Privacy Policy
This policy explains what data Piaxis collects, why we collect it, and how we protect it.
Last updated: March 7, 2026
1. Who We Are
Piaxis Tech Ltd ("Piaxis", "we", "us", or "our") operates the Piaxis mobile application and the website at gopiaxis.com. We provide a financial services platform offering peer-to-peer payments, programmable escrow, store checkouts, group savings, payment links, and business management tools — primarily serving users in Uganda and East Africa.
Our registered address is Kampala, Uganda. For privacy-related enquiries, contact us at app@gopiaxis.com.
2. Information We Collect
We collect the following categories of information:
- Full name, email address, and phone number (used as your account identifier)
- National ID or passport number and scanned documents (for KYC/identity verification)
- Profile photo (optional, used to personalise your account)
- Business name, business type, and business registration details (for merchant accounts)
- Date of birth (for regulatory age verification)
- Transaction history — payments sent and received, escrow contracts, deposits, and withdrawals
- Mobile money details (e.g. MTN MoMo, Airtel Money) linked to your account for payouts
- Cart contents and order history when shopping via store QR codes
- Payment request and payment link details you create or receive
- Group savings contributions and member activity (for group wallet features)
- Camera: used to scan QR codes at store checkouts and to scan payment QR codes sent by other users. Also used to capture photos and short videos for KYC identity verification. Camera access is only active when you explicitly open the scanner or the verification flow.
- Photo library: you may choose to upload photos or documents from your device for KYC verification. We only access files you explicitly select — we do not scan your gallery.
- Approximate or precise location: used to show nearby stores and businesses on the map, and to allow merchants to set their store location. Location is requested only when you use store-discovery or map features and is never tracked in the background.
- Phone contacts: with your permission, we read your contact list to let you quickly find and pay people already on Piaxis. Contact data is matched locally on your device using hashed phone numbers — raw contact lists are never uploaded to our servers.
- Face ID / Touch ID / Fingerprint: used as an optional fast-unlock method for the app. Biometric data is processed entirely by your device's secure enclave (iOS) or Android keystore and is never transmitted to or stored by Piaxis.
- Device ID (used to identify your session and detect suspicious activity)
- Operating system, app version, and device model (for troubleshooting and compatibility)
- Push notification token (to send you payment alerts and important account updates)
- IP address and approximate network location (for fraud detection and rate limiting)
- App crash reports and performance logs (anonymised diagnostic data)
3. How We Use Your Information
- To provide the service: processing payments, escrow contracts, deposits, withdrawals, and store checkouts
- Identity verification (KYC): complying with Ugandan financial regulations and anti-money laundering (AML) requirements
- Fraud prevention and security: detecting unusual account activity, verifying device identity, and enforcing rate limits
- Customer support: investigating disputes, resolving failed transactions, and responding to your queries
- Notifications: alerting you to received payments, escrow updates, verification results, and security events
- Product improvement: analysing anonymised usage patterns to improve app performance and features
- Legal compliance: retaining transaction records as required by Ugandan financial law and tax regulations
4. Who We Share Your Data With
We do not sell your personal data. We share it only as necessary:
- Mobile money operators (MTN MoMo, Airtel Money) to process deposits and withdrawals
- KYC / identity verification providers to verify government-issued ID documents
- Cloud infrastructure providers (servers, databases, CDN) that host and operate the platform under strict data processing agreements
- Object storage (Cloudflare R2) to store profile photos and verification media
- Regulatory authorities when required by Ugandan law, court order, or to prevent fraud
- Other Piaxis users — only your display name and profile photo are visible to users you transact with. Your phone number, ID, and financial details are never shared with other users.
5. Data Retention
We retain your account data for as long as your account is active. Transaction records are kept for a minimum of 7 years as required by Ugandan financial regulations. If you delete your account, we will remove your personal profile within 30 days, but transaction records required for legal compliance are retained for the full statutory period in an anonymised form where possible.
6. Security
Communication between Piaxis clients and our servers is encrypted in transit using TLS. In supported mobile builds, we may also apply additional client-side certificate validation controls to reduce the risk of interception on hostile networks.
- Passwords and PIN codes are never stored in plain text — they are hashed with industry-standard algorithms
- Sensitive tokens are stored in encrypted device storage (iOS Keychain / Android Keystore)
- All API requests require authenticated session tokens with short expiry windows
- Suspicious login attempts trigger additional verification steps
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate information on your account
- Delete your account and personal data (subject to legal retention requirements)
- Withdraw consent for optional permissions (camera, location, contacts) at any time via your device settings without losing core payment functionality
- Receive a copy of your transaction history and account data in a portable format
- Object to processing of your data for marketing or profiling purposes
To exercise any of these rights, contact us at app@gopiaxis.com. We will respond within 30 days.
8. Children's Privacy
Piaxis is not intended for use by persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us immediately and we will remove the account and associated data.
9. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will notify you via in-app notification and update the "Last updated" date at the top of this page. Continued use of Piaxis after changes take effect constitutes acceptance of the revised policy.