...
It is recommended that the PayU API’s are implemented as a server to server architecture (S2S) and that your mobile application act as a 'thin client' to collect data on behalf of your server. In this manner, any callback mechanism is managed between your server and your thin client and is independent of the payment process.
...