Privacy Policy

Last updated: July 2026

Customers who pay

Paying through a Tap2Pay page requires no account, no name and no phone number. When a pay page is opened or a payment is started we record the event with an anonymized (hashed) form of the network address, basic device info (screen size, platform, network type) and the amount — this powers the merchant's own analytics. The actual payment happens on your mobile-money provider under their terms. Pages you visit can be stored on your own phone, encrypted, so they work offline; we cannot read that storage.

Merchants

For merchant accounts we store your business name, chosen username, cashier configuration, contact phone (used for WhatsApp verification codes), and login email. Payment analytics recorded on your pages belong to you and are exportable from your portal at any time.

What we don't do

We do not sell data. We do not show ads. We do not share merchant or customer data with third parties except as required by Somali law.

Security

Logins are protected with WhatsApp verification codes; portal sessions use short-lived tokens; sensitive changes require re-verification; and our databases are backed up daily with integrity checks. Report security issues to admin@tapsii.so — we take them seriously.