Privacy Policy

RemitVals ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our money transfer platform, website, and related services (collectively, the "Services").

By using our Services, you consent to the data practices described in this policy. If you do not agree with these terms, please discontinue use of our Services.

2.1 Personal Identification Information

When you register and use our Services, we may collect:

• Full name, email address, and phone number
• Date of birth, residential address, city, state, and postal code
• Government-issued identification documents (passport, national ID, driver's license) for KYC verification
• Selfie photographs for facial verification against your ID
• Your unique RemitVals Cash Tag ($CashTag)

2.2 Financial Information

To process your money transfers, we collect:

• Transaction details including sender and recipient information, amounts, currencies, and exchange rates
• Payment method details (bank account, debit card, mobile money, or Apple Pay)
• Recipient bank account numbers, mobile money numbers, and phone numbers
• Wallet balance and transaction history

2.3 Technical Information

We automatically collect certain technical data when you access our platform, including:

• IP address, browser type, device information, and operating system
• Usage data, including pages visited, time spent, and actions taken within the app
• Cookies and similar tracking technologies to enhance your experience

2.4 Face Data and Biometric Verification

For identity verification, we collect selfie photographs, images of your government-issued identification document, and verification signals derived from the live camera capture process, such as liveness, camera trust, device fraud indicators, face-match confidence score, and verification notes. We use this face data only to confirm that the person creating or using the account matches the identity document provided, to satisfy KYC/AML compliance obligations, and to detect or prevent fraud and account misuse. We do not use face data for advertising, profiling unrelated to identity verification, or selling to third parties.

We use the information we collect for the following purposes:

• Service Delivery: To process money transfers, bill payments, and wallet transactions
• Identity Verification (KYC): To verify your identity using government-issued documents and facial recognition technology, as required by anti-money laundering (AML) regulations
• Fraud Prevention: To detect and prevent fraudulent transactions and protect your account security
• Communication: To send transaction confirmations, status updates, low-balance alerts, and important account notifications
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance
• Platform Improvement: To analyze usage patterns and improve our Services
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

Face data is used only for KYC identity verification, liveness and fraud checks, security review, compliance audits, and account-protection decisions related to RemitVals financial services. Face data is not used to train advertising systems, personalize ads, or identify users across unrelated services.

We may share your information with:

• Payment Partners: Payment processors (Stripe, Base44 Payments, Paystack), banking partners, and mobile money operators to facilitate transactions
• Service Providers: Third-party vendors who assist with identity verification, fraud detection, email delivery, and hosting
• Regulatory Authorities: Government agencies, law enforcement, or regulators as required by applicable laws
• Recipients: The recipient's name, amount, and reference are shared when you initiate a transfer

We do not sell your personal information to third parties. All data sharing is limited to what is necessary for service delivery and legal compliance.

Face data may be shared only with identity verification, fraud-prevention, compliance, hosting, and secure storage service providers that process the data on our behalf, and with regulators or law enforcement when legally required. Face data is stored in RemitVals secure app database and protected file storage provided through our hosting and backend infrastructure. We do not share face data with advertisers, data brokers, or unrelated third parties.

We implement industry-standard security measures to protect your personal information, including:

• 256-bit SSL/TLS encryption for all data in transit
• Encrypted storage of sensitive data at rest
• Multi-factor authentication (MFA) support
• Regular security audits and vulnerability assessments
• Strict access controls limiting employee access to personal data

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

We retain your personal information for as long as your account is active or as needed to provide you Services. We may retain certain data even after account closure to comply with legal obligations, resolve disputes, enforce our agreements, and prevent fraud. Financial transaction records are retained for a minimum period required by applicable financial regulations.

Face data collected for KYC is retained while your account remains active and, where required for AML, sanctions screening, fraud prevention, dispute resolution, audit, or financial-recordkeeping obligations, for up to five years after account closure or the last relevant transaction. If retention is no longer legally required, face data associated with a verified account deletion request is deleted or de-identified within 30 days after the request is completed. Users may request deletion through the account deletion and privacy rights process, subject to legal retention requirements.

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data we hold
• Rectification: Correct inaccurate or incomplete personal data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a structured, commonly used format
• Objection: Object to certain processing of your data
• Withdraw Consent: Withdraw previously given consent where processing is based on consent

To exercise these rights, contact us using the details in Section 9. We will respond within the timeframe required by applicable law.

We use cookies and similar tracking technologies to remember your preferences, keep you signed in, understand how you use our platform, and improve your experience. You can control cookie preferences through your browser settings. Disabling cookies may affect certain features of our Services.

If you have questions, concerns, or wish to exercise your data rights regarding this Privacy Policy, please contact us:

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by email or in-app notification. Continued use of our Services after changes become effective constitutes acceptance of the revised policy.