsApp Support: +234 810 580 1386
• Website: studentearn.com.ng
• In-App Support: Profile → WhatsApp Support button

For formal data protection complaints unresolved by us, you may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.