1. What this covers
This policy explains how your data is handled by the Binno Wallet app (the wallet, for paying), the BinnoPay app (the point of sale for businesses) and the binno.network website. The controller is Binno Network. For any question, write to soporte@binno.network.
Both apps currently run on the BINNOChain test network: the coins moved on it are test coins with no market value.
2. What we do not ask for
We do not ask for your name, email, phone number, ID document or address. The apps do not read your contacts, photos or location, and they show no ads. Your full wallet key is created and stored encrypted on your phone, and it is never sent whole to our servers.
3. What we do receive and why
- Your wallet's public address and public key. They work like an account number: they are needed to show your balance, send you money and pay the small fee of each transfer on your behalf.
- Your @username, if you choose one. It is stored with your address so others can send you money by typing your name instead of the long address. It is public on purpose.
- A notification identifier, if you accept notifications. It is issued by Google's notification service (Firebase) and we use it only to tell you about payments you receive.
- An encrypted part of your backup, if you turn on backup. Your key is split into three parts: one stays on your phone, you keep another and we keep the third. A single part cannot open the wallet; any two can, which is how you recover it if you lose your phone. With it we store the recovery code and, if you turn on two-step verification, its secret key.
- Your backup in Google Drive, if you choose that protection level. The app asks you to sign in with your Google account and stores one part of your backup in a private folder of your own Drive that only this app can read. That file is yours and we have no access to it. Your Google email is shown only on your phone so you know which account you used; it never reaches us.
- Business data, in BinnoPay only. The business name, the currency it charges in, an identifier of the point-of-sale phone and the record of its sales, so the owner can see their sales and fees can be split.
- Server technical logs, such as the internet address each request comes from and its time. They are used to stop abuse and fix faults, and are deleted after a short time.
4. What stays visible on the chain
BINNOChain is a public blockchain. Every transfer is recorded permanently with the addresses involved, the amount and the time, and anyone can look it up in the explorer. Those records are not kept by us and we cannot delete them; nobody can.
5. Phone permissions
- Camera: to read payment and pairing QR codes. The image is processed on the phone and is neither stored nor sent.
- NFC (tapping phones): to pay and get paid by holding one phone near the other.
- Fingerprint or face: to confirm it is you before sending money. The check is done by the phone itself; we never receive your fingerprint or face.
- Notifications: to tell you about payments. You can turn them off at any time in your phone settings.
6. Who it is shared with
We do not sell your data or use it for advertising. Only the services needed for the apps to work are involved: Google's notification service (Firebase Cloud Messaging) to deliver notifications, Google Drive if you keep your backup there, and the provider we rent our servers from. We would only hand data to an authority if a law requires it.
7. How we protect it
Everything travelling between your phone and our servers is encrypted. On the phone, the key is kept in the system's secure storage and protected by your PIN. Access to our servers is restricted.
8. How long we keep it and how to ask for deletion
We keep your data while you use the service. You can ask us at any time to delete your @username, your notification identifier, the backup part we keep and, if you have a business, its BinnoPay data. To do so, write to soporte@binno.network with the subject "Delete my data" and your @username or wallet address. To confirm the wallet is yours, we will ask you to make a tiny test transfer from it. We delete it within 30 days at most and let you know when it is done.
Note that once we delete the backup part, we can no longer help you recover the wallet if you lose your phone. Public chain records cannot be deleted (see section 4). Uninstalling the app deletes what was stored on the phone.
9. Children
The apps are intended for people aged 18 and over. We do not knowingly collect data from minors; if you believe a minor has given us data, write to us and we will delete it.
10. Changes
If we change this policy, we will publish the new version on this same page with its date. If the change is significant, we will also announce it inside the apps.