Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: When you register, we collect your full name, email address, phone number, and password (stored as a salted hash, never in plain text).
• Transaction information: When you create a transfer, we collect the amount sent, recipient name, recipient phone number, corridor (sending country and currency), and the exchange rate applied.
• Payment proof: You upload images (screenshots) of your bank transfer as proof of payment. These images may contain bank account details, transaction references, and amounts.
• Profile information: You may optionally update your display name and other profile details.
• Support communications: Messages you send through our in-app chat or email support, including any attachments.

1.2 Information We Collect Automatically

• Device information: Device type, operating system, unique device identifiers, and mobile network information.
• Push notification tokens: If you grant permission, we collect your Expo push notification token to send you real-time updates about your transfers.
• Usage data: Pages visited, features used, timestamps, and general interaction patterns to improve the Service.
• IP address: Collected for security and fraud prevention purposes.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process and verify your money transfers
• Deliver funds to your designated recipient via Mobile Money
• Send you push notifications about transfer status updates (proof received, approved, rejected, dispatched)
• Communicate with you about your account, transfers, and support requests
• Send broadcast announcements about rate changes, service updates, and new features
• Detect and prevent fraud, unauthorized access, and other illegal activities
• Comply with legal and regulatory obligations
• Improve and optimize the Service

We will never sell your personal information to third parties for marketing or advertising purposes.

3. How We Store and Protect Your Data

3.1 Data Storage

• Account and transaction data is stored in a PostgreSQL database hosted on secure, encrypted servers.
• Payment proof images are stored on Cloudflare R2, a globally distributed object storage service with enterprise-grade security and encryption at rest.
• Passwords are hashed using bcrypt with per-user salting. We never store plain-text passwords.

3.2 Authentication Security

• Authentication uses JSON Web Tokens (JWT) with short-lived access tokens and long-lived refresh tokens.
• On mobile devices, refresh tokens are stored in the device's secure storage (iOS Keychain / Android Keystore), not in plain AsyncStorage or cookies.
• On the web, tokens are stored in secure, httpOnly cookies where supported.

3.3 Data Encryption

All data transmitted between your device and our servers is encrypted using TLS (HTTPS). Data at rest in our database and file storage is encrypted using AES-256 or equivalent encryption standards.

4. Data Sharing and Disclosure

We share your personal information only in the following circumstances:

• Mobile Money providers: We share recipient name and phone number with MTN Mobile Money and Orange Money in Cameroon to complete the funds disbursement.
• Service providers: We use Cloudflare (file storage), Expo (push notifications), and other infrastructure providers who process data on our behalf under strict confidentiality agreements.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Fraud prevention: We may share information with law enforcement if we detect fraudulent or illegal activity.

We do not sell, rent, or trade your personal information to any third party.

5. Push Notifications

If you grant notification permissions, we send push notifications for: transfer status updates (proof received, approved, rejected, dispatched), rate change announcements, broadcast messages from our admin team, and important account alerts. You can disable push notifications at any time through your device settings. Disabling notifications will not affect the functionality of the Service, but you will not receive real-time updates.

6. Data Retention

• Account data: Retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, subject to legal retention requirements.
• Transaction records: Retained for a minimum of 5 years after the transaction date to comply with anti-money laundering (AML) and financial record-keeping regulations.
• Payment proof images: Retained for a minimum of 2 years after the transaction is completed, then automatically deleted.
• Chat messages: Retained for 1 year after the last message for support quality and dispute resolution.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, commonly used format.
• Objection: Object to the processing of your personal data for specific purposes.
• Withdraw consent: Withdraw consent for push notifications or marketing communications at any time.

To exercise any of these rights, contact us at support@easykingspay.comwith the subject line “Privacy Request”. We will respond within 30 days.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child under 18, we will delete it immediately.

9. Cookies and Web Tracking

Our website uses essential cookies for authentication and session management. We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across other websites. We may use basic, privacy-respecting analytics to understand aggregate usage patterns.

10. International Data Transfers

Your data may be processed in countries other than your country of residence. We ensure that any international data transfer is protected by appropriate safeguards, including encryption in transit and contractual agreements with our service providers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and notify users via push notification or email for significant changes. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@easykingspay.com
• In-app live chat
• WhatsApp: +237 6XX XXX XXX