Privacy Policy
Binusu ("we") lets you buy and sell digital assets using your own wallets. This policy explains what we collect, why, and your choices.
What we collect
- Account details: your name, phone number, country and a 4-digit PIN (stored only as a one-way hash; we can never read it).
- Identity (KYC): your email address and National ID Number. Phone, email and ID number are encrypted at rest.
- Device information: a random device identifier generated by the app, the device name and platform, and the IP address of requests — used to protect your account.
- Wallets: the public addresses of wallets you link. We never ask for or store private keys or recovery phrases.
- Transactions: orders, amounts, payment references, blockchain transaction hashes and your gas fee wallet history.
How we use it
To create and secure your account, verify your identity, process purchases and sales, apply limits and fees, prevent fraud, meet legal obligations, and contact you about your account.
Who we share it with
Only what each service needs to do its job:
- Payment providers (mobile money and card processors, through our payment hub) — your phone number, name, email and payment amounts.
- Messaging providers (WhatsApp and Telegram) — your phone number, to deliver verification codes.
- Public blockchains and blockchain data services — wallet addresses and transaction hashes are public by nature.
- Authorities — when the law requires it.
We do not sell your personal data.
How long we keep it
While your account is active, and afterwards for as long as financial and anti-money-laundering laws require. When you delete your account, your phone number and email are released and your account can no longer be used; transaction and identity records are kept only for that legal period.
Your rights
You can view your details in the app, change your email, phone and PIN, and delete your account. Contact us to access or correct your data.
Security
Encryption at rest for sensitive fields, device-bound sessions, PIN lockouts, signed and verified payment notifications, and continuous security monitoring.