WAYAKI
Privacy Policy
Wayaki ("Wayaki", "we", "us", "our") operates the Wayaki mobile and web application (the "App"), which provides a custodial crypto wallet, a mobile-money wallet, and a virtual bank account inside a single account. This Policy explains what personal data we collect, why we collect it, how it's used and protected, and the choices you have. It applies to everyone who uses the App or wayaki.com.
Because Wayaki moves money and facilitates crypto custody, we are required by financial regulation and by our banking, payment and crypto-custody partners to collect more identity and financial information than a typical app. We collect only what is needed to open and run your account, verify your identity (KYC/AML), move funds safely, and meet legal record-keeping obligations.
1. Information we collect
| Category | Examples |
|---|---|
| Account & contact info | Full name, email address, phone number, password (stored as a salted hash), date of birth |
| Identity / KYC data | Government-issued ID details and document images, selfie/liveness check, KYC tier status, address, nationality |
| Financial & transaction data | Wallet balances (crypto, mobile-money, virtual bank account), deposit/withdrawal history, P2P transfers, merchant payments, remittance records, linked mobile-money numbers, card/payment top-up metadata (card top-ups are processed by Stripe — Wayaki does not store full card numbers) |
| Crypto wallet data | Your custodial wallet address(es), on-chain deposit/withdrawal transaction hashes and amounts |
| Device & usage data | Device model/OS, app version, IP address, crash logs, in-app activity used for fraud/AML monitoring and product analytics |
| Support communications | Messages, attachments and metadata when you contact support |
2. How we use your information
- Create and secure your account, and verify your identity as required under KYC/AML rules
- Process deposits, withdrawals, swaps, P2P transfers, merchant payments and remittances
- Detect and prevent fraud, money laundering, sanctions violations and abuse
- Provide customer support and respond to your requests
- Meet record-keeping and reporting obligations to regulators and law enforcement
- Improve app reliability, performance and features
- Send transactional notifications (OTP codes, transaction receipts, security alerts) and, where you've agreed, product updates
3. Who we share it with
We do not sell your personal data. We share it only where necessary to run the service:
- Payment & mobile-money processors — Stripe, Paystack and Waafi, to process card top-ups and mobile-money deposits/withdrawals
- Liquidity & market-data providers — Binance, for live crypto pricing and (where enabled) trade execution
- Communications providers — Resend, to deliver OTP and transactional emails
- Cloud infrastructure — our hosting and database providers, to run the app and store data securely
- Regulators, banks and law enforcement — where legally required, including for AML/KYC compliance
- Professional advisors — auditors, compliance consultants and legal counsel, under confidentiality obligations
4. Data retention
We retain account, identity and transaction records for as long as your account is active, and afterward for the period required by applicable financial record-keeping and AML regulations (typically 5–7 years after account closure). Support communications are retained only as long as needed to resolve your request and meet audit obligations.
5. Your rights
Subject to our regulatory record-keeping obligations, you can:
- Request a copy of the personal data we hold about you
- Correct inaccurate account information from within the App's Settings
- Request deletion of your account and associated personal data (financial and identity records that we're legally required to retain will be retained for the mandated period and then deleted)
- Withdraw consent for non-essential communications at any time
To exercise any of these rights, email support@wayaki.com from the email address on your account.
6. Security
We use encryption in transit and at rest, access controls, and monitoring to protect your data. Crypto assets are held in custody infrastructure with restricted key access. No system is 100% secure, and we encourage you to use a strong, unique password and enable any available account-security features.
7. International transfers
Wayaki serves users primarily in Somalia, East Africa and the diaspora, and uses infrastructure and processors located in other countries. Where we transfer personal data across borders, we rely on appropriate safeguards required by applicable law.
8. Children's privacy
Wayaki is a financial service and is not directed at, or intended for use by, anyone under 18. We do not knowingly collect personal data from children.
9. Changes to this policy
We may update this Policy as our services or legal obligations change. We'll post the revised version here with an updated effective date, and where changes are material, we'll notify you in the App or by email.
10. Contact us
Questions about this Policy or your data can be sent to support@wayaki.com.