Home / Legal / Privacy Policy
Privacy Policy
This policy explains what personal data Kaiwish Technology collects through our websites and mobile applications, why we collect it, and the choices available to you.
1. Who we are
Kaiwish Technology ("Kaiwish", "we", "us", "our") is a technology company that develops financial-inclusion and internet-technology products for African markets. We are the data controller responsible for the personal data described in this policy.
Registered entity: Shanghai Kaiyuan Technology Company Limited (上海凯愿科技有限公司)
Registration number: 91310000MADE4J0Y53
Registered address: Room 1-2, Floor 1, Building 4, No. 1628 Lizheng Road, Lin-gang Special Area, China (Shanghai) Pilot Free Trade Zone, Shanghai, China
Contact: [email protected]
2. Scope
This policy applies when you:
- visit our website at simonp.tech;
- download, install, or use any mobile application we publish;
- contact us by email or through our website; or
- otherwise interact with our services.
Some of our applications are offered in partnership with financial institutions, mobile network operators, or other organisations. Where a partner is the controller of your data, their own privacy policy also applies, and we will make that clear at the point of collection.
3. Personal data we collect
We collect only the data we need to operate our services. Depending on which of our applications you use, this may include:
3.1 Information you give us
| Category | Examples | Why we need it |
|---|---|---|
| Identity data | Name, date of birth, gender, photograph | Account creation and identity verification |
| Contact data | Mobile number, email address, postal address | Account access, notifications, support |
| Identity-verification data | Government-issued ID details, ID document images, selfie for liveness checks | Meeting know-your-customer and anti-money-laundering obligations |
| Financial data | Mobile-money or bank account identifiers, transaction history, balances | Processing payments and maintaining your wallet |
| Correspondence | Messages you send to support or through our contact form | Resolving your enquiry |
3.2 Information collected automatically
| Category | Examples | Why we need it |
|---|---|---|
| Device data | Device model, operating-system version, unique device or app-instance identifiers, language, region | Compatibility, security, fraud prevention |
| Usage data | Features used, screens viewed, session duration, crash and diagnostic reports | Improving reliability and product design |
| Network data | IP address, mobile network operator, connection type | Security, fraud prevention, service optimisation |
| Approximate location | Coarse location derived from IP or network, where you grant permission | Regulatory compliance, fraud prevention, localised service |
3.3 Permissions our applications may request
We request device permissions only where a feature genuinely requires them, and we ask at the moment of use rather than at first launch:
- Camera — to capture identity documents or scan payment codes.
- Photos / files — to upload a document you choose to submit.
- Contacts — only where a feature requires selecting a recipient, and only with your explicit consent.
- SMS — where an application verifies a phone number or reads a one-time code, subject to Google Play's restricted-permission rules and your consent.
- Notifications — to send transaction and security alerts.
- Location — where a service requires it, with a clear in-app explanation.
You can withdraw any permission at any time in your device settings; some features may stop working as a result.
4. How we use your personal data
We use personal data to:
- create and administer your account and provide the service you requested;
- process transactions and maintain accurate records;
- verify your identity and meet know-your-customer, anti-money-laundering, and counter-terrorist-financing obligations;
- detect, investigate, and prevent fraud, abuse, and security incidents;
- provide customer support and respond to your enquiries;
- send service messages, and — where you have consented or where we have a legitimate interest — product communications you can opt out of at any time;
- monitor, troubleshoot, and improve the performance and reliability of our products;
- comply with legal, regulatory, tax, and reporting requirements; and
- establish, exercise, or defend legal claims.
5. Legal bases for processing
Where a legal framework requires us to identify a lawful basis — for example under the EU or UK GDPR, or under African data-protection laws that use a similar model — we rely on:
- Performance of a contract — to provide the service you signed up for.
- Legal obligation — for identity verification, financial-record keeping, and regulatory reporting.
- Legitimate interests — for fraud prevention, security, service improvement, and business administration, balanced against your rights.
- Consent — for optional permissions, marketing communications, and any processing we describe as consent-based. You may withdraw consent at any time.
6. How we share personal data
We do not sell your personal data. We may share it with:
- Service providers — cloud hosting, analytics, customer support, identity verification, and communications vendors acting on our instructions under contract.
- Financial and payment partners — banks, mobile-money operators, payment processors, and settlement partners needed to complete transactions.
- Identification and compliance providers — where required for identity verification and screening.
- Professional advisers — auditors, lawyers, and insurers, where necessary.
- Authorities — regulators, law enforcement, and courts where we are legally required or where it is necessary to protect rights, safety, or property.
- Corporate transaction parties — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality.
7. Google Play and Google services
Our applications are distributed through Google Play. Google may collect certain information in connection with your use of the Play Store, your Google account, and its own services, as described in Google's Privacy Policy.
Where our applications use Google services such as Firebase Cloud Messaging, Google Analytics for Firebase, Google Maps, or Google Play Services, those components may collect device and usage information directly. We configure them to collect the minimum necessary and disclose their use in our Google Play Data Safety declarations.
8. International transfers
We operate across Africa and Asia, and some of our service providers are located outside your country. Where we transfer personal data across borders, we take steps to ensure it remains protected — including contractual safeguards, transfer agreements, and provider due diligence — consistent with applicable data-protection law.
9. Data retention
We keep personal data only as long as necessary for the purposes described in this policy. Retention periods are determined by:
- how long you maintain an account with us;
- statutory record-keeping and anti-money-laundering retention requirements, which in many jurisdictions require financial records to be kept for several years after a relationship ends;
- the time needed to resolve disputes and enforce agreements; and
- regulatory or legal instructions that require longer retention.
When data is no longer needed, we delete it or irreversibly anonymise it.
10. Security
We apply technical and organisational measures appropriate to the risk, including encryption of data in transit, access controls, least-privilege administration, logging and monitoring, and staff confidentiality obligations. No system is completely secure; we cannot guarantee absolute security, but we maintain incident-response procedures and will notify you and any relevant regulator where the law requires it.
11. Your rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data, subject to our legal retention obligations.
- Restrict or object to certain processing.
- Port data you provided to us in a structured, machine-readable format.
- Withdraw consent where processing is based on consent.
- Complain to your local data-protection authority.
To exercise any of these rights, email [email protected]. We will respond within the timeframe required by applicable law. We may need to verify your identity first. Account deletion is also available through our dedicated account deletion process.
12. Children's privacy
Our services are not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.
13. Cookies and similar technologies
Our website uses only the cookies and local storage strictly necessary for it to function. We do not use third-party advertising or tracking cookies on this website. If we introduce analytics or advertising technologies in future, we will update this policy and, where required, request your consent first.
14. Changes to this policy
We may update this policy to reflect changes in our practices, our products, or the law. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice in our applications or by email.
15. Contact us
Questions about this policy or our handling of your personal data:
Email: [email protected]
General: [email protected]
Post: Room 1-2, Floor 1, Building 4, No. 1628 Lizheng Road, Lin-gang Special Area, China (Shanghai) Pilot Free Trade Zone, Shanghai, China