Privacy Policy
1. What this covers
This explains what personal information CityPay collects, why, who it is shared with, and what you can do about it. It applies to the website and the mobile app.
2. What is collected
Account details: your name, email address, phone number, password (stored encrypted, never visible to anyone), and the referral code you signed up with.
Identity documents: the name and Ghana Card number you enter, and photos of the front and back of your Ghana Card.
Card and money records: the cards issued to you, their balances and status, your requests, payment references and transaction IDs, wallet balance and wallet history, referral records.
Messages: support chat messages you send and receive in the app, and notification preferences.
Device information: a push notification token if you allow notifications, and basic technical information needed to keep you signed in.
3. Why it is used
To create your account and issue, load and manage your cards; to verify who you are; to confirm payments and pay referral commissions; to send you SMS, email and push updates about your account; to answer your support messages; and to detect and prevent fraud or abuse.
Your information is never sold, rented, or used for advertising.
4. Who it is shared with
Payment providers, to take and verify your payments.
An SMS provider, to deliver verification codes and account alerts to your phone.
Google, because identity documents are stored in a private Google Drive folder that only the operator can open, and because verification emails from the card issuer are read from a connected mailbox so codes can be forwarded to you.
The hosting and database provider that runs the app and stores its records.
Authorities or the card issuer, where required by law or to investigate suspected fraud.
Each of these providers handles data under its own terms. No one else receives your information.
5. Verification codes
When a verification code for your card is forwarded to your phone, a record of that relay — the code, the last four digits of the card, your phone number and the time — is kept so delivery problems can be investigated. Only the operator can see these records.
6. Who inside CityPay can see your data
The operator (administrator) can see your account details, cards, requests, payments, wallet, referral records, identity documents and support messages, in order to run the service. No other customer can see your information.
7. Security
Access is protected by sign-in, database access rules that keep each customer's records private, and encrypted connections. Identity documents are kept in a private folder that is not publicly linkable.
No system is perfectly secure. Please use a strong, unique password and never share codes sent to your phone.
8. How long it is kept
Account and transaction records are kept while your account is open and afterwards for a reasonable period, so payments, disputes and commissions can be traced.
You can ask for your data to be deleted by emailing admin@kobicity.com. Records that must be kept for financial or fraud-prevention reasons may be retained after deletion of the rest.
9. Your choices
You can view and correct your name and phone number in the app, turn SMS, email and push alerts on or off in settings, and ask for a copy of your data or its deletion by email.
10. Cookies and storage
Small amounts of data are stored on your device only to keep you signed in and remember your light or dark theme. There are no advertising or tracking cookies.
11. Children
CityPay is not for anyone under 18 and does not knowingly collect their information.
12. Contact
Questions about privacy: admin@kobicity.com, 0246229019, Kumasi Meduma, Ghana.