Privacy policy
NomiOne needs some personal data to verify who you are, connect your wallet and complete payments. This policy explains what we collect and what we do with it.
01Who is responsible for your data
Oxygen7 Pte Ltd, Singapore, is the data controller for NomiOne. This policy explains what we collect, why, who processes it for us, how long we keep it, and the rights you have.
02What we collect
- Account
- Phone number, device identifiers, app version, sign-in times.
- Identity verification
- Name, date of birth, nationality, identity document images and the result of the check. Collected once, before your first payment.
- Wallet
- Public wallet addresses you connect and the coins you choose to pay with. We never see or store your private keys or recovery phrase.
- Payments
- Merchant, amount, currency, coin, rate, fees, time and status of each payment.
- Support
- Messages you send us and the details needed to answer them.
- Website
- Essential cookies only, unless you opt in to analytics.
03Why we use it
- To run the service: sign you in, connect your wallet, show rates, complete and record payments.
- To meet legal duties: identity verification, anti-money-laundering checks and record keeping required by law.
- To keep the service safe: fraud prevention, security monitoring and abuse detection.
- To support you: answering questions and resolving payment issues.
- To improve NomiOne: aggregated, non-identifying usage statistics.
We do not sell your data and we do not use it for third-party advertising.
04Who processes it for us
A small number of service providers process data on our behalf, each under contract and only for the purpose stated:
- An independent identity verification provider, for the one-time identity check.
- A wallet connection provider, to link your wallet to NomiOne.
- A partner bank in each live corridor, to pay the merchant in local currency.
- Cloud hosting, SMS delivery and customer support tooling.
The names of these providers are listed in the app under Settings and will be stated here in the final version of this policy.
05Where data is stored
Data is stored in Singapore and in the regions used by our hosting provider. Identity data may be processed in the country where our verification provider operates. Where data leaves Singapore we use contractual safeguards required by the Personal Data Protection Act.
06How long we keep it
- Account data
- While your account is open, then up to 12 months.
- Identity and payment records
- As long as the law requires, typically five years after the last payment.
- Support messages
- Up to 24 months.
- Analytics
- Aggregated and non-identifying; kept indefinitely.
07Your rights
- Access the personal data we hold about you.
- Correct data that is inaccurate.
- Withdraw consent for optional processing, such as analytics.
- Close your account. We will delete what we can and keep only what the law requires us to retain.
- Complain to the Personal Data Protection Commission of Singapore if you are not satisfied with our response.
To exercise any of these rights, write to the contact below. We respond within 30 days.
08Cookies
The website sets essential cookies only. Analytics are loaded only if you opt in through the cookie banner, and you can change your choice at any time from the footer.
09Changes and contact
We will post any changes to this policy here and, for material changes, notify you in the app. Questions and requests about your data go to support@nomione.io.