Privacy Policy

Who we are

Sahra is operated by [legal entity name], [registered address] (“Sahra”, “we”, “us”). This policy explains what personal data we collect when you use the Sahra app, card and website, why we use it, who we share it with and the choices you have.

Data we collect

• Account details — your name, email address, phone number, passcode (stored only in hashed form) and the language and settings you choose.
• Identity verification — the information and documents needed to verify you, such as your date of birth, address, identity document and a selfie.
• Wallet and card activity — your deposit addresses, blockchain transactions, card transactions, balances, spending limits and statements.
• Device and security data — device identifiers, operating system, IP address, sign-in times and active sessions, and the token used to send you push notifications.
• Support conversations — messages you send us in the app, by email or through other support channels, including conversations with our in-app assistant.
• Rewards and referrals — your points, redemptions, referral code and the friends who joined with it.
• Profile photo — if you choose to add one.

How we use your data

• To open and run your account, wallet and card, and to process your transactions.
• To verify your identity and meet our legal obligations, including anti-money-laundering checks.
• To keep your account secure and prevent fraud and abuse — for example by sending sign-in codes and limiting repeated attempts.
• To send you service messages by email, SMS and push notification.
• To answer your support requests.
• To run the rewards and referral programme.
• To improve the app and website.

Who we share it with

We share personal data only as needed to provide Sahra, with:

• the card issuer and card programme partners, and the identity verification provider they use;
• providers that enable Apple Pay and Google Pay for your card;
• cloud hosting, networking and security providers;
• email, SMS and push notification providers;
• the AI provider that powers our in-app support assistant;
• authorities, where the law requires us to.

Blockchain transactions are recorded on public networks. Anyone can see a transaction and the addresses involved, although they are not linked to your name on the network.

We do not sell your personal data.

International transfers

Our providers may process data outside your country. Where they do, we use appropriate safeguards required by applicable law. [Describe the transfer mechanisms used.]

How long we keep it

We keep your data for as long as your account is open and afterwards for as long as the law requires — for example, records needed for anti-money-laundering rules. [Insert retention periods.]

Your rights

Depending on where you live, you can ask to access, correct or delete your data, object to or restrict how we use it, or receive a copy of it. You can delete your account from Settings in the app; some records may be kept where the law requires. To exercise your rights, contact us at [email protected].

Security

We protect your data with encryption, access controls and monitoring, and your account with a passcode, biometrics and optional two-factor authentication. No system is completely secure, so please keep your passcode and verification codes to yourself.

Children

Sahra is not intended for anyone under [minimum age], and we do not knowingly collect their data.

Changes to this policy

We may update this policy. We will tell you about important changes in the app or by email.