This policy explains how Ease Send ("Ease Send," "we," "us") collects, uses, and protects personal information when you use the Ease Send apps, protocol, and related services (together, the "Service"). It applies to the Ease Send wallet and messaging apps and to products built on the Ease Send infrastructure.
Ease Send is non-custodial infrastructure. Stablecoins available through the Service are issued by separately licensed financial institutions ("Issuers"), who are responsible for their own compliance obligations, including KYC/AML verification of their customers.
Where an Issuer collects and controls identity verification information, that Issuer — not Ease Send — is the data controller for that information. This policy explains what Ease Send itself collects and controls as the infrastructure provider.
Information we collect
- Account information. When you create an account, we collect a verification route (such as a phone number, email address, or an approved third-party sign-in) used to confirm your identity, and the human-readable account name you choose.
- Profile information. A display name and, optionally, an avatar image you choose.
- Contacts and connections. Identifiers of the people and groups you message or transact with, so we can route messages and payment requests between you.
- Transaction data. Structured payment records — sender, recipient, issuer, amount, and reference — written to the Ease Send ledger for every transaction. This data is gated: visible only to the parties to a transaction and, as required by law, to the relevant regulatory authorities.
- Technical information. Device type, operating system version, app version, IP address, and diagnostic logs, used to operate and secure the Service.
We do not collect your private keys or recovery seed phrase. These are generated on your device, sealed using a secure enclave, and are never transmitted to or stored by Ease Send in usable form.
Message content
Messages, group messages, and shared media sent through Ease Send's built-in messaging are end-to-end encrypted on your device before they are sent. We cannot read message content, and neither can our operators or hosting providers. Encryption keys remain on your devices.
Identity verification (KYC/AML)
If you seek to hold or transact in a specific Issuer's stablecoin, that Issuer will typically require identity verification as part of its own regulatory obligations. This may involve submitting a government-issued ID or similar documentation, directly to the Issuer or to a third-party verification provider it engages (such as SmileID). That information is controlled by the Issuer under its own privacy policy; Ease Send's infrastructure may facilitate the secure transmission of this data but does not use it for purposes beyond enabling the Issuer's compliance obligations.
Biometric authentication
Ease Send uses your device's own biometric authentication (such as Face ID or Touch ID) to sign transactions. This biometric data is processed entirely on your device by your device's operating system. Ease Send never receives, transmits, or stores your biometric data itself — only a cryptographic secret derived from it, used to help sign transactions.
How we use information
- To create and maintain your account.
- To route messages and payment requests between you and the people you transact with.
- To operate, secure, and improve the Service.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations, including providing transaction records to regulatory authorities as required by law.
We do not sell personal information, and we do not use it for advertising.
How information is shared
We share information only with:
- Service providers that host and operate infrastructure on our behalf, under contractual confidentiality obligations.
- Issuers, to the extent necessary for them to meet their own regulatory and compliance obligations.
- Authorities, where required by valid legal process, or where the relevant regulatory framework grants standing access to transaction data — as Kenya's VASP Regulations do, for example. Because message content is end-to-end encrypted, we cannot provide it regardless of request.
- A successor entity, in connection with a merger, acquisition, or sale of assets.
Data retention
We keep account and profile information for as long as your account is active. Transaction records are retained as required by applicable financial recordkeeping and VASP regulations. Encrypted message content is retained only as needed to deliver it to your devices. You can delete your account at any time, after which we delete the associated personal information, except where retention is required by law.
Security
We use industry-standard measures to protect information, including end-to-end encryption of message content and encryption of data in transit. Signing keys are generated and sealed inside a secure enclave using a decryption key split between your device and our cloud key management system — no single party, including Ease Send, can reconstruct a usable key alone. No system is perfectly secure, and we cannot guarantee absolute security.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Where identity verification information is controlled by an Issuer, requests relating to that information should also be directed to the relevant Issuer. To exercise your rights with respect to information Ease Send controls, contact us using the details below.
Children
The Service is not directed to children under 13, or the minimum age required in your jurisdiction, and we do not knowingly collect their personal information.
International transfers
Your information may be processed in countries other than the one in which you live, including outside Kenya. Where required, we apply appropriate safeguards for these transfers.
Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.
Contact
Questions about this policy or your personal information: info@goodblock.io.