Privacy Policy

1. Overview

FadPay Next is operated by FadPay, the financial platform launching in Senegal, with Mali next — one FadPay Account, a financial identity that connects your banks, cards, Wave and Orange Money, with instant transfers, tontines, business payroll and a developer API. Handling your money responsibly means handling your data responsibly.

This policy covers every FadPay product: the consumer platform, FadPay Pro for businesses, and the FadPay API for developers. It describes the personal and financial information we process and the choices you have. By creating a FadPay Account or using our services, you agree to the practices set out here.

2. Data we collect

We collect only what we need to run a safe, regulated financial service. This falls into five groups:

• Account information — your name, phone number, email address, preferred language and the profile details you provide when you open a FadPay Account.
• Identity & KYC data — government ID, date of birth, a photo or selfie, address and other documents needed to verify who you are and meet anti-money-laundering rules.
• Payment sources — stored masked only. When you connect a card, bank account, Wave or Orange Money, we keep the provider, the label you choose and a masked reference (such as the last digits). Full card and account numbers are never stored on FadPay systems.
• Transaction data — the amounts, recipients, references, timing and settlement route of every transfer, invoice or payment-link payment, tontine contribution and payroll run.
• Device & usage data — device model, browser, operating system, IP address and, for step-up authentication, a minimal trusted-device record per verified browser: a device label and when it was last seen (see section 8).

3. How we use your data

We use your information to deliver and protect the services you ask for:

• Open and operate your FadPay Account and process the payments you request.
• Route each payment across the best available settlement network for cost, speed and reliability.
• Run FadPay Pro payroll and settle pay instantly into employees' FadPay Accounts.
• Compute your FadPay Score from your own activity — visible to you alone (see section 6).
• Verify your identity, recognise your trusted devices, prevent fraud and keep the platform secure.
• Meet our legal and regulatory duties, including KYC, AML, sanctions and transaction monitoring.
• Provide support, send service notifications and improve the platform.

We do not build advertising profiles from your activity, and we never sell your personal information.

4. Legal bases for processing

Depending on the activity, we rely on one or more of the following legal bases:

• Performance of a contract — to deliver the FadPay Account and services you sign up for.
• Legal obligation — to comply with financial-services, KYC and AML regulation.
• Legitimate interests — to secure the platform, prevent fraud and improve our products.
• Consent — for optional features such as marketing messages or the authorizations described in section 7, which you can withdraw or revoke at any time.

5. How we share data

We share data only where it is needed to move your money or meet the law — never to sell it:

• Payment & banking partners — the networks we route through (Wave, Orange Money, card schemes such as Visa and Mastercard, and banks) receive only what is needed to settle the specific transaction you asked for.
• Compliance & authorities — regulators, financial-intelligence units and law enforcement, where we are legally required to report or respond.
• Service providers — vetted vendors that host infrastructure, verify documents or provide fraud-detection tools, all bound by strict data-processing agreements.
• Your employer, for FadPay Pro — if you are paid through an employer, they see the payroll details relevant to your pay — never your Balance, your other transactions or your FadPay Score.
• Businesses you authorize — only the attribute answer you approved (for example "Eligible"), only for the duration you approved. Never numbers, never documents (see section 7).

We never sell your personal data, and we do not share it for third-party advertising.

6. The FadPay Score

Your FadPay Score is computed from your own activity — account activity, verified identity attributes, connected sources, tontine discipline and money in. It exists to open doors for you, not to profile you:

• The Score is visible only to its owner. No other user, employer, business or partner can look it up.
• It is never shared without an explicit authorization from you — one that is temporary, tied to a stated purpose, and revocable at any time.
• Even with an authorization in place, the requester never sees the number: they receive only the attribute answer to the question you approved.
• The Score is deliberately unavailable on the FadPay API — requests for it are refused by design, for every caller.

7. Verification requests & authorizations

When a business asks to verify something about you — eligibility, an income requirement, an identity attribute — the request comes to you first, and the answer is designed to reveal the minimum:

• Answers are attributes only — "Eligible", "Verified", "Income requirement satisfied" — never your score, salary, balance or documents.
• You approve each request yourself, with step-up confirmation. A request you ignore or deny shares nothing.
• Every authorization is temporary — it expires on its own — and you can revoke it from your dashboard at any time, with immediate effect.
• You keep the full history: who asked, what they asked, what was answered, and when it expired or was revoked.

8. Trusted devices

Signing in to FadPay uses step-up authentication. For each browser you verify, we keep a minimal trusted-device record: a device label (for example "Chrome · macOS") and when it was last seen. That is all — no browsing history, no contents of your device.

These records exist so that a new or unrecognised browser must complete a verification step before it can reach your Account. You can review your trusted devices in your dashboard and revoke any of them at any time; a revoked device must verify again before its next sign-in.

9. Tontines & shared activity

Tontines are collective by nature, but your participation data is privacy-scoped:

• Members see the group's name, the contribution amount and each other's aliases — not personal details, and never anyone else's balance.
• There are no public winners: payout recipients are never revealed to other members or to anyone outside the group.
• You see your own contributions and your own payouts only. The organiser sees just the roster needed to run the group.

10. Data retention

We keep your personal data for as long as your FadPay Account is active, plus the period we are legally required to retain it afterwards. As a regulated financial provider, records of transactions, identity checks and compliance decisions are held for the minimum retention period set by applicable law — typically several years after an account closes.

When data is no longer needed for these purposes, we securely delete it or irreversibly anonymise it so it can no longer be linked to you. Expired and revoked authorizations remain in your history so you keep the record of what was shared and when.

11. How we protect your data

Protecting your money and your data is engineered into every layer of FadPay. Information is encrypted in transit and at rest, payment sources are held as masked references only, and sensitive actions — new devices, authorizations, large movements — require step-up verification before they proceed.

A dedicated compliance engine runs continuous fraud detection, transaction monitoring, velocity checks, sanctions and PEP screening, document verification and risk scoring. Access to production systems is tightly restricted, logged and regularly reviewed.

12. Your rights

You have meaningful control over your personal data. Subject to our legal obligations as a financial institution, you can:

• Access — request a copy of the personal data we hold about you.
• Correct — update inaccurate or incomplete information.
• Delete — ask us to erase data we are no longer required to keep.
• Port — receive your data in a portable, machine-readable format.
• Revoke — withdraw consent you previously gave, including any verification authorization, at any time.
• Object or restrict — limit certain processing where the law allows.

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by law.

13. International data transfers

FadPay launches in Senegal, with Mali next, and works with card networks and banking partners in several countries. Where your data is transferred outside your home country, we ensure it stays protected by appropriate safeguards — such as contractual data-protection clauses and partners held to standards equivalent to those described in this policy.

14. Cookies & tracking

Our website uses a small number of cookies and similar technologies. Essential cookies keep you signed in, remember your language and theme, recognise your trusted devices and help protect against fraud — these are required for the site to work. We use limited, privacy-respecting analytics to understand how the site performs.

We do not use advertising or cross-site tracking cookies. You can manage non-essential cookies at any time through your browser settings.

15. Children

FadPay Next is not intended for anyone under 18, and we do not knowingly open Accounts for minors — identity verification is required to create an account. If we learn that we have collected data from someone under 18, we will close the account and delete the associated information.

16. Changes & contact

We may update this policy as our products, partners or legal obligations evolve. When we make material changes, we will notify you in the app or by email and update the date at the top of this page. If you have questions about your privacy, want to exercise your rights, or wish to reach our Data Protection Officer, get in touch.