Last updated: May 5, 2026
1. Account and verification data
- When you register, we collect your first name, last name, email address, and account role so your Co-Money profile can be created.
- Your password is stored as a secure hash. The server also creates OTP verification codes and expiry times to confirm your email address.
- We record the time when you accept this policy because registration is allowed only after Privacy Policy acceptance.
2. Wallet, points, and QR activity
- We maintain wallet balances, point totals, expiry dates, and reward balances needed to show and use Co-Money benefits.
- We store earn, spend, refund, adjustment, purchase amount, discount, shop, merchant, and customer transaction details for account history and settlement.
- QR codes and scan records are used to identify customers and merchants during point earning, redemption, and purchase settlement.
3. Stores, areas, offers, and support
- Representative, retailer, merchant, store, and customer links may be stored so the right users can manage the right shops and customers.
- Geographic areas and store-area assignments are used to organize shop access, promotions, and representative coverage.
- Promotions, events, claims, complaints, and notification records are processed to operate offers and customer support.
4. Device permissions and preferences
- Camera access is used for QR scanning. Co-Money does not need the camera when you are not scanning a QR code.
- If enabled, we store push notification tokens, platform, and timing data so the app can send account, offer, and event updates.
- Language and app preferences are used to present the app in the selected experience.
5. How we use information
- We use data to create accounts, verify email, manage wallets, process points, display stores, and run merchant/customer workflows.
- We use activity records to prevent misuse, debug errors, enforce access rules, and protect customers, merchants, representatives, and admins.
- We use account, complaint, and transaction details to answer support requests and improve reliability.
6. Sharing and admin access
- Merchants, representatives, retailers, and admins may see only the customer, wallet, store, area, and transaction information needed for their role.
- Admins can import and export master data for representatives, retailers, stores, and users, and those actions are restricted to admin accounts.
- We do not sell customer personal data.
7. Retention, security, and choices
- We keep information while your account is active and as needed for transaction history, legal obligations, security, and support.
- We use technical and administrative safeguards such as password hashing, role-based access, OTP expiry, and server-side validation.
- You can request correction, account deletion, or support from the app where available, or by contacting Co-Money support.