Privacy policy

You provide:

• PallyTag and display name;
• Pi wallet address(es) you link, which is public blockchain information;
• profile details you choose to add, such as a photo, business name, bio, or country;
• messages you send to support, and your visibility and notification settings.

Created when you use the Service:

• searches, QR scans, and "copied wallet" actions, used to power features and to give receivers insights such as how many people searched for them;
• Pally balance, top-ups, Pro purchases, and spending history (we do not see your Pi Wallet balance or private keys);
• device and technical data, such as device type, browser, app version, language, IP address, and error logs;
• security signals, such as when a wallet was linked or changed.

We do not collect your Pi Wallet passphrase or private keys, and we do not ask for bank card details.

• To create and run your account, tag, and wallet link.
• To let other people find you and check your wallet, based on the visibility you choose.
• To charge and track Pally, Pro access, and fees.
• To show receivers insights, for example how many people searched for them or copied their wallet.
• To prevent fraud, impersonation, abuse, and look-alike wallets.
• To provide support and send you service messages.
• To improve and secure the Service.
• To meet legal requirements.

Where we rely on your consent, you can withdraw it at any time. We do not sell your personal data and we do not use it for third-party advertising.

• Your PallyTag, display name, and verified status can be seen by people who search for you or scan your QR code.
• Your wallet address is shown to a searcher after they complete a search (which may cost Pally) or use your QR code. Public display of your wallet beyond that requires your consent in your settings.
• You appear in lists such as "People on PallyPay" only if your profile is complete and you have opted in. Your country is used only to order that list.
• When someone searches for you, we may tell you that a search happened. We do not reveal the searcher's identity unless the feature says so.

We share data only as needed:

• Service providers that host and run the Service for us, such as Google Firebase and Google Cloud (hosting, database, authentication, analytics, messaging), who may only use data to provide those services;
• Pi Network and Pi Wallet, when you use Pi sign-in or Pi payments, under their own policies;
• Authorities or courts, when the law requires it or to protect people's safety and prevent fraud;
• A successor, if PallyPay is merged, sold, or restructured, and we will tell you.

Public blockchain data is public and cannot be erased by us.

Our providers may store or process your data in other countries. We choose providers that protect data with appropriate safeguards.

We keep your account data while your account is active. After you delete your account, we remove or anonymize your personal data within 90 days, except what we must keep for legal, security, or fraud-prevention reasons, or to resolve disputes. Support records are kept for up to 24 months. Backups are overwritten on a regular cycle.

We use encryption in transit, access controls, and monitoring suited to the risk. No system is completely secure, so please protect your own device and sign-in. If a data breach affects your personal data in a way that puts you at risk, we will tell you without undue delay and explain what you can do.

You have the right to:

• know how your data is used;
• access your data and receive a copy;
• correct inaccurate or incomplete data;
• delete your data, where we have no lawful reason to keep it;
• restrict or object to certain uses of your data, including marketing;
• receive your data in a portable format;
• withdraw consent at any time.

Most choices are in your profile and privacy settings. For anything else, use Talk to support inside the app. We will reply within 30 days and may need to confirm your identity first.

PallyPay is for adults only. We do not knowingly collect data from anyone under 18. If you believe a child has an account, contact us through support and we will remove it.

We use local storage, cookies, and similar technologies only where needed to keep you signed in, protect the Service, remember your settings, and measure performance.

If we make a material change, we will notify you in the app before it applies. The "Last updated" date shows the latest version.

For any privacy question or request, use Talk to support inside the app.