XashPay app privacy policy

Information used by the service

• Account and sign-in: your name, registered phone number, email when supplied, verification status, PIN authentication records, session tokens and linked-device records.
• Wallet and payments: balances, amounts, fees, references, payment status, receipts, voucher details and provider responses needed to process and reconcile your transactions.
• Recipients and services: the numbers and account details you enter, such as mobile numbers, electricity meter numbers, TV account numbers and customer details returned by providers.
• Uploads and support: proof-of-payment images or PDFs you choose to send, support messages and information needed to investigate a payment or account issue.
• Device and security: an app device identifier, device name, app version, notification preferences, IP address, request information and authentication attempts used to operate and protect the service.

Why we use this information

We use it to create and secure your account, verify sign-in, provide balances and transaction history, process the services you request, deliver account alerts, answer support requests, investigate errors and prevent fraud. Financial and security records also support reconciliation, disputes and applicable record-keeping obligations.

Device features and permissions

Internet access connects the app to XashPay. Optional biometric sign-in uses your device's authentication system. XashPay does not receive your fingerprint, face scan or biometric template.

The app stores session credentials and preferences on your device. Notifications show account updates when you enable them. Files or images are uploaded when you choose to submit proof of payment. Downloaded statements and shared receipts contain transaction information, so choose carefully where you save or share them. On older Android versions, saving a statement may require storage permission.

Service providers and sharing

Information needed to complete your request is shared with the relevant telecom, electricity, television, voucher, payment or wallet provider. Hosting, storage, messaging and support systems process information to operate and secure XashPay. If you use the linked WhatsApp service, that channel also processes messages under its own terms and privacy practices.

Records may be disclosed where required by law or necessary to investigate fraud, resolve a dispute or protect users. Service providers may process information in countries other than your own. The data required depends on the service you choose.

Security and your choices

The app uses HTTPS for its API traffic and authenticated access for account features. Keep your phone and PIN secure. Do not send your PIN, one-time codes or banking passwords by email. You can manage available notification and biometric settings in the app and contact support to request access to, correction of or deletion of your personal data.

Retention and account deletion

You can request deletion in Profile > Delete account, or use the account-deletion page without installing or signing in to the app.

An accepted in-app request signs you out and starts a 30-day cancellation window. Signing back in before the scheduled date cancels the request. After the window, the account cleanup removes the profile name, email, phone association, PIN, session information, device registrations and app access tokens. A remaining or newly received wallet balance can delay completion; contact support for help resolving it.

Account cleanup does not erase the financial ledger or every related business record. Transaction, payment, provider, proof-of-payment, support and security records may remain where needed for reconciliation, disputes, fraud prevention or applicable legal obligations. Their retention can extend beyond the 30-day account window. Financial and payment records, including payment proofs, are kept for the periods required by applicable financial, tax and other laws. Support, security and service records are kept only for as long as reasonably necessary to resolve issues and protect and operate the service. When information is no longer required, it is deleted or anonymised. Contact support for the records retained for your account, the reason and applicable retention period, or to request deletion of other associated data.

Updates and contact

We will update this page when the app's data practices change. The date above identifies the latest version.

For privacy requests, email support@xashpay.com. Include your registered phone number only when needed to identify your account. We may verify ownership before sharing or changing account information.