Privacy policy
Who we are
BitriPay ("we", "us") provides a digital wallet, payment and money-transfer service. This policy explains what personal data we collect, why, how long we keep it and the rights you have. It applies to the app, the website, agents acting for us and our support channels. The legal entity responsible for your data and its address are listed on the Regulatory information page.
What we collect
- Identity and contact: name, phone number, email, country, date of birth, and the identity document and selfie you give us for verification (KYC).
- Account and transactions: balances, payments sent and received, recipients, references, the device and location country used to approve a payment, and the operator confirmation messages that settle mobile-money payouts.
- Device and security: device model, operating system, app version, push token, IP address, and the public key of any passkey or payout device you register. We never store fingerprints or face images. Biometric checks happen on your phone; we only receive a yes or no.
- Support: messages you send us and call notes.
- Cookies and analytics on the website: see the Cookie policy. We count page views without identifying you.
Why we use it
| Purpose | Legal basis |
|---|---|
| Opening and running your account, executing payments | Performance of a contract |
| Identity verification, sanctions screening, fraud and anti-money-laundering monitoring | Legal obligation |
| Keeping records for regulators and auditors | Legal obligation |
| Sending payment notifications, including loud alerts you can switch off | Contract / legitimate interest |
| Improving the service and keeping it secure | Legitimate interest |
| Marketing messages | Consent (you can withdraw it any time) |
Who we share it with
Identity-verification and sanctions-screening providers; card processors and banks that move your money; mobile-money operators and payout partners in the destination country; agents who serve you in person (they see only what they need to complete your transaction); cloud hosting providers; auditors, regulators and law enforcement where the law requires. We do not sell personal data.
International transfers
Money transfers require sending recipient details to the destination country. Other data stays in the region where the service is operated. Where data leaves that region we use contractual safeguards recognised by the relevant regulator.
How long we keep it
Account, identity and transaction records are kept for the period required by anti-money-laundering law (normally five years after the account closes, longer where a regulator or court requires). Support conversations are kept for two years. Analytics are aggregated after thirteen months.
Your rights
You can ask for a copy of your data, correct it, ask us to delete what we are not required to keep, object to marketing, and complain to the data-protection authority in your country. Write to privacy@bitripay.app. We answer within one month.
Children
BitriPay is for people aged 18 or over, or the age of majority where you live.
Changes
We will tell you in the app at least thirty days before a material change to this policy takes effect.