Privacy Policy

Last updated: January 8, 2026

At Amanpay, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Personal Information:

  • Full name and phone number (for account creation)
  • ID documents and photos (for KYC verification)
  • Address and location data (for agent services)
  • Biometric data (Face ID/Fingerprint - stored locally on your device only)

Transaction Information:

  • Payment history and transaction details
  • Balance and account activity
  • Agent interactions and cash deposit/withdrawal records

Technical Information:

  • Device information (model, OS version, unique identifiers)
  • IP address and location data
  • App usage data and error logs

2. How We Use Your Information

  • Account Management: Create and manage your Amanpay wallet account
  • Transaction Processing: Process money transfers, deposits, and withdrawals
  • KYC Verification: Verify your identity to comply with financial regulations
  • Fraud Prevention: Monitor and prevent fraudulent activities
  • Customer Support: Provide assistance and resolve issues
  • Service Improvement: Analyze usage patterns to enhance our services
  • Communication: Send transaction notifications, updates, and security alerts

3. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
  • Secure Storage: Passwords and PINs are hashed using bcrypt
  • Biometric Data: Face ID and fingerprint data never leaves your device
  • Access Control: Strict role-based access control for our team
  • Regular Audits: Security audits and penetration testing
  • Monitoring: 24/7 monitoring for suspicious activities

4. Data Sharing and Disclosure

We do NOT sell your personal information. We may share data only in these limited cases:

  • With Agents: Basic transaction details when you use agent services
  • Service Providers: Third-party services that help operate our platform (SMS, cloud hosting)
  • Legal Requirements: When required by Iraqi law or regulation
  • Fraud Prevention: To prevent fraud and protect user safety
  • With Your Consent: When you explicitly authorize us to share

5. Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data (subject to legal retention requirements)
  • Data Portability: Export your data in a machine-readable format
  • Opt-Out: Unsubscribe from marketing communications
  • Withdraw Consent: Revoke permissions you've granted

To exercise these rights, contact us at privacy@amanpay.com

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Transaction records are kept for 7 years as required by Iraqi financial regulations.

7. Children's Privacy

Amanpay is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have inadvertently collected such information, please contact us immediately.

8. International Transfers

Your data is primarily stored and processed in Iraq. We may use cloud services that operate in other countries, but we ensure appropriate safeguards are in place to protect your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of Amanpay after changes indicates acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

By using Amanpay, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.