Privacy Policy

Last updated: 30 July 2026

This Privacy Policy explains how CrossApp - AI ("CrossApp", "we", "us", "our") collects, uses, discloses and protects information when you use our mobile application and related services (the "App"). By creating an account or using the App, you agree to the collection and use of information as described here.

1. Information We Collect

Account & profile information

When you sign up, we collect your phone number (used to create and log in to your account), and optionally your first and last name, display name, bio, email address, date of birth, and address if you choose to add them to your profile.

Identity verification (KYC)

To enable wallet and payment features, we may ask you to complete identity verification through a third-party verification provider. This can include government-issued ID information and related verification data, which is processed on our behalf to confirm your identity and meet financial-services regulatory requirements.

Payments & transactions

We collect information about your CrossApp wallet balance, linked cards and bank accounts, and the transactions you make — including transfers to other users, mini program purchases, coupons applied, and the resulting receipts and tickets. Card and bank details are handled through our licensed payment processing partners; we do not store full card numbers on our own servers.

Messages & chat activity

CrossApp's chat feature is built on the Matrix messaging protocol. We store the messages, media and metadata needed to deliver your conversations across your devices. Some conversations may support end-to-end encryption, in which case message content is not readable by us in transit or at rest.

Contacts

If you grant permission, we access your phone's contact list to help you find friends who already use CrossApp and to let you know when a contact joins. We only use contact phone numbers for this matching purpose and do not use them for any other purpose without your consent.

Camera, photos & location

With your permission, we access your camera and photo library to let you scan QR codes (for payments and adding contacts), set a profile picture, and use camera-based mini program features. Certain mini programs (such as identity or ticket-related features) may use on-device face detection; this processing happens locally on your device and is not used to identify you outside the specific feature. With your permission, we also access location data for features like map-based mini programs and merchant/service discovery.

Device, usage & diagnostic information

We use Firebase and related tools to collect device information (such as device model and operating system version), app usage events (such as which mini programs you open, chat usage, QR scanner usage, and completed payments), crash and performance diagnostics, and a push-notification token so we can deliver notifications to your device.

Biometric authentication

If you enable fingerprint or face unlock for signing in or approving payments, that authentication is handled entirely by your device's own operating system (e.g. Android Keystore or Apple's Secure Enclave). We never receive, see, or store your biometric data — the app only receives a yes/no confirmation from your device.

2. How We Use Information

• To create and secure your account, and authenticate you when you sign in.
• To provide core features: messaging, payments, mini programs, coupons, receipts and tickets.
• To verify your identity and comply with financial-services and anti-fraud regulations.
• To send you transactional notifications (e.g. payment confirmations, chat messages) and, where permitted, service updates.
• To detect, investigate and prevent fraud, abuse, and security incidents.
• To understand how the App is used so we can fix bugs and improve features.
• To respond to support requests and communicate with you about your account.

3. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

• Payment & verification partners — licensed payment processors and identity-verification providers, solely to process transactions and verify identity.
• Mini program partners — the minimum information needed to fulfil a specific purchase (e.g. a phone number for an airtime top-up), when you use a mini program provided by a third party.
• Service providers — infrastructure and analytics providers (such as Firebase/Google) that process data on our behalf under contractual confidentiality obligations.
• Other users — information you choose to share in chats, your profile, or when sending/requesting money.
• Legal & safety — where required by law, regulation, legal process, or to protect the rights, property or safety of CrossApp, our users, or the public.

4. Data Retention

We retain account and profile information for as long as your account is active. Transaction, ledger and identity-verification records are retained for the period required by applicable financial-services and anti-money-laundering regulations, even after an account is closed. Chat messages are retained to keep your conversation history available across your devices, subject to any deletion or retention settings you apply within the App.

5. Your Rights & Choices

• You can review and update most profile information directly within the App.
• You can control camera, contacts, location and notification permissions from your device settings at any time.
• You can request a copy of, or the deletion of, your account and associated data — see our Delete Account page for how.
• You can unlink a payment card or bank account from your wallet settings.

6. Children's Privacy

CrossApp is not directed at children and is not intended for use by anyone under the age of 12, given the App's financial and payment features. We do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will take steps to remove it.

7. Security

We use industry-standard technical and organizational measures — including encryption in transit, access controls, and secure storage of sensitive credentials on your device (via the Android Keystore or iOS Keychain) — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and will provide additional notice for material changes where appropriate.

9. Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at privacy@getcrossapp.com.