Points
Privacy Policy
This Privacy Policy explains how the telebirr Points service ("we", "us", "the Service") collects, uses, stores and protects your personal information when you use the Service. Please read it carefully. By signing in you confirm that you have read and accepted this policy.
1. Who we are
The Service is operated as a points and rewards program for telebirr users. Point balances, redemptions and account records are held and processed by the NG system, which acts as the points ledger provider. This site is the user-facing interface to that ledger.
2. Information we collect
We collect only what is needed to run the Service:
- Mobile number (MSISDN) — used to identify your account and to deliver redeemed airtime, data bundles or vouchers.
- Points activity — points earned, redeemed, and the timestamps of each action.
- Membership status — the plan you are on and its expiry date.
- Device identifier — a randomly generated value stored in your browser, used only to prevent abuse of the shake-to-earn feature. It is not linked to your identity.
- Payment records — transaction reference, amount, currency and status for membership purchases. Card and wallet credentials are handled by telebirr and are never stored by us.
- Technical logs — IP address, browser type and request timestamps, kept for security and troubleshooting.
3. What we do not collect
- We do not collect your name, address, ID number, or bank account details.
- We do not request access to your contacts, photos, camera, microphone or location.
- We do not store your telebirr PIN or any payment credential.
4. How we use your information
- To create and maintain your points account.
- To credit points earned through the shake feature and apply your membership multiplier.
- To process redemptions and deliver the redeemed item to your mobile number.
- To process membership purchases and maintain billing records.
- To detect and prevent fraud, multi-account abuse and automated scripted activity.
- To meet legal, tax and regulatory obligations.
5. Legal basis
We process your mobile number and points activity because it is necessary to perform the Service you have requested. We process device identifiers and technical logs on the basis of our legitimate interest in preventing fraud and keeping the Service secure.
6. Sharing
We share the minimum necessary information with: the NG points ledger provider (to maintain your balance and process redemptions); telebirr (to process membership payments and deliver redeemed airtime, data or vouchers); and competent authorities where required by law. We do not sell your personal information.
7. Storage and retention
Account and points records are retained while your account is active, and afterwards for as long as required by applicable financial record-keeping rules. Device identifiers used for shake-abuse prevention are kept for a rolling window and then discarded. Technical logs are kept for a short period for security purposes.
8. Security
All traffic between your device and the Service is encrypted in transit using HTTPS. Access tokens are random, expire, and are revoked on sign-out. Access to server systems is restricted to authorised operators.
9. Your rights
You may contact us to:
- Ask what information we hold about your mobile number.
- Correct inaccurate account information.
- Request deletion of your account, subject to record-keeping obligations.
- Withdraw membership and stop future billing.
10. Children
The Service is not directed at children under 18. If we learn that an account belongs to a child, we will close it and remove the associated data.
11. Changes
We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the Service after an update means you accept the revised policy.
12. Contact
Questions about this policy or your data: privacy@formatjson.com.cn