Privacy Policy

1. Welcome to SOA TV

1.1 Our Mission

SOA TV ("we," "us," "our") is Africa's premier data-free Connected TV (CTV) streaming platform. Our mission is "Connecting Africa one stream at a time" by eliminating data cost barriers through strategic partnerships with mobile network operators. We currently operate in Nigeria and Kenya, with expansion plans across the African continent.

1.2 Scope of This Policy

This Privacy Policy explains how we collect, use, store, and protect your personal information when you: access SOA TV via smart TVs, mobile devices, set-top boxes, and streaming sticks; use our data-free streaming service with partner mobile operators; and interact with our platform, customer support, and marketing communications.

1.3 Legal Framework

We comply with:

• Nigeria: Data Protection Act 2023 (NDPA), enforced by the Nigeria Data Protection Commission (NDPC)
• Kenya: Data Protection Act 2019, enforced by the Office of the Data Protection Commissioner (ODPC)
• Cross-Border: African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention)
• International: General Data Protection Regulation (GDPR), where applicable

1.4 Data Controllers

Depending on your location, your data controller is: Nigeria: SOA TV Nigeria Limited (RC: [Registration Number]), Lagos, Nigeria. Kenya: SOA TV Kenya Limited, Nairobi, Kenya. Corporate: SOA TV Africa Holdings, with local subsidiaries in each operating jurisdiction.

2. Information We Collect

2.1 Account & Identity Information

2.2 Device & Technical Information

Device Identifiers: Android ID, Build.SERIAL, identifierForVendor (IDFV), Keychain-stored UUID, SoA TV STB serial number. IP Address: For content licensing geo-restrictions and security monitoring. Network Information: Mobile operator identification (MTN, Airtel, Safaricom, etc.). Connection Type: Wi-Fi vs. Mobile Data (to activate data-free streaming). Device Capabilities: Screen resolution, audio output, DRM support. App Version & Crash Logs: For performance optimization.

2.3 Viewing & Interaction Data

Watch History: Titles viewed, duration, completion rates, pause/resume points. Search Queries: Keywords, filters used, results clicked. Content Preferences: Genres, languages (English, Swahili, Yoruba, Hausa, Igbo, Sheng, Pidgin), regional selections. Interactive Features: Ratings, reviews, watchlists, social shares. Download Activity: Offline viewing content and device storage usage.

2.4 Data-Free Usage Metrics

Bundle Verification Status: Real-time check with mobile operators. Zero-Rating (data-free) Session Logs: Timestamps, data consumption (anonymized for network optimization). Fair Usage Tracking: Daily/hourly limits per bundle type. Network Performance: Buffering events, quality adaptation, CDN efficiency.

2.5 Payment Information (Premium Subscriptions)

Mobile Money: M-Pesa, MTN Mobile Money, Airtel Money transaction IDs. Card Payments: Tokenized card details (processed by PCI-DSS compliant partners). Billing History: Subscription dates, amounts, payment methods. Voucher/Coupon Codes: Promotional credits and referrals.

3. How We Use Your Information

3.1 Core Service Provision

Data-Free Streaming Verification: We process your phone number and mobile operator data to: verify active data bundle status in real-time; activate zero-rating so streaming doesn't consume your data allowance; reconcile usage with telecom partners for billing and network management.

Content Delivery: Adapt streaming quality based on your network conditions (2G/3G/4G/5G); route content through the nearest African local CDN nodes for low latency and data-free streaming; enforce regional content licensing agreements.

3.2 Personalization & African Content Discovery

Our recommendation engine is designed for African viewing patterns: Pan-African Content; Language Intelligence (e.g. Swahili, Yoruba, Hausa, Igbo, Sheng, Pidgin); Cultural Relevance; Community Viewing patterns and family plans.

3.3 Zero-Rating Partnership Management

We share minimal data with telecommunications partners: Encrypted Phone Number Hash for bundle verification only; Aggregated Usage Stats (anonymized); Fraud Prevention. Current Partners: Nigeria: MTN Nigeria, Airtel Nigeria, Globacom via Simplifyd Systems. Kenya: Safaricom, Airtel Kenya, Telkom Kenya via Simplifyd Systems.

