Privacy Policy

We collect only what we need to run your wallet and process your payments:

Some information never leaves your phone, and we cannot access it:

• Your wallet private keys and your 12-word recovery phrase.
• The local copy of your PIN, kept in your device's secure storage.
• Your local transaction history, used so the app works without internet.
• Camera images used to scan QR codes. They are processed on your device and are not uploaded. QR images are saved to your gallery only when you choose to save them.

Because we never receive your private keys or recovery phrase, we cannot recover them for you. Keep your recovery phrase safe and never share it with anyone, including people claiming to be from Pijin.

• To create, secure and manage your account and verify your phone number.
• To process, settle and record your payments, online and offline.
• To show the recipient's name before you confirm a payment.
• To send you SMS verification codes and payment receipts.
• To prevent fraud, abuse and duplicate payments, and to keep the service secure.
• To respond to your support requests.

We do not sell your personal information, we do not show ads, and the app does not include analytics or advertising trackers.

When someone enters your phone number or Short ID to send you money, Pijin shows them your first and last name and Short ID so they can confirm they are paying the right person. Payment receipts also show the names of the sender and receiver.

Pijin settles payments on the Stellar network. Wallet public keys, the Short ID registry, payment amounts and transaction history recorded on Stellar are public and permanent. They are not linked to your name, email or phone number on the blockchain, but they cannot be changed or deleted by anyone, including Pijin.

We use trusted providers that process data on our behalf, only to run Pijin:

• Vercel, for hosting our website and servers.
• A cloud PostgreSQL database provider, for storing account and transaction records.
• Upstash, for temporary storage of verification codes, rate limits and our payment queue.
• TextBee, our SMS gateway for verification codes, receipts and offline payments.
• The Stellar network, for settling and recording payments.

We may also disclose information if required by law, or to protect the rights, safety and security of our users and the service.

• All data between the app and our servers is encrypted in transit using HTTPS.
• PINs are stored only as hashes, and repeated wrong attempts lock the account temporarily.
• Private keys are kept in your device's secure storage and never sent to us.
• Screenshots are blocked on sensitive screens, and app data is excluded from device backups.
• Requests are rate-limited to protect against abuse.

No system is completely secure, but we work to protect your information and review our safeguards regularly.

• Account details: kept while your account is active, and deleted within 30 days after you request deletion.
• Transaction and settlement records: kept for up to 5 years for fraud prevention and legal compliance.
• Verification codes: deleted automatically after 5 minutes.
• Blockchain records: permanent, as explained in section 5.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable laws, you have the right to be informed about, access, correct, object to the processing of, and request deletion of your personal information.

To delete your account and its data, follow the steps on our Delete Account page. For any other request, email us at support.pijin@gmail.com. If you believe your data privacy rights have been violated, you may also file a complaint with the National Privacy Commission of the Philippines.

Pijin is not intended for anyone under 18 years old, and we do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.

Pijin is currently in testing and runs on the Stellar test network. Balances in the test version have no real monetary value. We will update this policy before Pijin handles real money.

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above, and for significant changes we will notify you in the app or by other means.

Questions about this policy or your data? Email us at support.pijin@gmail.com.