Privacy Policy

This Privacy Policy explains how ASAL EXCHANGE (“we”, “us”, “our”) collects, uses, stores, shares, and protects information when you use our mobile applications and related services (the “Service”). By creating an account or using the Service, you agree to this Policy.

1. Information we collect

1.1 Account & identity

• Phone number (primary identifier for registration and login)
• Display name (may be resolved from network/operator name lookup where available)
• Password (stored using secure authentication providers; we do not store plaintext passwords)
• Optional face-scan image for identity verification during registration
• Public user ID generated within the app

1.2 Transaction & wallet data

• Deposit and withdrawal requests, amounts, fees, status, and timestamps
• Payment provider selection (e.g. mobile money or betting rails)
• Payment proof images you upload
• Receiver / account identifiers you enter for transfers
• Bonus, promo, and balance-related records needed to operate the wallet

1.3 Device, security & usage

• Device model, OS version, app version, and approximate device identifiers
• IP address and approximate location (when permission is granted) for fraud prevention
• Authentication logs, OTP verification status, and security events
• Crash and diagnostic information from platform services

1.4 Support communications

• Messages you send via email, WhatsApp, or in-app support channels

2. How we use information

• Create and manage your account and authenticate access
• Process deposits, withdrawals, bonuses, and related wallet operations
• Verify identity (including face scan where required) and reduce fraud, abuse, and chargebacks
• Comply with legal, regulatory, and compliance obligations
• Provide customer support and respond to requests
• Improve reliability, security, and performance of the Service
• Send service-related notices (e.g. transaction status, security alerts)

We do not sell your personal data.

3. Legal bases (where applicable)

Depending on your jurisdiction, we process data based on:

• Contract — to provide the Service you request
• Legitimate interests — security, fraud prevention, service improvement
• Consent — where required (e.g. certain permissions or optional features)
• Legal obligation — when required by applicable law

4. Sharing of information

We may share data with:

• Infrastructure providers such as Google Firebase (authentication, database, cloud functions, analytics where enabled)
• Media storage providers such as Cloudinary for images (face verification, KYC/payment proofs)
• Payment / messaging partners needed to send OTP SMS or process payment rails you choose
• Professional advisers or authorities when required by law or to protect rights and safety

Processors act under contractual and technical safeguards appropriate to the Service.

5. International transfers

Your information may be processed in countries other than where you live (including via cloud providers). We take reasonable steps to ensure appropriate protection consistent with this Policy and applicable law.

6. Data retention

• Account and wallet records are retained while your account is active
• Transaction and security logs may be retained longer for fraud prevention, dispute handling, and legal compliance
• When you request deletion, we delete or anonymize personal data as described on our Delete Account page, subject to lawful retention needs

7. Security

We use industry-standard measures including encrypted transport (HTTPS/TLS), authenticated access, server-side authorization, and restricted administrative access. No method of transmission or storage is 100% secure; please protect your device and credentials.

8. Your rights

Subject to applicable law, you may request to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your account and related personal data
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based

To exercise these rights, contact support@asal.so or use Delete Account.

9. Children’s privacy

The Service is not directed to children under 18 (or the age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child provided data, contact us for deletion.

10. Permissions used by the app

• Camera — face verification and payment proof capture
• Photos / media — uploading payment screenshots
• Location (approximate/precise when allowed) — fraud and risk controls
• Internet / network — core Service connectivity

11. Changes to this Policy

We may update this Privacy Policy from time to time. The “Effective date” above will be revised when changes are published. Continued use of the Service after updates constitutes acceptance of the revised Policy where permitted by law.

12. Contact

ASAL EXCHANGE
Email: support@asal.so
WhatsApp: +252 610 595 324
Android package: com.applications.asal