3.4 Monetization & Advertising

First-Party Advertising; Partner Promotions (with explicit consent); African Creator Support; Sponsored Content (clearly labeled).

3.5 Security & Fraud Prevention

Account Protection; Content Piracy Prevention; Payment Fraud prevention; Geofencing to prevent VPN abuse that violates licensing agreements.

4. Your Data Protection Rights

Under Nigerian and Kenyan law, and most African Data Protection laws, you have the following rights:

4.1 Right to Access

Request a copy of all personal data we hold about you within 30 days. Digital Request: privacy@soa.live or in-app Privacy Dashboard. Offline Request: Visit our offices in Lagos or Nairobi. USSD (Nigeria): Dial *347*SOALIVE# for basic data summary. SMS (Kenya): Text "DATA" to 20220.

4.2 Right to Rectification

Update inaccurate information via: App: Settings > Profile > Edit Information. Email: corrections@soa.live. WhatsApp: +234-XXX-XXXX (Nigeria) or +254-XXX-XXXX (Kenya).

4.3 Right to Erasure ("Right to be Forgotten")

Request complete account deletion. We will: remove all identifiable personal data within 30 days; retain anonymized viewing analytics for content licensing compliance; maintain transaction records for 7 years per tax regulations; notify mobile operator partners to cease bundle verification.

4.4 Right to Restrict Processing

Temporarily limit how we use your data: pause personalized recommendations (switch to "Trending in Africa" mode); stop marketing communications; disable analytics collection (may affect streaming quality optimization).

4.5 Right to Data Portability

Receive your data in machine-readable format (JSON/CSV) to transfer to another service.

4.6 Right to Object

Automated Decision-Making: Opt-out of algorithmic content recommendations. Direct Marketing: Unsubscribe from all promotional communications. Data-Free Sharing: Object to mobile operator data sharing (will require paid data usage).

5. Data Sharing & Third Parties

5.1 Mobile Network Operators (Zero-Rating)

We partner with telecom companies to provide data-free access.

5.2 Content Delivery Networks (CDNs)

FreePass Africa: Global CDN with local African edge and origin locations. Local Partners: Kenya (PAIX), Nigeria (OADC). Data Processed: IP addresses for content routing only.

5.3 Payment Processors

Nigeria: Paystack, Flutterwave. Kenya: M-Pesa (Safaricom), Airtel Money, Stripe. Security: All PCI-DSS Level 1 compliant; we never store full card numbers.

5.4 Analytics & Security

Firebase Analytics: App performance (anonymized). GlitchTip/Sentry: Error tracking and debugging. Cloudflare: DNS-SEC, DDoS protection and bot management.

5.5 Legal & Regulatory Disclosure

We may disclose data to: Nigeria Data Protection Commission (NDPC); Kenya Office of the Data Protection Commissioner (ODPC); Law Enforcement with valid court orders or warrants under Nigerian/Kenyan law; Content Rights Holders (aggregated, anonymized viewing statistics for royalty calculations).

6. Data Security & Storage

6.1 Security Measures

Encryption: AES-256 at rest; TLS 1.3 in transit. Access Controls: Role-based access, two-factor authentication for staff. Penetration Testing: Quarterly security audits by African cybersecurity firms. Incident Response: 24/7 monitoring with 72-hour breach notification protocol.

6.2 Data Localization

In compliance with African data protection laws: Primary Storage: FreePass Africa (Lagos, Nigeria) and Azure Canada Central. Backup: Encrypted replicas within the African continent. Edge Caching: Local POPs in Lagos, Nairobi, and Accra.

6.3 Data Retention

7. Children's Privacy (Under 18)

7.1 Age Verification

Under 13: Prohibited from account creation. 13–17: May use the service with verifiable parental consent. 18+: Full account capabilities.

7.2 Parental Controls

PIN-Protected Profiles; Viewing Time Limits; Content Filters; Purchase Restrictions (PIN for all transactions).

7.3 Child Data Protection

We do not: collect precise geolocation from minors; use children's data for behavioral advertising; share children's data with third parties beyond essential service provision; allow public profile visibility for under-18 accounts.

