Data handling and selective disclosure

Profile information remains resident on the user's Android device until an active transaction QR code is scanned at a participating retail terminal. The companion application presents every requested data field individually, requiring affirmative user action before any transmission occurs.

We maintain no central registry of consumer purchase habits, and cross-merchant tracking is architecturally prevented. Each bill-specific interaction stands entirely alone, ensuring that data delivered to one merchant is never shared with another.

Once approved fields are delivered to a participating merchant's POS system for a specific bill, those records become subject entirely to that respective merchant's privacy policy and data governance practices.

[LEGAL_OPERATOR] Operational Guidelines