Privacy Policy for CashPay

Last Updated: Oct 31, 2025

This Privacy Policy describes how Cache Technologies (Pvt) Ltd. (hereafter "we," "us," or "our") collects, uses, and shares your information when you use our CashPay mobile application (the "App"). We are committed to protecting your privacy and handling your data in an open and transparent manner.

This Privacy Policy is designed to comply with the Google Play Store's policies and relevant privacy regulations. By downloading, installing, or using the CashPay App, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Information We Collect

To provide you with our payment services, we need to collect certain personal and financial information. We collect the following types of information:

a) Personal Identification Information:

• Full Name: To identify you and personalize your account.
• Email Address: To communicate with you regarding your account, transactions, and for security purposes such as sending verification codes.
• National Identity Card (NIC) Number: For identity verification and to comply with anti-money laundering (AML) and know your customer (KYC) regulations.
• Mobile Number: To register your account, facilitate payments, and send transactional alerts.

b) Financial Information:

• Bank Account Details: This includes your bank name, account number, and branch information to link your bank account with your CashPay wallet for adding and withdrawing funds.

c) Information from Your Device:

• Device Information: We may collect information about your device, including the model, operating system, and unique device identifiers, to enhance security and improve our service.
• Log Data: When you use our App, we automatically collect certain information in server logs, including your IP address, access times, and app features you've used.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain Our Services: To create and manage your account, process your transactions, and provide you with customer support.
• For Security and Verification: To verify your identity, protect against fraud, and ensure the security of your account and our services.
• To Communicate with You: To send you important notices, updates, security alerts, and support messages.
• To Comply with Legal Obligations: To adhere to applicable laws and regulations, including those related to financial services and anti-money laundering.
• To Improve Our App: To understand how our users interact with our App and to improve its features, performance, and user experience.

3. App Permissions

To ensure the full functionality of the CashPay App, we require certain permissions on your Android device. Below is a description of these permissions and why we need them:

• Internet Access: This permission is essential for the App to connect to the internet and communicate with our servers. It allows us to process payments, update your account information, and perform all other online functionalities required for the app to work.
• Camera: We require access to your device's camera to enable features like scanning QR codes for quick and easy payments. The camera is also used to allow you to upload photos of documents required for identity verification (KYC).
• Post Notifications: This permission enables us to send you push notifications to your device. These notifications are used to alert you about your transaction status, account security alerts, and other important updates related to our service.
• Biometric Hardware (Fingerprint/Face): To enhance the security of your account, this permission allows you to use your device's built-in biometric sensors (like fingerprint or face recognition). This can be used to log in to the App and authorize transactions quickly and securely, providing an alternative to a PIN or password.

4. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• With Your Consent: We may share your information with third parties when we have your explicit consent to do so.
• With Service Providers: We may share your information with trusted third-party service providers who perform services on our behalf, such as identity verification, data analysis, and fraud prevention. These providers are contractually obligated to protect your information and are not authorized to use it for any other purpose.
• For Legal Reasons: We may disclose your information if we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request.
• To Enforce Our Policies: We may share information to enforce our Terms of Service and other policies, and to protect the rights, property, and safety of Cache Technologies (Pvt) Ltd., our users, and the public.

5. Data Security

We are committed to protecting your information. We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures include data encryption, firewalls, and secure server facilities. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

6. Data Retention

We will retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

7. Your Rights and Choices

You have certain rights regarding your personal information. These include:

• Access and Update: You can review and update your personal information through your account settings within the CashPay App.
• Deletion: You may request the deletion of your account and personal information by contacting us at the email provided below. Please note that we may be required by law to retain certain information for specific periods for legal and security purposes.

8. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Cache Technologies (Pvt) Ltd. Email: info@cache.lk