Zepay / Zepay Money Agent Android App (com.zepay.money.app)
Effective date: 13 July 2026 | Last updated: 13 July 2026
This Privacy Policy explains how Evyaparpay Technologies Pvt Ltd / Zepay Money (“Company”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal information in connection with the Android application Zepay (package name: com.zepay.money.app) and the related web backend at https://neo.zepay.money (together, the “App” or “Services”).
The App is a B2B fintech AGENT application for authorised retailers and distributors in India (Capacitor WebView loading https://neo.zepay.money). It is not a consumer social app and is not used for advertising based on personal data.
This Policy is intended to comply with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDP Act), relevant RBI / NPCI expectations, and Google Play Data safety disclosures.
Company: Evyaparpay Technologies Pvt Ltd / Zepay Money
Registered address: [REGISTERED ADDRESS]
Support email: [SUPPORT EMAIL]
Support phone: [SUPPORT PHONE]
Privacy policy URL: https://neo.zepay.money/policy
Account deletion URL: https://neo.zepay.money/account-delete
By downloading, installing, registering for, or using the App, you acknowledge this Privacy Policy. If you do not agree, do not use the Services.
1. Introduction & Who We Are
We operate the Zepay agent platform for business agents in India. Login is via mobile OTP in the Android app; the web portal may also support password login.
2. Information We Collect (transmitted off device)
The App collects and transmits the following categories to our servers / service partners. This matches our Google Play Data safety form.
2.1 Personal info
- Name
- Phone number (mobile)
- Email address (where provided)
- User IDs (agent / member ID and related account identifiers)
- Other info: Aadhaar / PAN and KYC identity details required for onboarding and regulated services
2.2 Financial info
- User payment info: bank account number / IFSC and related payout details
- Other financial info: wallet balance, ledger / passbook, transaction history, UTR / references, DMT / payout, recharge, BBPS, AEPS / MATM settlement metadata
2.3 Location
- Approximate location
- Precise location
Collected during AEPS / MATM and similar regulated flows as required by partner APIs. Not used for advertising.
2.4 Photos and files
- Photos: Aadhaar QR / KYC / document images when you initiate camera capture or upload
- Files and docs: KYC documents you upload where required
2.5 Device or other IDs
- Device identifiers used for device binding / security
- Firebase Cloud Messaging (FCM) push token
- Related technical identifiers needed to deliver notifications and secure sessions
2.6 App activity & performance
- App interactions needed to operate services (screens / actions for transactions and support)
- Crash logs / diagnostics as needed for reliability and security
2.7 What we do NOT collect
- Contacts, SMS / MMS / call logs, calendar
- Race / ethnicity, political / religious beliefs, sexual orientation
- We do not sell personal data
- We do not use collected personal data for advertising or marketing profiles
3. How We Use Information
Purposes (aligned with Play Data safety):
- App functionality: login (OTP / password), wallet, recharge, BBPS, AEPS, MATM, DMT/payout, KYC, travel booking, device binding, push alerts
- Account management: create and manage agent accounts
- Fraud prevention, security, and compliance: KYC/AML, device binding, dispute handling, regulatory obligations
We do not use this data for advertising or marketing personalisation based on user data.
4. Legal Basis / Consent
Processing is based on consent (OTP / password login, Android permissions), contract (services you request), and legal obligations (KYC / AML / payment rules). Denying optional permissions may disable related features (e.g. location for AEPS/MATM, camera for KYC QR).
5. Android Permissions
The following permissions are used only for the purposes stated.
| Permission | Purpose | When asked | If you deny |
|---|---|---|---|
| INTERNET / NETWORK | Connect to neo.zepay.money and partners | App operation | App cannot run |
| LOCATION (fine / coarse) | AEPS / MATM partner APIs; fraud / compliance — not ads | Regulated txn flows | AEPS / MATM may be unavailable |
| CAMERA | Aadhaar QR / KYC photo capture (user-initiated) | When you start scan / upload | Camera KYC / QR unavailable |
| BLUETOOTH | MATM / mPOS hardware only | Device pairing | MATM unavailable |
| NOTIFICATIONS / FCM | Transactional / service push via Firebase | When enabling notifications | May miss push alerts |
6. Aadhaar, Biometric & Sensitive Data
- AEPS fingerprint capture uses certified devices; encrypted PID goes to banking / partner rails (e.g. Fingpay). We do not sell biometric templates.
- Device biometric unlock (fingerprint / face / PIN) is local on the handset for app re-entry.
- All server communications use HTTPS / TLS.
7. Children’s Privacy
The App is for business agents aged 18+ only. Not directed at children.
8. Data Retention
We retain account, KYC and transaction data as needed for service delivery, disputes, and statutory financial / AML retention under Indian law. Data that must be kept by law cannot be erased before the retention period ends.
9. Data Security
- Encryption in transit: Yes (HTTPS / TLS)
- Access controls and need-to-know staff access
- Partner-mandated secure handling for AEPS / MATM
10. Sharing / Disclosure
We do not sell data. We share only with service providers / partners required to run the service:
- Banks, NPCI / BBPS / recharge operators, payment rails
- Fingpay / MATM SDK vendors
- Firebase / Google (push notifications)
- Travel partners (when you use travel booking)
- Regulators / law enforcement when legally required
11. Account Deletion & Data Deletion Requests
You may request deletion of your account and associated data (subject to legal retention of financial / KYC records) here:
Account deletion URL: https://neo.zepay.money/account-delete
You may also request correction or deletion of personal data that is no longer required by contacting [SUPPORT EMAIL] with your registered mobile number. Mandatory regulatory records cannot be deleted early.
12. Your Rights (DPDP Act, 2023)
Subject to law, you may request access, correction, erasure (where legally allowed), withdrawal of optional consent, and grievance redressal via the contacts below.
13. Google Play Data Safety Declaration (exact match)
For package com.zepay.money.app we declare:
- Collects / shares required data types: Yes (data is transmitted off device)
- Encrypted in transit: Yes
- Account creation: Username + password (web) and Username + other authentication (mobile OTP)
- Account deletion URL: https://neo.zepay.money/account-delete
- Users can request data deletion: Yes (same URL / support)
- Data types collected: Name, Email, User IDs, Phone, Other personal info (KYC IDs); User payment info, Other financial info; Approximate + Precise location; Photos; Files and docs; Device or other IDs; App interactions; Crash logs / diagnostics
- Not collected: Contacts, SMS, call logs, calendar, advertising ID for ads, race/ethnicity, political/religious, sexual orientation
- Sold: No | Advertising / marketing use: No
- Ephemeral-only: No (account and transaction data are stored as needed for service and law)
For each collected type, purposes are limited to App functionality, Account management, and/or Fraud prevention, security, and compliance. Location and camera-based photos are collected when the related feature is used (users can deny the Android permission).
14. Third-Party Services & WebView
The App loads https://neo.zepay.money in a Capacitor WebView. Partners process data only as needed for the feature you use.
15. Changes to This Policy
We may update this Policy. The “Last updated” date will change when we do. Continued use after an update means you accept the revised Policy.
16. Grievance Redressal & Contact
Company: Evyaparpay Technologies Pvt Ltd / Zepay Money
Grievance Officer: [GRIEVANCE OFFICER NAME]
Address: [REGISTERED ADDRESS]
Email: [SUPPORT EMAIL]
Phone: [SUPPORT PHONE]
Privacy: https://neo.zepay.money/policy
Delete account: https://neo.zepay.money/account-delete
17. Governing Law
Laws of India. Courts at [JURISDICTION CITY / STATE].