8. Data-Free Streaming Specifics

8.1 How Zero-Rating Works

Bundle Check; Data-Free Activation; Fair Usage; Transparency (on-screen "Data-Free Mode Active" indicator).

8.2 When Data Charges Apply

Data-free streaming does NOT cover: app downloads and updates; advertisements served by third-party networks; external links clicked from our platform; social sharing features outside the app; customer support chat outside the app.

8.3 Bundle Expiry Management

24-Hour Warning; Auto-Pause option; One-Tap Renewal via mobile money.

9. Cookies & Tracking Technologies

9.1 CTV Environment

Smart TV devices use different technologies: Device Advertising IDs (resettable); Local Storage for offline functionality; we do not link CTV viewing to mobile web browsing without explicit consent.

9.2 Web & Mobile App

Essential Cookies: Required for login, security, and data-free functionality. Analytics Cookies: Optional, can be disabled. Advertising Cookies: Optional. Manage Preferences: soa.live/cookie-settings.

10. International Data Transfers

While we prioritize African data centers, some services require international transfers:

All transfers comply with Section 60 of Kenya's DPA 2019 and Section 40 of Nigeria's NDPA 2023.

11. Complaints & Regulatory Contacts

11.1 Contact SOA TV First

Data Protection Officer: Name: [DPO Name]. Email: dpo@soa.live. Phone: +234-XXX-XXXX (Nigeria) | +254-XXX-XXXX (Kenya). Postal: SOA TV Privacy Office, [Lagos/Nairobi Address]. Response Time: 30 days (extendable to 60 days for complex requests).

11.2 Nigerian Data Protection Commission (NDPC)

If unsatisfied with our response: Website: ndpc.gov.ng. Email: info@ndpc.gov.ng. Address: 14B, Yedseram Street, Maitama, Abuja, Nigeria. Phone: +234-XXX-XXXX.

11.3 Kenya Office of the Data Protection Commissioner (ODPC)

Website: odpc.go.ke. Email: info@odpc.go.ke. Address: 3rd Floor, Britam Tower, Hospital Road, Upper Hill, Nairobi. Phone: +254-XXX-XXXX.

12. Changes to This Policy

We will notify you of material changes via: In-App Notification (30 days before effective date); SMS Alert (for users without app access); Email (to registered addresses); Website Banner on soa.live; Version History: soa.live/privacy-history.

13. Contact Us

General Inquiries: privacy@soa.live · www.soa.live/privacy · WhatsApp: +234-XXX-XXXX (Nigeria) | +254-XXX-XXXX (Kenya). Local Offices: Nigeria: [Address], Lagos, Nigeria. Kenya: [Address], Nairobi, Kenya. Social Media: Twitter/X: @SOALIVE_Africa · Instagram: @soa.live · Facebook: SOA TV Africa.

14. Africa-Specific Provisions

14.1 Local Language Support

This policy is available in: English (Primary); Pidgin English (Nigeria); Swahili (Kenya); Yoruba, Hausa, Igbo (Nigeria – coming soon); Sheng (Kenya – coming soon).

14.2 Infrastructure Awareness

Offline Mode; Low-Bandwidth Mode (text-only privacy dashboard for 2G); USSD/SMS Controls; Community Viewing (family plans).

14.3 Mobile Money Integration

M-Pesa; MTN Mobile Money; Airtel Money (encrypted payment tokenization).

14.4 Expansion Roadmap

As we expand, this policy will be updated to include: Ghana (Data Protection Act, 2012); South Africa (POPIA); Tanzania, Uganda, Rwanda (EAC frameworks); Francophone West Africa (OHADA principles).

15. Legal Bases Summary

By using SOA TV, you acknowledge that you have read, understood, and agree to this Privacy Policy. You also confirm that you are at least 18 years old, or that you are 13–17 years old with parental consent, or that you are a parent/guardian providing consent for a minor.

SOA TV: Connecting Africa One Stream at a Time

Any Day. Anytime. With Your Active Data Bundle.

NDPC/ODPC Registration Requirements: As a streaming platform processing data at scale, SOA TV qualifies as a Data Controller of Major Importance in Nigeria and must register with NDPC. In Kenya, registration is required if processing sensitive data at scale or conducting direct marketing.