Privacy policy

1. What we collect

Your full name, phone number, optional email address, profile photo, mobile-money transaction details, device and login information (IP address, browser), and the records of your wallet, packages, deposits and withdrawals.

2. Why we collect it

To open and secure your account, verify payments, pay withdrawals, prevent fraud, meet legal and regulatory obligations (including anti-money-laundering rules in Uganda), and provide support.

3. How we protect it

Passwords are stored with Argon2id hashing. Sensitive data such as payout phone numbers and original payment data is encrypted at rest. Access by staff is limited by role and every sensitive action is written to an audit trail.

4. Sharing

We share data only with mobile-money networks and SMS/email providers needed to deliver the service, with auditors and regulators when required by law, or with law enforcement under a valid legal request. We do not sell your data.

5. Retention

Financial and audit records are kept permanently or for as long as the law requires. Other data is kept while your account is open and for a reasonable period afterwards.

6. Your rights

Under the Data Protection and Privacy Act, 2019 you may request access to, or correction of, your personal data. Contact us through a support ticket.

7. Cookies

We use strictly necessary cookies for your session, security (CSRF protection) and fraud prevention. We do not use advertising cookies.