Privacy Policy

Last updated: 28 September 2026

This policy explains what the Darmaan mobile app collects about you and what we do with it. Darmaan is operated by DARMAAN TECHNOLOGIES LTD, Beledwayne, Somalia (“Darmaan”, “we”, “us”).

What we collect

• Account: your full name, phone number, and password. We store only a hashed version of your password. We do not collect your email address.
• Financial: the mobile money account numbers and crypto wallet addresses you save, your swap history (amounts, currencies, networks, status, and times), and any promo codes you use.
• Device: your push notification token, device and operating system type, and app version.
• Usage and diagnostics: your IP address and basic request logs, used for security and fraud prevention.

What we do not collect

• Biometrics: Face ID and fingerprint unlock are handled entirely by your phone’s operating system. Your biometric data never leaves your phone and we never receive it.
• Photos: the app only saves transaction receipts to your gallery when you ask it to. It never reads your photo library.
• Location and contacts: we do not collect them.

Why we use it

• To create and secure your account, including verifying your phone number with a one-time code sent by SMS or WhatsApp.
• To process your swaps and show your transaction history.
• To send you notifications about the status of your swaps.
• To provide support when you contact us.
• To meet our legal obligations, including fraud prevention and anti-money-laundering (AML) checks.

Who we share it with

We share only what is needed for each purpose:

• Payment and mobile money providers, and blockchain networks, to complete your swaps. Blockchain transactions are public by nature: wallet addresses, amounts, and times can be seen by anyone.
• SMS and WhatsApp providers, to deliver your verification codes.
• Expo, Google Firebase Cloud Messaging, and Apple Push Notification service, to deliver push notifications.
• Our hosting provider, which stores and runs our services.
• Authorities, when the law requires us to.

We do not sell your personal data.

Security

Data sent between the app and our servers is encrypted in transit (HTTPS). Your session tokens are kept in your device’s secure storage.

Retention and deletion

You can delete your account in the app (Profile → Personal Info → Delete Account) or on our account deletion page. We delete your personal data within 30 days of your request.

Some transaction records may be kept longer where the law requires it for financial and anti-money-laundering record-keeping. We keep these records for [RETENTION PERIOD — owner to fill in], then delete them.

Children

Darmaan is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

Your rights

You can ask to access, correct, or delete your personal data. You can see and update most of it in the app. For anything else, contact us using the details below and we will respond as soon as we can.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above.

Contact

Email darmaan.technology@gmail.com or call +252 615221122.