This Privacy Policy explains how BestAfricanFX (“we”, “us”, “our”) collects, uses, shares, stores and protects personal data when you use the BestAfricanFX website at bestafricanfx.com and the BestAfricanFX mobile applications for Android and iOS (together, the “Service”).

BestAfricanFX is an independent rate-comparison and information service. We do not send, hold or convert money, and we never ask for payment card details, bank login credentials or identity documents.

Information you give us

• Account details: your name, email address and password (stored only as a secure hash). If you choose “Sign in with Google”, we receive your name, email address and Google account identifier from Google.
• Preferences: saved corridors, saved provider apps, rate alerts, email subscriptions, preferred language and default currencies.
• Promotions: promo or bonus codes you reveal or redeem, and the information needed to verify eligibility and process an advertised bonus.
• Feedback: answers you give to optional surveys (for example, which provider you chose) and messages you send us.

Information collected automatically

• Usage data: the corridors and amounts you search, pages and screens viewed, and clicks through to provider websites or apps.
• Device and technical data: IP address, browser or device type, operating system, app version and approximate country, used to choose a sensible default corridor and to keep the Service secure. We do not collect precise GPS location.
• Cookies and local storage: used to keep you signed in, remember your preferences and measure aggregate usage (see section 6).

We do not access your contacts, photos, camera, microphone, SMS messages or files, and we do not collect payment card, bank account or government ID information.

• To provide the Service: show rate comparisons, save your preferences, operate your account and send the alerts and emails you ask for.
• To secure the Service: authenticate you, verify your email address, prevent fraud and abuse, and fix errors.
• To improve the Service: understand which corridors and providers matter to users and measure how the Service is used, mostly in aggregated form.
• To operate promotions and referrals: verify eligibility for advertised bonuses and measure referral activity with providers.
• To meet legal obligations and respond to lawful requests.

We do not sell your personal data and we do not share it for third-party advertising.

• Service providers who host our website, database and apps, and who deliver our emails, acting on our instructions.
• Google, when you choose to sign in with Google.
• Money-transfer providers: when you click through to a provider, they may learn that you came from BestAfricanFX. Where needed to confirm a referral or a bonus, we may share limited, non-sensitive information with that provider. Once you are on a provider’s site or app, their own privacy policy applies.
• Authorities or other parties where required by law, or to protect our rights, users or the public.
• A successor organisation if BestAfricanFX is reorganised, merged or sold, subject to this policy.

Account data is kept while your account is active. When you delete your account, or ask us to, we delete or anonymise your personal data within 30 days, except where we must keep limited records for legal, security or accounting reasons. Aggregated, anonymised statistics may be kept indefinitely.

The website uses essential cookies for sign-in sessions and security, and preference cookies or local storage to remember settings such as your language and default currencies. We use aggregate analytics to understand overall usage. The mobile apps store your language choice, terms acceptance and preferences on your device. You can clear cookies in your browser settings or clear app data on your device, although some features may then stop working.

Data is encrypted in transit (HTTPS), passwords are stored only as salted hashes, and access to personal data is restricted to people who need it to run the Service. No system is completely secure, but we take reasonable steps to protect your data.

Depending on where you live (for example under the UK or EU GDPR, or US state privacy laws), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can unsubscribe from emails using the link in any email and turn alerts off in your account.

To delete your account and data, or to exercise any other right, email [email protected] from the address linked to your account. We respond within 30 days. You may also complain to your local data-protection authority.

Our service providers may process data in countries other than your own, including the United States. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses.

The Service is intended for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy from time to time. The “last updated” date above shows when it last changed. If we make significant changes, we will tell you through the Service or by email.

Questions about this policy or your data: [email protected].