DhPay Privacy Policy

Effective date: 27 October 2026
Last updated: 27 October 2026

1. Introduction

DhPay (“DhPay,” “we,” “our,” or “us”) is a mobile application that allows users to browse and purchase digital products and services offered by DhPay and participating partners.

This Privacy Policy explains how DhPay collects, uses, stores, discloses, and protects personal information when you use the DhPay mobile application and related services.

DhPay is currently operated by a project team and is not yet operated by a registered company. The responsible operator's legal name and contact details must be published here once confirmed.

By using DhPay, you acknowledge that you have read this Privacy Policy. Where consent is legally required for a particular type of data processing, we will seek that consent separately.

2. Information We Collect

2.1 Account information

When you register or use an account, we may collect:

• Email address and/or phone number.
• Account identifier and profile information.
• Password credentials, stored and processed using appropriate security measures rather than as readable plain text.
• Account status and registration-related records.

If you sign in with Google, Google shares only your name and email address with DhPay. We don't receive your Google password or access anything else in your Google account.

You are responsible for providing an accurate email address and keeping your account credentials secure.

2.2 Purchases and transaction records

When you make a purchase or use DhPay's wallet, we may collect and maintain:

• Products or services ordered.
• Order and purchase identifiers.
• Purchase amounts and currency.
• Payment method and transaction status.
• Relevant timestamps and order history.
• Refund requests, decisions, and related communications.

These records are used to process orders, provide customer support, resolve disputes, and maintain appropriate transaction records.

2.3 Payment receipts and proof of payment

When you pay through an external payment method, you may be asked to upload a screenshot, photograph, or other proof of payment.

We may process and store that file, together with information you provide about the payment, to:

• Verify whether a payment was made.
• Approve or reject a purchase or wallet top-up.
• Investigate disputed transactions.
• Prevent fraud and misuse.
• Maintain evidence supporting the transaction decision.

Uploaded receipt files are stored on our server's filesystem. Please review receipts before uploading them and avoid including unrelated personal information.

Payment verification and wallet top-up approval are performed manually by authorized administrators. Uploading a receipt does not by itself mean that a payment has been approved.

2.4 Wallet information

DhPay may maintain an internal wallet balance and associated transaction history for your account.

We process wallet balances, credits, debits, top-up requests, and related status records to administer the wallet and support purchases. Wallet top-ups funded through external payments may require manual verification before the balance is credited.

The DhPay wallet is intended for purchases within the application. It is not designed for transfers between users or cash withdrawals.

2.5 Technical and diagnostic information

Depending on the features enabled in the app and server, we may process technical information such as:

• IP address and server request logs.
• Device or application information necessary for service operation.
• Error logs, timestamps, and security events.
• Push-notification registration tokens, if notifications are enabled.

We use this information to operate the service, troubleshoot errors, protect accounts, and investigate suspicious activity.

We do not claim to collect device location, contacts, photographs, or other device data unless a specific feature requires it and the relevant permission or notice is provided.

3. How We Use Your Information

We use personal information for the following purposes:

1. Creating and managing user accounts.
2. Authenticating users and protecting account access.
3. Displaying products and processing purchases.
4. Recording wallet balances and transaction history.
5. Reviewing uploaded payment receipts and verifying external payments.
6. Approving or rejecting wallet top-ups and resolving payment disputes.
7. Handling refund requests and customer-support inquiries.
8. Sending essential service and transaction notifications.
9. Maintaining service reliability, security, and performance.
10. Detecting fraud, abuse, and violations of our Terms & Conditions.
11. Complying with applicable legal obligations.

We do not sell personal information to third parties. We do not use payment receipts for unrelated purposes.

4. Legal Grounds for Processing

Where applicable law requires a legal basis for processing personal information, we rely on the basis appropriate to the specific activity. This may include:

• Service performance: processing needed to create your account, provide app functionality, and complete purchases.
• Legal obligations: processing required to maintain records or respond to lawful requests.
• Legitimate interests: protecting the service, preventing fraud, securing accounts, and resolving disputes, where permitted by law.
• Consent: processing based on your consent where consent is required, including certain optional permissions or communications.

You may withdraw consent where processing relies on consent. Withdrawal does not affect processing that was lawful before withdrawal or processing that has another valid legal basis.

5. How We Share Information

We may disclose relevant information only where necessary and appropriate to the following categories of recipients:

5.1 Authorized DhPay administrators

Authorized administrators may access account, purchase, wallet, and payment-verification information to operate the service, verify payments, investigate disputes, and provide support.

5.2 Partner sellers

Where a purchase involves a partner seller, we may share the information reasonably needed to fulfil the order, such as the order details and information necessary to deliver the purchased product or service.

Partners are responsible for handling information they receive in accordance with applicable law and their relevant obligations.

