Privacy Policy for BPay Wallet

To provide a secure and efficient digital wallet and financial management experience, we may collect the following information:

• Personal Information: When you sign up or log in, we collect your name, email address, and mobile number. For account verification (KYC), we collect images of your identity documents (NID, Passport, or Driving License) and a facial photo.
• Financial Transactions: We collect and store records of your financial activities, including Send Money, Wallet Transfer, Mobile Recharge, and Add Money (transaction amounts, recipient details, and timestamps) to maintain your account history and ensure secure processing.
• Contact Information: If you grant permission, we access your contact list to allow you to easily select phone numbers for Mobile Recharge and Send Money features.
• Usage Data: We automatically collect information about how you interact with the app (e.g., features used, transaction frequency) through Firebase and local logs to improve our services.
• Device Information: Information about your mobile device (e.g., model, OS version, and unique identifiers like FCM tokens) is collected to ensure app compatibility and deliver real-time transaction alerts.
• Security Data (App Lock): If you enable the Biometric Lock, we utilize the Android system's secure authentication. We do not store or see your biometric data (fingerprints or face maps) on our servers.

BPay Wallet requests the following permissions to function correctly:

• INTERNET & ACCESS_NETWORK_STATE: Required to communicate with our secure servers, process financial transactions, and sync your wallet balance.
• READ_CONTACTS: Used to help you quickly find and select mobile numbers from your phonebook for recharge and money transfer services.
• POST_NOTIFICATIONS: (Required for Android 13+) Used to deliver instant alerts for successful transactions, security warnings, and important account updates.
• USE_BIOMETRIC / USE_FINGERPRINT: Required to provide an extra layer of security via Biometric Authentication for logging into the app and authorizing sensitive actions.
• CAMERA & READ_EXTERNAL_STORAGE: Required for the KYC verification process to capture or upload your identification documents and profile picture.

We use industry-standard libraries to enhance the app's performance, security, and user experience:

• Firebase Cloud Messaging (FCM): Used for delivering real-time push notifications regarding your transactions and account security.
• Volley: Facilitates fast and secure network communication (HTTPS) between the app and our database for syncing your financial records.
• Glide: Used for efficient and smooth loading of images, such as profile pictures and transaction icons.
• androidx.biometric: Used to implement secure biometric authentication. BPay Wallet does not access or store your biometric data; authentication is handled entirely by your device's operating system.
• Lottie: Used to provide interactive and smooth animations to improve the user interface experience.
• SDP & SSP (Intuit): These libraries ensure that the user interface (text and layouts) scales perfectly across all Android screen sizes and resolutions.
• Image Picker: A utility to help you easily select or capture photos for your KYC verification and profile setup.
• Google Play App Update: Ensures you are always using the latest, most secure version of the app by facilitating in-app updates.
• Custom Tabs (Browser): Used to open external links (like detailed Terms and Conditions or Support pages) safely within the app.

• Security: We use advanced encryption and secure communication protocols (SSL/TLS) to protect your financial and personal data during transfer and storage.
• Biometric Privacy: Your biometric data stays within the Android secure hardware (TEE/StrongBox) and is never shared with us or any third party.
• Retention: Your personal and transaction data is stored as long as your account is active to comply with financial regulations and provide history services.
• Data Deletion: You can request to delete your account and all associated data through the "Account Delete" feature in the app settings. Upon verification, your information will be permanently removed from our active servers, subject to legal record-keeping requirements.

BPay Wallet is not intended for use by children under the age of 18 (or the legal age for financial services in your jurisdiction). We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time to reflect new features or regulatory changes. We will notify you of any changes by updating the "Last Updated" date at the top of this page.

If you have any questions or concerns regarding this Privacy Policy or your data, please contact us at: