CashPay Privacy Policy

1. Introduction

Welcome to CashPay ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

By using CashPay, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, date of birth, and NIDA (National ID) number
• Financial Information: Bank account details, mobile money account numbers, transaction history, and payment information
• Identity Verification: Government-issued identification documents for account verification
• Business Information: If you are a merchant, we collect business name, registration details, and business address

2.2 Transaction Information

We automatically collect information about your transactions, including:

• Transaction amounts, dates, and times
• Payment methods used (mobile money, bank transfers, QR codes)
• Recipient and sender information
• Transaction status and receipts

2.3 Device and Usage Information

We collect information about your device and how you use our app:

• Device type, operating system, and unique device identifiers
• IP address and location data
• App usage patterns, features accessed, and time spent in the app
• Crash reports and performance data

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our services and hold certain information to improve your experience.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Service Provision: To provide, maintain, and improve our payment and wallet services
• Transaction Processing: To process payments, transfers, and other financial transactions
• Account Management: To create and manage your account, verify your identity, and authenticate transactions
• Security: To detect, prevent, and address fraud, security breaches, and other potentially illegal activities
• Communication: To send you transaction notifications, account updates, and customer support messages
• Compliance: To comply with legal obligations, including anti-money laundering and know-your-customer (KYC) requirements
• Analytics: To analyze usage patterns and improve our services
• Marketing: To send you promotional materials and offers (with your consent)

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Payment processors (M-Pesa, Tigo Pesa, Airtel Money, Halopesa)
• Banking partners for bank transfer services
• Cloud storage and hosting providers
• Analytics and monitoring services
• SMS and email service providers

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication and authorization mechanisms
• Regular security audits and vulnerability assessments
• Access controls and employee training
• Compliance with PCI DSS standards for payment data

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Transaction records are typically retained for a minimum of 7 years to comply with financial regulations.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Objection: Object to processing of your personal information
• Data Portability: Request transfer of your data to another service provider
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us using the information provided in the Contact Us section.

8. Age Requirements

CashPay is a financial services application. To use our services, you must be of legal age to enter into financial contracts in your jurisdiction. In Tanzania, this typically means you must be at least 18 years old. If you are under 18, you may use our services only with the consent and supervision of a parent or legal guardian who agrees to be bound by this Privacy Policy.

We do not knowingly collect personal information from individuals who are not legally permitted to use financial services. If you believe we have collected information from someone who is not legally permitted to use our services, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Tanzania Data Protection Laws

We comply with applicable data protection laws in Tanzania, including the Personal Data Protection Act (when applicable) and regulations issued by the Bank of Tanzania for financial services providers.