Legal

Privacy Policy

Last updated: 4 March 2026

Your privacy matters to us. This policy explains how we handle your personal data across the Qupay platform — clearly and without legal jargon where possible.

Introduction

Qupay ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights in relation to it. By using the Qupay platform, website, or any associated services, you agree to the practices described in this policy.

Information We Collect

We collect information you provide directly to us, including: your name, email address, phone number, and country when you join our waitlist or create an account. We may also collect information automatically when you use the Service, such as your IP address, device type, browser type, operating system, referring URLs, and usage data. When you transact on the platform, metadata such as transaction timestamps, amounts, and counterparty identifiers may be recorded on-chain and are publicly visible.

How We Use Your Information

We use the information we collect to: operate and improve the Qupay platform; send you service-related communications, including waitlist confirmations and launch notifications; deliver Drop reward notifications and account updates; detect, investigate, and prevent fraudulent or illegal activity; comply with legal obligations; and respond to your enquiries and support requests. We do not sell your personal data to third parties.

Biometric Data

Qupay's verification process uses biometric identifiers (facial recognition and fingerprint data) stored and processed locally on your device via your device's built-in Trusted Execution Environment (TEE). Qupay does not store raw biometric data on its servers. Biometric verification is handled entirely on-device, and only a cryptographic confirmation token is transmitted to the platform.

Cookies and Tracking

We use essential cookies to operate the Service, including session management and security tokens. We may use analytics tools to understand how users interact with the platform. You can control cookie behaviour through your browser settings. Disabling cookies may affect certain features of the Service. We do not use cookies for advertising or cross-site tracking.

Data Sharing

We do not sell, rent, or trade your personal data. We may share your data with trusted service providers who assist us in operating the platform, subject to confidentiality agreements. We may disclose your information where required by law, court order, or regulatory authority. In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to equivalent protections.

Blockchain Data

Transactions processed on the Qupay network are recorded on a public blockchain. Data written to the blockchain — including transaction hashes, wallet addresses, amounts, and timestamps — is immutable and publicly accessible. You acknowledge that Qupay has no ability to alter or delete data that has been committed to the blockchain, and this data falls outside the scope of standard data deletion requests.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Waitlist data is retained until the platform launches and accounts are created or until you request deletion. You may request deletion of your account data at any time, subject to blockchain limitations described above.

Data Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (subject to legal and blockchain limitations); withdraw consent where processing is based on consent; and lodge a complaint with a data protection authority. To exercise any of these rights, please contact us using the details below.

Children's Privacy

The Qupay Service is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete that information promptly.

International Transfers

Qupay operates globally. Your data may be processed and stored in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where we transfer data internationally, we take appropriate steps to ensure adequate protections are in place.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated effective date. Your continued use of the Service after any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out via Telegram or through the contact information provided on the Qupay website. We aim to respond to all privacy-related enquiries within 30 days.