Maisha Privacy Policy
Last updated: 2025-09-08
This Privacy Policy describes how Maisha (“we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the Maisha mobile application and related services (the “App”). By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.
If you have questions, contact us at: info@besoft.info
1. Scope
This policy applies to all users of the App and covers information we collect through the App, our websites, and customer support channels. If you disagree with any part of this policy, please do not use the App.
2. Information We Collect
Provided by you:
- Account details: name, email, phone number, and other profile information you submit.
- Transaction details: payment method metadata (e.g., wallet type, masked card brand), transaction amounts, dates, and merchant or charity/event info.
- Support content: messages, attachments, and other information you provide to our support team.
Collected automatically:
- Device and app information: device model, OS version, app version, language, time zone, and performance logs/crash data.
- Usage data: in-app actions, screens viewed, session duration.
- Network information: IP address, approximate location inferred from IP (no precise GPS location collected unless explicitly requested and consented).
Sensitive/device permissions:
- NFC: to read NFC tags/cards for supported payment experiences.
- Network/Internet: to connect to our backend and payment providers.
- Local storage/shared preferences: to store session tokens, settings, and app state.
- WebView: to securely load payment and verification pages when required.
We do not collect biometric data, precise location, contacts, or SMS content unless explicitly stated and separately consented.
3. How We Use Information
- To provide and operate the App, process transactions, and deliver requested features.
- To authenticate users, maintain sessions, and prevent fraud/abuse.
- To improve performance, fix bugs, and develop new features.
- To provide customer support and respond to inquiries.
- To comply with legal obligations and enforce our terms.
- With your consent, for any other purpose disclosed at the time of collection.
4. Legal Bases (EEA/UK users)
We process personal data based on:
- Contract: to provide the App and process your transactions.
- Legitimate interests: security, fraud prevention, product improvement.
- Consent: where required (e.g., certain analytics/marketing).
- Legal obligations: compliance and regulatory requirements.
5. Sharing and Disclosure
We may share information with:
- Service providers and processors: cloud hosting, security, analytics, customer support, and payment partners who process data on our behalf under contracts.
- Payment networks and financial institutions: to process payments and comply with network rules and laws.
- Compliance and legal: to comply with applicable laws, lawful requests, or to protect rights, safety, and property.
- Business transfers: in connection with mergers, acquisitions, or asset sales (with appropriate safeguards).
We do not sell your personal information.
6. International Transfers
Your information may be transferred to and processed in countries with different data protection laws. Where required, we use appropriate safeguards (e.g., standard contractual clauses).
7. Data Retention
We retain information as long as necessary to provide the App, comply with legal obligations (e.g., financial and audit requirements), resolve disputes, and enforce agreements. When no longer needed, we securely delete or anonymize the data.
8. Your Rights
Subject to applicable law, you may have rights to:
- Access, correct, or delete your personal information.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Data portability.
To exercise these rights, contact us at info@besoft.info. We may need to verify your identity before responding.
9. Security
We use technical and organizational measures to protect information, including encryption in transit, access controls, and secure development practices. No method of transmission or storage is 100% secure; risks remain.
10. Children’s Privacy
The App is not directed to children.
11. Cookies and Similar Technologies
The App and embedded WebViews may use cookies or similar technologies for session management, security, and analytics. You can control cookies via device settings or in-app controls where available, but core features may require them.
12. Third-Party Services
The App may link to or integrate third-party services (e.g., payment providers, hosted web pages). Their use is governed by their own privacy policies. We encourage you to review those policies.
13. Do Not Track
We do not respond to Do Not Track signals. You can manage tracking via platform settings or in-app privacy controls where available.
14. Changes to This Policy
We may update this policy from time to time. We will post updates in the App or at the policy URL and revise the “Last updated” date. Your continued use of the App after changes constitutes acceptance.
© Maisha. All rights reserved.