Privacy policy

Last updated 26 October 2026

Wallet Escrow is a final-year student project at Strathmore University, Nairobi. It is an academic prototype: payments run on the M-Pesa sandbox, and no real money moves. This policy explains what the app collects, why, and what happens to it.

What we collect

• Your name and mobile number, given when you register. The number is confirmed with a one-time SMS code.
• Your PIN, stored only as a one-way hash. Nobody can read it back.
• A device identifier created by the app, stored only as a hash, so a new phone needs an SMS code before it can sign in.
• Your escrows and wallet activity: items, amounts, delivery periods, status changes, deposits, withdrawals and transfers.
• Disputes and ratings: the reason you choose, any note you write, and the optional star rating a buyer gives.

Fingerprint or face unlock is handled by your phone. The app never receives your fingerprint or face.

We do not collect your location, contacts, photos or identity documents, and the app shows no advertising.

How we use it

• To run your account, your wallet and your escrows.
• To set each escrow's inspection period and limit. A seller's past escrows (completed, refunded, disputed and rated) are used to estimate the chance that an escrow fails. The estimate is never shown to anyone.
• To settle disputes. Two dispute reviewers see the escrow, both parties' statements and their past escrows.
• To keep a tamper-evident record of every payment and status change.

Who we share it with

• Safaricom (M-Pesa): your number and the amount, to process deposits and withdrawals.
• Africa's Talking: your number and the one-time code, to send the SMS.
• Microsoft Azure and Cloudflare: they host the service and store its data.
• The other party to an escrow: they see your name and number on that escrow.

We do not sell your data or share it for advertising.

How long we keep it

We keep your data while your account is open. One-time codes expire after five minutes.

When you delete your account, your name, number and PIN are removed. Records of past escrows, payments and disputes are kept, because they are the financial record of what happened and the other party relies on them. They no longer show your name or number. See Delete your account.

How we protect it

All traffic uses HTTPS. PINs, codes and device identifiers are stored only as hashes. Payment records and the audit trail cannot be edited by the service itself.

Your choices

You can see your details in the app, and delete your account from Profile. To ask for a copy of your data or a correction, email us at the address below.

Children

Wallet Escrow is for people aged 18 and over.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Email groupflowreply@gmail.com.