# Privacy Policy for MZ App
**Last Updated:** September 17, 2026
Welcome to **MZ App** ("we", "our", or "us"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, store, share, and protect your personal information when you use the MZ App mobile application.
---
## 1. Information We Collect
We collect only the information necessary to provide and enhance our financial, payment, and account management services:
### A. Information You Provide Directly
* **Account Information:** Name, phone number and login credentials (PIN).
* **Payment & Transaction Details:** Payment transaction records, top-up history, invoice references, and ABA KHQR payment interactions.
* **Customer Support Inquiries:** Communication logs, feedback, and details provided when contacting support.
### B. Information Collected Automatically
* **Device Identifiers & Technical Data:** Unique Device Identifier (UDID), device model, operating system and version, IP address, carrier, language settings, and network connection status.
* **App Usage & Diagnostics:** Crash logs, performance metrics, and feature interaction timestamps to maintain system stability and prevent fraud.
### C. Permissions & Sensor Data
* **Camera:** Used strictly with your explicit permission for scanning ticket QR codes and for identity verification / liveness checks.
* **Face Detection:** Used solely to detect the user's face. Processing occurs strictly on your device in real-time, and no facial images, biometric data, or facial geometry are collected, stored, or shared.
* **Biometric Authentication (Fingerprint / Face Unlock):** When enabled, authentication is handled natively by your operating system's secure hardware (Android BiometricPrompt / iOS LocalAuthentication). MZ App never accesses or stores your raw biometric templates.
* **Photo Library & Storage:** Used with your permission solely to save payment and transaction receipts to your device gallery.
* **Push Notifications:** Used to deliver critical real-time alerts regarding transactions, account security, and service updates via Firebase Cloud Messaging (FCM).
---
## 2. How We Use Your Information
We use the collected information for the following purposes:
1. **Service Provision:** To manage your account, authenticate sessions, and process payments and top-ups (including via ABA PayWay and KHQR).
2. **Security & Fraud Prevention:** To verify your identity, prevent unauthorized access, detect suspicious activities, and maintain financial integrity.
3. **Transaction Notifications:** To deliver instant confirmations, transaction receipts, and security alerts.
4. **Service Improvements:** To diagnose technical bugs, optimize user interface performance, and enhance system stability.
5. **Legal & Regulatory Compliance:** To comply with applicable laws, legal requests, and banking partner rules.
---
## 3. Third-Party Services & Data Sharing
We do not sell, rent, or trade your personal information. We share data only with trusted third-party providers who assist us in operating the application:
* **Payment Gateways & Banking Partners:** Secure financial partners (such as **ABA Bank / PayWay**) to facilitate payment processing and KHQR settlement.
* **Firebase (Google LLC):** Firebase Cloud Messaging (FCM) for delivering push notifications and Firebase Core for backend diagnostics.
* **Google ML Kit:** Utilized for on-device computer vision and face landmark detection.
* **Legal & Regulatory Authorities:** When required by applicable law, court orders, or governmental requests.
---
## 4. Data Security
We implement robust administrative, technical, and physical security measures, including:
* End-to-end transport encryption via **HTTPS / TLS** for all API communications.
* Cryptographic protection for sensitive data stored at rest.
* Restricted access control to personal data on a strict need-to-know basis.
---
## 5. Data Retention & Account Deletion
* **Retention Period:** We retain your account and transaction information only as long as necessary to provide services and comply with statutory financial record-keeping obligations.
* **Right to Delete (Account Deletion):** You have the right to request the deletion of your account and associated personal data at any time.
* You may request deletion directly within the application under **Settings > Profile > Delete Account**, or
* By contacting our privacy support team at **info@tsdsolution.com**.
* Upon confirmation of your request, your personal credentials will be permanently deleted or anonymized, except where financial retention laws require maintaining transaction records.
---
## 6. Your Rights & Choices
Depending on your jurisdiction, you have the right to:
* **Access & Portability:** Request a copy of the personal information we hold about you.
* **Correction:** Update or correct inaccurate profile details within the app settings.
* **Revoke Permissions:** Disable camera, photo library, or push notification permissions at any time via your device operating system settings.
* **Opt-Out:** Disable biometric login anytime from within the app settings.
---
## 7. Children's Privacy
MZ App is not intended for use by individuals under the age of 18 (or the legal age of majority in your jurisdiction). We do not knowingly collect personal data from minors.
---
## 8. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Any changes will be posted within the app along with an updated **"Last Updated"** date. Continued use of the app following notification of changes constitutes acceptance of the revised policy.
---
## 9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:
* **Entity Name:** MZ App Team
* **Email:** info@tsdsolution.com
* **Address:** #D49, StreetVI-18, Toul Sangke Commune, Reussey Keo District, Phnom Penh, Cambodia