2. Information We Collect

Depending on the features you use, IngodoYanje may collect the following categories of information.

Personal Information

We may collect:

• Full name
• Mobile phone number
• Email address
• Residential or mailing address
• Date of birth (where required)
• National identification or customer identification number (where applicable)

Banking and Transaction Information

To provide banking services, we may collect:

• Wallet number
• Transaction history
• Beneficiary information
• Payment details
• Cardless withdrawal requests
• Deposit and transfer information

Device Information

We may automatically collect:

• Device model
• Operating system version
• Device identifiers
• Mobile network information
• Application version

Network Information

We may collect:

• IP address
• Connection timestamps
• Error reports

Location Information

With your permission, the application may collect approximate or precise location information to:

• Improve security
• Detect fraudulent activity
• Assist with regulatory compliance
• Improve customer services

Location access is optional unless required for a specific banking service.

Camera Access

If you grant permission, the camera may be used for:

• QR code scanning

The application never records video without your knowledge.

Storage Access

Storage permission may be requested to:

• Save downloaded statements
• Upload supporting documents
• Store temporary application files

Biometric Authentication

Where supported by your device, IngodoYanje may use:

• Fingerprint authentication

BCB does not receive or store your fingerprint or facial data.

3. Why We Collect Your Information

We collect personal information to:

• Authenticate users securely
• Create and manage customer accounts
• Process banking transactions
• Support cardless withdrawals
• Detect and prevent fraud
• Monitor suspicious activities
• Comply with banking regulations
• Verify customer identity
• Improve application performance
• Send important account notifications
• Respond to customer support requests
• Protect the security of our systems
• Meet legal and regulatory obligations

We only collect information necessary to provide our services.

4. Third-Party Services

IngodoYanje may use trusted third-party service providers to support application functionality.

These services may include:

• Google Play Services
• Firebase Messaging (Push Notifications)
• Firebase Analytics
• Identity verification providers
• Secure payment processing providers

These providers may receive limited information necessary to perform their services, including:

• Device identifiers
• Crash reports
• Application performance information
• Push notification tokens
• Authentication information
• Technical diagnostic information

These third parties are required to protect your information and may only use it for authorized purposes.

5. Data Retention

We retain personal information only as long as necessary to:

• Provide banking services
• Maintain customer accounts
• Resolve disputes
• Detect fraud
• Meet legal and regulatory obligations
• Comply with financial record retention laws

When personal information is no longer required, it is securely deleted, anonymized, or destroyed in accordance with applicable laws and internal data retention policies.

Certain banking records may be retained for longer periods where required by financial regulations.

6. Data Security

Protecting customer information is one of our highest priorities.

We implement appropriate administrative, technical, and physical safeguards including:

• HTTPS/TLS encrypted communications
• Encryption of sensitive information
• Secure authentication mechanisms
• Multi-factor authentication where applicable
• Role-based access controls
• Security monitoring
• Fraud detection systems
• Secure data centers
• Regular security assessments
• System logging and auditing

Although we take reasonable measures to protect your information, no system can guarantee absolute security.

7. Your Privacy Rights

Depending on applicable laws, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Update your account details
• Request deletion of personal information where legally permitted
• Withdraw consent where processing is based on consent
• Object to certain processing activities
• Request additional information regarding how your data is processed

Some requests may be limited where retention is required by banking regulations or other legal obligations.

Privacy requests may be submitted using the contact information below.

8. Children's Privacy

IngodoYanje is intended for individuals who are legally eligible to use banking services.

The application is not directed toward children under the applicable minimum legal age.

We do not knowingly collect personal information from children. If we become aware that such information has been collected, we will take appropriate steps to delete it where legally permitted.

9. Changes to This Privacy Policy

BCB may update this Privacy Policy from time to time.

When significant changes are made, we will notify users through one or more of the following:

• In-app notification
• Application update notice
• Website announcement
• Other appropriate communication channels

The “Last Updated” date at the top of this Privacy Policy will always indicate the latest revision.

Continued use of IngodoYanje after changes become effective constitutes acceptance of the updated Privacy Policy.

10. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal information, please contact us:

• Organization: BCB
• Application: IngodoYanje
• Email: info@bcb.bi
• Telephone: +257 222 01 111
• Customer Support: support@bcb.bi
• Physical Address: BCB, Bujumbura, Burundi