Privacy Policy

Last updated: 1 March 2026

1. Introduction

Cash Rupee (Pvt) Ltd ("Cash Rupee", "we", "us", or "our") operates the Cash Rupee mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our application and related services.

By using Cash Rupee, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information you provide

  • Account information: Full name, mobile phone number, email address, and date of birth when you register for an account.
  • Identity verification: National Identity Card (NIC) number or passport details, as required by Sri Lankan financial regulations.
  • Financial information: Bank account details and payment card information when you link accounts or add funds.
  • Transaction data: Details of payments, transfers, and top-ups you make through the app.

2.2 Information collected automatically

  • Device information: Device model, operating system version, unique device identifiers, and mobile network information.
  • Usage data: App features accessed, time and duration of use, and interaction patterns.
  • Location data: Approximate location based on IP address. We do not track precise GPS location unless you explicitly enable it for nearby merchant features.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your Cash Rupee account.
  • Process transactions including payments, transfers, and top-ups.
  • Verify your identity in compliance with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
  • Detect and prevent fraud, unauthorized transactions, and other illegal activities.
  • Send you transaction confirmations, account alerts, and service updates.
  • Improve our app, services, and customer support.
  • Comply with legal obligations and regulatory requirements.

4. How We Share Your Information

We do not sell your personal information. We may share your data with:

  • Financial partners: Banks and payment processors to facilitate your transactions.
  • Service providers: Third-party companies that assist us with hosting, analytics, customer support, and fraud detection, bound by confidentiality agreements.
  • Regulatory authorities: Government bodies and financial regulators when required by law or to comply with legal processes.
  • With your consent: Any other parties you specifically authorize.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • TLS encryption for all data transmitted between your device and our servers.
  • AES-256 encryption for data stored at rest.
  • Multi-factor authentication for account access.
  • Regular security audits and vulnerability assessments.
  • Access controls limiting employee access to personal data on a need-to-know basis.

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active and as required to comply with our legal and regulatory obligations. Transaction records are retained for a minimum period as prescribed by Sri Lankan financial regulations. You may request deletion of your account data, subject to regulatory retention requirements.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data, subject to legal retention requirements.
  • Withdraw consent for optional data processing at any time.
  • Receive a copy of your data in a portable format.

To exercise any of these rights, contact us at the details provided below.

8. Cookies and Tracking

Our website may use essential cookies to maintain session state and remember your preferences. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

Cash Rupee is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

  • Cash Rupee (Pvt) Ltd
  • Email: privacy@cashrupee.lk
  • Address: Colombo, Sri Lanka