Privacy Policy

1. Introduction

Welcome to Vimba Digital ID. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.

This Privacy Policy complies with:

• Google Play Store Developer Policy
• Apple App Store Review Guidelines
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable data protection laws

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide when creating and managing your digital ID profile:

• Identity Information: First name, last name, date of birth, gender, marital status, ID/passport number
• Contact Information: Email address, phone number, physical addresses
• Employment Information: Company details, job responsibilities, employment dates, employer contact information
• Education Information: Institution names, field of study, education type, completion status
• Financial Information: Bank account details, account holder name, branch information (encrypted and securely stored)
• Documents: Uploaded documents such as IDs, certificates, proof of address, and other verification documents
• Profile Picture: Optional profile photo
• Location Data: Country, province/state, city information for addresses

2.2 Automatically Collected Information

When you use our App, we may automatically collect:

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App features used, time spent in the app, interaction patterns
• Log Data: IP address, access times, app crashes, and performance data
• Camera Access: When you use QR code scanning features (only when actively scanning)

2.3 Information We DO NOT Collect

• We do not collect information from children under 13 years of age
• We do not track your location continuously
• We do not access your contacts, SMS, or call logs
• We do not collect biometric data without explicit consent

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: To create and maintain your digital ID profile
• Verification: To verify your identity and authenticate your documents
• Communication: To send you important updates, security alerts, and service notifications
• Improve Services: To analyze usage patterns and improve app functionality
• Security: To detect, prevent, and address fraud, security issues, and technical problems
• Legal Compliance: To comply with legal obligations and enforce our terms of service
• Customer Support: To respond to your inquiries and provide technical support
• Promotions: To manage promotional campaigns and rewards (with your consent)

4. Data Sharing and Disclosure

4.1 When We May Share Information

We may share your information only in the following limited circumstances:

• With Your Consent: When you explicitly authorize us to share specific information
• Service Providers: With trusted third-party service providers who assist in operating our app (e.g., cloud hosting, analytics) under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
• Protection of Rights: To protect our rights, privacy, safety, or property, and that of our users

4.2 Third-Party Services

Our App may integrate with third-party services:

• Cloud Storage: For secure data backup and storage
• Analytics: To understand app usage (anonymized data only)
• Push Notifications: To send you important alerts

These third parties are contractually obligated to protect your data and use it only for specified purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Secure Storage: Personal data is encrypted at rest using AES-256 encryption
• Access Controls: Strict access controls limit who can view your information
• Authentication: Multi-factor authentication and JWT token-based security
• Regular Audits: Regular security audits and vulnerability assessments
• Secure Development: Following secure coding practices and regular security updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

You have the following rights regarding your personal information:

6.1 Access and Portability

• Right to access your personal data
• Right to receive a copy of your data in a portable format

6.2 Correction and Update

• Right to correct inaccurate information
• Right to update your profile information at any time

6.3 Deletion

• Right to request deletion of your account and associated data
• Right to be forgotten (subject to legal retention requirements)

6.4 Restriction and Objection

• Right to restrict processing of your data
• Right to object to certain data processing activities

6.5 Withdraw Consent

• Right to withdraw consent for data processing at any time
• Right to opt-out of promotional communications

To exercise any of these rights, please contact us using the information provided in Section 12.

7. Data Retention

We retain your personal information only for as long as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. Children's Privacy

Our App is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions by relevant data protection authorities
• Your explicit consent where required

10. Camera and QR Code Scanning

Our App uses your device camera for QR code scanning features:

• Camera access is requested only when you use the QR scanning feature
• We do not record, store, or transmit camera feed
• Only the scanned QR code data is processed
• You can deny camera permission and use manual code entry instead
• Camera access can be revoked at any time in your device settings

11. Push Notifications

We may send you push notifications for:

• Important security alerts
• Document verification status updates
• Account activity notifications
• Promotional offers (with your consent)

You can disable push notifications at any time through your device settings or app preferences.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy in the App
• Sending you an email notification
• Displaying a prominent notice in the App

Your continued use of the App after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

14. Compliance and Regulatory Information

This Privacy Policy complies with:

• GDPR (EU): General Data Protection Regulation
• CCPA (California): California Consumer Privacy Act
• POPIA (South Africa): Protection of Personal Information Act
• Google Play Store: User Data Policy
• Apple App Store: App Store Review Guidelines

15. Your Consent

By using our App, you consent to this Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use our App.