Last Updated: February 24, 2026
Your Privacy Matters
At XuXu, we take your privacy seriously. This policy describes how we collect, use, and protect your personal information.
1. Information We Collect
For All Users:
- Phone number (required for account creation and OTP verification)
- Email address (for admin users)
- Transaction history and contribution records
- Device information and IP address
- Cookies and usage data
Additional Information for Administrators (KYC)
To comply with regulatory requirements and ensure platform security, administrators must provide:
- Full legal name (first name and last name)
- GH Post Address
- Government-issued ID document (image)
- ID document type and number
This information is collected to verify administrator identity and is stored securely.
2. How We Use Your Information
We use the collected information to:
- Create and manage your account
- Process and track contributions
- Verify administrator identity (KYC)
- Send OTP codes and transaction notifications
- Improve and optimize our platform
- Detect and prevent fraud or abuse
- Comply with legal obligations
- Resolve disputes and provide customer support
3. Administrator KYC Data Retention
Administrator KYC information is retained for compliance purposes. Even after account deletion, we may retain KYC data as required by law or for fraud prevention. This includes:
- Full name and identification details
- ID document images (stored encrypted)
- Verification status and timestamps
Members' personal information (optional first/last name, address) may be deleted upon request, subject to legal retention requirements for transaction records.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information:
- With Service Providers: Third-party vendors who help us operate the platform (payment processors, SMS providers, cloud storage)
- For Legal Reasons: When required by law, regulation, or legal process
- To Protect Rights: To enforce our terms, prevent fraud, or protect the safety of our users
- With Administrators: Member names and contact information may be shared with cell administrators as necessary for cell management
5. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption of sensitive data, including ID documents
- Secure, authenticated API access
- Regular security audits and monitoring
- Access controls and employee training
- Secure data centers with industry-standard protections
However, no method of transmission over the Internet is 100% secure. We strive to protect your information but cannot guarantee absolute security.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your information (subject to legal exceptions)
- Object to or restrict certain processing
- Data portability
- Withdraw consent at any time
To exercise these rights, please contact us. Note that we may need to verify your identity before processing requests.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. You can control cookies through your browser settings.
Types of cookies we use:
- Essential cookies: Required for platform functionality
- Authentication cookies: To keep you logged in
- Analytics cookies: To understand how users interact with our platform
8. Children's Privacy
XuXu is not intended for users under the age of 18. We do not knowingly collect information from minors. If you believe a minor has provided us with information, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. By using XuXu, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification. The "Last Updated" date at the top indicates when changes were last made.
11. Contact Us
If you have questions about this Privacy Policy, please contact us:
Data Protection Officer
For privacy-related inquiries, you may also contact our Data Protection Officer:
By using XuXu, you consent to the collection and use of your information as described in this Privacy Policy.