Privacy Policy

Last updated: October 31, 2025

Introduction

Citizen Pay ("we", "us", or "our") is a digital payment platform designed for real-world cryptocurrency acceptance. This Privacy Policy outlines how we collect, use, and protect your personal data when you use our services.

Scope

This policy applies to all users of Citizen Pay, regardless of where they are located, so long as they engage with our payment services and platform.

Data We Collect

We collect the following types of data:

Data TypeDescriptionPurposeStored
Phone NumberUsed to send SMS login codes and link your accountAccount login and authenticationNot stored
Email AddressCollected only when using Stripe for paymentUsed for payment confirmation and receiptsStored (only for Stripe users)
Transaction DataERC20-compatible transaction details (e.g. sender, recipient, amount, timestamp)To process and display your paymentsStored
Transaction MessagesOptional text messages attached to transactionsDisplayed alongside transactions to provide contextStored
Public Profile (optional)Username and profile pictureTo make it easier for others to find youStored
Push Notification Token (optional)Device token for notificationsTo send alerts for incoming transactionsStored
Anonymized Crash/Error ReportsApplication logs and errors (without personally identifiable information)To improve stability and performanceStored

Additionally, when you make a payment via Stripe, Stripe will collect your payment details, such as card information or bank account details. These are handled directly by Stripe and are never stored by Citizen Pay.

Legal Basis for Processing

Consent
For optional features like public profiles and push notifications.
Contract Performance
To provide our payment services and process transactions.
Legitimate Interest
For crash reports and analytics to improve our services.

Data Sharing

Third-Party Payment Processors (Stripe)
When you use Stripe for payments, your payment data is processed by Stripe according to their privacy policy.
Analytics and Crash Reporting
Anonymized data may be shared with analytics providers to improve our services.
Legal Requirements
We may disclose data if required by law or to protect our legal rights.

Your Rights

Under GDPR, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Objection: Object to processing based on legitimate interest
  • Automated Decision-Making: Not be subject to decisions based solely on automated processing

To exercise these rights, contact us at info@citizenpay.xyz.

Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy or as required by law. Transaction data may be retained longer for regulatory compliance.

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Children's Privacy

Citizen Pay is not intended for children under 16. We do not knowingly collect personal data from children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or our website.

Contact Information

Citizen Pay

Company Number: BE1029985788

Kantersteen 47

1000 Brussels

Belgium

info@citizenpay.xyz