Privacy Policy
Last updated: October 5, 2026
This Privacy Policy explains how Bayza (“Bayza”, “we”, “us”) collects, uses, shares and protects your information when you use the Bayza mobile app (io.bayza.app), the website at bayza.io, and the related financial services (together, the “Services”). It applies to the multi-currency wallet, cards, IBAN accounts, currency conversion, global transfers and digital-asset top-ups offered through Bayza.
Because Bayza is a money application, some of the information we handle is sensitive (identity documents and financial records). We treat it accordingly and only process what we need to run the Services, keep them secure and meet our legal obligations.
1. Who we are and how to contact us
Bayza provides the Services and is the controller of the personal information described here. For any privacy request or question, contact us at info@bayza.io. Postal enquiries can be addressed to Bayza, London, United Kingdom.
2. Information we collect
Information you give us
- Account details — your name, email address, phone number and password.
- Identity verification (KYC) — date of birth, nationality, residential address, government identity document details and images (for example passport, national ID or driving licence), and a live selfie or short liveness video captured with your device camera to confirm it is you. We use your camera only for this verification and for document capture; we do not access it otherwise.
- Business details — for business accounts: legal name, registration number, country of registration and related documents.
- Transaction instructions — recipient and beneficiary details you enter for transfers and payouts (such as name, bank, account number or IBAN).
- Support information — the content of messages, tickets and any attachments you send us.
Information created when you use Bayza
- Financial activity — wallet balances, card details and card transactions, IBAN account activity, transfers, currency conversions, fees and statements.
- Digital-asset top-ups — deposit addresses we assign to you and the on-chain deposits received to them.
- Referrals — referral codes, invitations and rewards.
Information we collect automatically
- Device & app data — device model, operating system, app version and settings.
- Usage data — how you interact with features, used to run the Services securely and to improve them. We do not use third-party advertising or behavioural-tracking SDKs.
- Network data — IP address and the approximate location derived from it, used for security, fraud prevention and regulatory compliance.
- Cookies on the website — see our Cookie Policy.
3. How we use your information
| Purpose | Examples |
|---|---|
| Provide the Services | Open and operate your account, process top-ups, payments, conversions and transfers, issue and manage cards and IBANs |
| Verify your identity | Run KYC checks, confirm liveness, meet “know your customer” obligations before enabling features |
| Keep Bayza safe | Detect and prevent fraud, abuse, money laundering and unauthorised access |
| Comply with law | Anti-money-laundering (AML), sanctions screening, tax, record-keeping and reporting duties |
| Support you | Respond to your requests and resolve issues |
| Improve & communicate | Improve reliability and features, and send service, security and (where permitted) product messages |
4. Legal bases for processing
Where data-protection law such as the UK/EU GDPR applies, we rely on: performance of our contract with you (to deliver the Services); compliance with a legal obligation (identity, AML and record-keeping duties); our legitimate interests (security, fraud prevention and improving the Services); and your consent (for example optional marketing), which you can withdraw at any time.
5. How we share information
We do not sell your personal information. We share it only as needed to run the Services and meet our obligations:
- Regulated partners who deliver parts of the Services — card issuing, banking and IBAN provision, and cross-border payout and remittance. Delivering your transaction requires sharing the relevant identity and transaction data with these partners.
- Identity-verification providers who process your KYC documents and liveness check.
- Technology providers for cloud hosting, storage, communications and security.
- Blockchain networks — if you top up with a digital asset, the transaction is recorded on a public blockchain by design and is outside our control.
- Authorities and advisers — regulators, law-enforcement, tax authorities, auditors and legal advisers, where required or permitted by law.
- Corporate transactions — in connection with a merger, acquisition or reorganisation, subject to this policy.
6. International transfers
Your information may be processed in countries other than your own, including by our partners and providers. Where it is transferred across borders, we use appropriate safeguards (such as standard contractual clauses or an equivalent mechanism) to protect it.
7. How long we keep your information
We keep your information for as long as your account is open and you use the Services. After your account is closed, we retain certain records — in particular identity (KYC) and transaction records — for the period required by financial and anti-money-laundering law, which is typically at least five years and may be longer where a longer period applies. We delete or anonymise information we no longer need.
8. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your information, to data portability, and to withdraw consent. To exercise any of these, email info@bayza.io.
You can also close your account and request deletion directly in the app — see our Account & Data Deletion page. Please note that we must keep some records after closure to comply with the legal obligations described in Section 7, so deletion of those records may be delayed until the retention period ends.
If you have a concern we have not resolved, you may contact your local data-protection authority.
9. How we protect your information
We use encryption in transit, access controls, secure credential storage on your device, and monitoring to protect your information. No system is perfectly secure, but we work to protect your data and to notify you and the authorities if a breach requires it. Keep your password and device secure, enable two-factor authentication, and freeze a card immediately if you suspect misuse.
10. Children
Bayza is for adults. The Services are not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a minor has used Bayza, contact us so we can address it.
11. Third-party links
The Services may link to sites and services we do not operate. Their privacy practices are their own; please review their policies.
12. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, give you additional notice through the app or by email.
13. Contact us
Privacy questions and requests: info@bayza.io.
Questions about this page? Email info@bayza.io.