Your privacy, protected.

Welcome to Spendbyte (“Spendbyte,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, store, disclose, and protect information about you when you download, install, register for, or use the Spendbyte mobile application (the “App”) and any related services, features, content, websites, or APIs (collectively, the “Services”).

By creating an account or using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

Spendbyte provides a campus-oriented mobile experience that blends real-world location-based hunts, digital payments, peer-to-peer transfers, a wallet, rewards/redemption, and social discovery features.

We collect information in three ways: (a) information you give us, (b) information collected automatically, and (c) information from third parties.

3.1 Information You Provide

• Account information: name, username, email address, phone number, date of birth, profile photo, school/campus, and password (stored hashed).
• Identity & verification data: information required for KYC, fraud prevention, or age verification where applicable.
• Payment information: linked card details (tokenized via our payment processors), bank/mobile-money account references, transaction amounts, recipients, memos, and balances within your in-app wallet.
• Hunt & gameplay data: marker scans, participation, completion times, scores, claimed rewards, and redemption codes.
• User content: messages, feedback, support requests, photos you submit, and any content you post in social/explore features.
• Communications: correspondence with support and survey responses.

3.2 Information Collected Automatically

• Location data: precise (GPS) and approximate location while the App is in use, used to display your position on the map, find nearby hunts/shops/rewards, and validate geofenced events. We do not collect background location unless you explicitly enable a feature that requires it.
• Motion & sensor data: accelerometer and pedometer/step-count data used together with GPS to smooth your position and reduce GPS drift near tall buildings.
• Camera data: images captured solely to scan hunt markers. Marker images are processed on-device and are not retained on our servers unless you choose to upload them (e.g., for feedback).
• Device information: device model, OS version, unique device identifiers, language, time zone, mobile carrier, IP address, and crash logs.
• Usage data: screens viewed, features used, taps/sessions, referral source, and performance metrics.
• Authentication data: Face ID / Touch ID is processed entirely on your device by Apple. We only receive a success/failure signal — we never see your biometric template.
• Cookies & similar technologies: used in any in-app web views and on related websites for session, security, and analytics.

3.3 Information from Third Parties

• Payment processors & financial partners: transaction status, payment confirmations, chargebacks, and risk signals.
• Identity / fraud-prevention providers: verification results and risk scores.
• Map & geolocation providers (e.g., Mapbox): map tiles, place data, and search results.
• Analytics & crash reporting (e.g., Amplitude, Firebase): aggregated product analytics and stability data.
• Social/sign-in providers: if you choose to connect them, basic profile information you authorize them to share.

We use your information to:

• Create and manage your account and authenticate you (including Face ID).
• Provide core features: hunts, marker scanning, the map, wallet, payments, transfers, redemption, and rewards.
• Process and settle transactions, prevent fraud, and meet financial-services obligations.
• Personalize content, recommend nearby hunts/shops, and improve discovery.
• Send transactional messages (receipts, security alerts, hunt updates) and, with your consent, marketing messages.
• Maintain safety and integrity (e.g., detect cheating, multi-accounting, or abuse).
• Improve, test, and develop new features through analytics and aggregated research.
• Comply with legal obligations and enforce our Terms.

Where data-protection laws such as the GDPR apply, we rely on: performance of a contract, your consent (e.g., for precise location, marketing, optional features), our legitimate interests (e.g., security, product improvement), and compliance with legal obligations (e.g., AML/KYC).

We do not sell your personal information. We share it only as described below:

• Service providers: cloud hosting, analytics (Amplitude), crash reporting, customer support, mapping (Mapbox), notifications, and payment processing — all under contractual confidentiality and security obligations.
• Payment & financial partners: as needed to complete transactions you initiate.
• Other users: limited profile information (e.g., username, avatar) when you participate in hunts, send/receive payments, or interact socially.
• Legal & safety: to comply with law, lawful requests, court orders, or to protect rights, safety, and property.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard protections.
• With your consent: for any other disclosure not listed above.

You can change permissions at any time in your device settings:

• Camera: required only for scanning hunt markers.
• Location (When In Use): required for the map, nearby content, and geofenced hunts. Disabling it limits gameplay.
• Motion & Fitness: improves location accuracy; disabling it may cause map drift near tall buildings but will not block use.
• Face ID: optional convenience for sign-in and sensitive actions; you can use your passcode/PIN instead.

We retain personal information only for as long as needed to provide the Services, comply with our legal obligations (including tax, accounting, and AML record-keeping for financial transactions, which may require retention of up to 7 years depending on jurisdiction), resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymized.

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest for sensitive fields, secure key storage in the iOS Keychain, signed/nonce-protected hunt actions, and device-level protections (Face ID/passcode). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

The Services are not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from such children. If you believe a child has provided us information, contact us and we will delete it.

Depending on where you live, you may have rights to:

• Access, correct, or delete your personal information.
• Object to or restrict certain processing.
• Withdraw consent at any time.
• Port your data to another service.
• Lodge a complaint with a data-protection authority.

You can exercise most rights in-app under Settings → Account, or by emailing us (see Section 15). We may need to verify your identity before responding.

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

The App may include links to or integrations with third-party services (e.g., merchants, map providers, payment networks). Their privacy practices are governed by their own policies, which we encourage you to review.

We may update this Privacy Policy from time to time. Material changes will be communicated in the App or by email. Continued use of the Services after changes take effect constitutes acceptance.

For privacy questions or to exercise your rights:

• Email: contact@spendbyte.com
• Postal: Spendbyte — Privacy Office, Accra, Ghana

See also our Terms and Conditions.