Privacy Policy
Last updated: October 31, 2025
Introduction
Citizen Pay ("we", "us", or "our") is a digital payment platform designed for real-world cryptocurrency acceptance. This Privacy Policy outlines how we collect, use, and protect your personal data when you use our services.
Scope
This policy applies to all users of Citizen Pay, regardless of where they are located, so long as they engage with our payment services and platform.
Data We Collect
We collect the following types of data:
| Data Type | Description | Purpose | Stored |
|---|---|---|---|
| Phone Number | Used to send SMS login codes and link your account | Account login and authentication | Not stored |
| Email Address | Collected only when using Stripe for payment | Used for payment confirmation and receipts | Stored (only for Stripe users) |
| Transaction Data | ERC20-compatible transaction details (e.g. sender, recipient, amount, timestamp) | To process and display your payments | Stored |
| Transaction Messages | Optional text messages attached to transactions | Displayed alongside transactions to provide context | Stored |
| Public Profile (optional) | Username and profile picture | To make it easier for others to find you | Stored |
| Push Notification Token (optional) | Device token for notifications | To send alerts for incoming transactions | Stored |
| Anonymized Crash/Error Reports | Application logs and errors (without personally identifiable information) | To improve stability and performance | Stored |
Additionally, when you make a payment via Stripe, Stripe will collect your payment details, such as card information or bank account details. These are handled directly by Stripe and are never stored by Citizen Pay.
Legal Basis for Processing
- Consent
- For optional features like public profiles and push notifications.
- Contract Performance
- To provide our payment services and process transactions.
- Legitimate Interest
- For crash reports and analytics to improve our services.
Data Sharing
- Third-Party Payment Processors (Stripe)
- When you use Stripe for payments, your payment data is processed by Stripe according to their privacy policy.
- Analytics and Crash Reporting
- Anonymized data may be shared with analytics providers to improve our services.
- Legal Requirements
- We may disclose data if required by law or to protect our legal rights.
Your Rights
Under GDPR, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interest
- Automated Decision-Making: Not be subject to decisions based solely on automated processing
To exercise these rights, contact us at info@citizenpay.xyz.
Data Retention
We retain your data only as long as necessary for the purposes outlined in this policy or as required by law. Transaction data may be retained longer for regulatory compliance.
Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Children's Privacy
Citizen Pay is not intended for children under 16. We do not knowingly collect personal data from children under 16.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or our website.