5.3 Hosting and technical service providers

DhPay's data is stored on our own hosted server infrastructure. Technical providers may process limited information when necessary to provide hosting, network connectivity, backups, or related infrastructure services.

5.4 Push-notification providers

If push notifications are enabled, technical providers may process notification tokens or related delivery information to send notifications to your device.

5.5 Legal and safety disclosures

We may disclose information when required by law or a valid legal request, or when reasonably necessary to protect users, investigate suspected fraud, enforce our terms, or protect the rights and security of DhPay and others.

We do not authorize recipients to use your information for purposes unrelated to the service they provide or the lawful reason for disclosure.

6. Data Storage and International Transfers

Account, purchase, wallet, and related application data is stored on server infrastructure used by DhPay. Uploaded payment receipts are stored on the server's filesystem.

The physical server location, backup locations, and any international data transfers must be assessed and documented by the DhPay team. Where information is stored or accessed across borders, we will apply the safeguards and procedures required by applicable law.

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including transaction administration, dispute resolution, security, and legal obligations.

Specific retention periods should be established for account records, transaction records, uploaded receipts, technical logs, and backups.

7. Data Security

We use reasonable technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure, loss, and misuse.

These measures should include, as appropriate, access restrictions, secure authentication, protected communications, controlled administrator access, and appropriate server and backup security.

No internet transmission or storage system can be guaranteed to be completely secure. We cannot promise absolute security, but we will take appropriate steps to protect information and respond to security incidents in accordance with applicable law.

8. Data Retention and Account Deletion

We retain personal information for the period needed to provide DhPay services and meet legitimate operational, security, dispute-resolution, and legal requirements.

You may request account deletion by contacting us at the address listed in Section 12 or using our account-deletion page:

Account deletion: https://api.dhpay.cloud/delete-account/

Deleting an account may not immediately erase every associated record. Certain transaction, fraud-prevention, dispute, or legally required records may need to be retained for an applicable period. Where retention is required, we will restrict the information to the relevant purpose as appropriate.

You can delete your account yourself in the app: Profile → Delete account. Your name, email address, phone number and notification token are removed, you are signed out on every device, and the account can no longer be used. Your email address and phone number can then be used to create a new account. Order, payment and wallet records are kept, without your name or contact details, because they are needed for accounting, disputes and fraud prevention. An account cannot be deleted while its wallet has a balance or an order is not finished.

9. Your Rights and Choices

Subject to applicable law, you may have the right to:

• Request access to personal information associated with your account.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where applicable.
• Object to or request restriction of certain processing where such rights apply.
• Withdraw consent for processing based on consent.
• Lodge a complaint with the competent data-protection authority.

To exercise your rights, contact us using the details in Section 12. We may need to verify your identity before acting on a request.

Some information may need to be retained where permitted or required by law, or where necessary to resolve a transaction or dispute.

10. Children's Privacy

DhPay is not intended for children who are not legally permitted to use the service. The minimum permitted age and any parental-consent requirements must be confirmed and applied in accordance with applicable law and the app's distribution requirements.

We do not knowingly collect children's personal information in circumstances where doing so is prohibited. If you believe a child has provided personal information inappropriately, contact us so we can assess the request and take suitable action.

11. Third-Party Services and External Payments

DhPay may interact with external payment services or other third-party services. When you make a payment outside DhPay, the external provider's own terms and privacy policy may apply to information it collects directly.

DhPay does not claim to control the privacy or security practices of independent third parties. You should review their policies before using their services.

DhPay's manual review of uploaded payment proof does not mean that DhPay operates or controls the external payment provider.

12. Contact Us

For privacy questions, access or deletion requests, or concerns about the handling of personal information, contact:

• Service: DhPay mobile application
• Website: https://api.dhpay.cloud/
• Privacy/support email: dhpaysupport@gmail.com
• Responsible operator: [INSERT THE RESPONSIBLE OPERATOR'S LEGAL NAME]
• Business or contact address, if applicable: [INSERT VERIFIED CONTACT DETAILS]

The contact email and responsible-operator details must be completed before this Policy is published.

13. Changes to This Privacy Policy

We may update this Privacy Policy when DhPay's features, data practices, or legal obligations change.

The updated version will be published at the designated Privacy Policy URL with a revised “Last updated” date. Where required by law, we will provide additional notice or seek consent before implementing relevant changes.

14. Applicable Law

This Privacy Policy is intended to be applied in accordance with applicable data-protection and other relevant laws, including Algerian personal-data protection legislation where applicable.

The relevant legislation includes Law No. 18-07 of 10 June 2018, as amended and supplemented by Law No. 25-11 of 24 July 2025. The DhPay team should obtain legal advice to confirm its specific obligations before publication.

End of Privacy Policy