Privacy Policy
1. What we collect
Account data (you provide)
- Your name and email address, used to create and identify your account.
- Your profile photo — shown when you receive or request money, and only to people transacting with you. You can turn this off in the app (Profile → Show photo on codes).
Payment data (created as you use Qwei)
- Wallet balance and transaction history: amount, counterparty, timestamp, status (pending / successful / failed / expired), and the reference that ties a payment to the server's verification result.
- Payment requests you create, share or cancel (QR codes and their expiry).
Security data
- Whether a payment PIN is set, and whether biometrics are enabled — as flag records so the app knows to lock the payment flow. The PIN itself is never stored on our servers; it lives in your device's secure storage and only a verification result (not the secret) is used by the app.
- Biometric matching and storage happen entirely on your device via the operating system. We never receive fingerprints or face data.
Technical data
- Your authenticated session token, so the app can talk to our server securely.
- Diagnostics of failures in payment flows (for example, a network interruption during a request). Error text may include times and references — never your PIN or payment secrets.
2. When you fund your wallet
Wallet funding routes through a licensed Nigerian payment processor. When that flow is live, your bank or card details are captured and handled by the processor. Qwei does not receive, see, or store your card numbers, bank logins, or payment credentials — only the outcome (paid / pending / failed) is recorded in your history.
3. Where your data lives
| What | Where | Why |
|---|---|---|
| Account, balances, transactions, payment requests | Secured hosted database (Supabase) | The server — not your phone — is the truth for money records |
| Payment verification & webhooks | Server-side functions | Verification must never depend on the client |
| Website & shared payment links | Cloudflare Pages | Static hosting; these pages carry no personal data |
| Payment PIN, biometric preference, session token | Your device only | Secrets we can't see are secrets we can't leak |
4. What we never do
- We never sell your personal information, to anyone, ever.
- We run no advertising trackers, no cross-app tracking, no behavioral profiling.
- We never decide on our own that a payment "succeeded" — every outcome is reported by the server. A connection drop during confirmation is treated as unverified, not as money moved, and we will never show you success we can't stand behind.
5. Who can see what
- People paying you: your name, your profile photo (if enabled), and any amount and expiry attached to a request you shared.
- People you pay: equivalently, their name and photo.
- Service providers: infrastructure and payment processor partners, only as needed to operate Qwei.
- Nobody else — unless law compels us, and then we'll tell you where we legally can.
6. Your choices and rights
- Hide your balance on the home screen at any time.
- Turn off your photo on shared codes from the Profile screen.
- Change or remove your PIN, and switch biometric login off, in Profile → Security.
- Request your data or account deletion: deletion tooling is coming soon ahead of public launch — until then, write to the contact below and we will handle it manually.
- Requests to access, correct or export your data follow the same channel.
7. Security
Traffic is encrypted in transit. Provider secrets and verification credentials live only on our server — never inside the app, which is also why the app can walk you confidently through a payment without ever holding the keys that move money. A payment requires an explicit confirmation step (review → confirm → PIN or biometrics) with no automatic or background charging.
8. This service is pre-launch
Qwei is in active development. Data practices may gain detail (for example, crash analytics) before public launch — if so, this page will be updated and the date above will change. Wallet balances during this period are real records processed the same way as launch data.
9. Contact
Questions or data requests: the in-app support entry (Profile) is coming soon; until it ships, reach the Qwei team through the project's published channels. This page and the practice it describes always win over older wording elsewhere.
← back to qwei home