YP GLOBAL TECHNOLOGY LIMITED ("we", "us" or "our") understands how important your personal information is to you, and processes it in accordance with the principles of lawfulness, legitimacy, necessity and good faith. This Policy explains how we collect, use, store, share and protect your personal information when you use the YPCards app and related services (the "Service"), and the rights you have.
Please read and understand this Policy carefully before using the Service. Where sensitive personal information is involved, we will obtain your separate consent before collecting it.
1. Who We Are
The Service is operated by YP GLOBAL TECHNOLOGY LIMITED. If you have any questions about this Policy, you can contact us using the details in Section 11, "Contact Us".
2. Personal Information We Collect and How We Use It
We only collect information necessary to provide product features. You may choose not to provide certain information, in which case you may not be able to use the related feature, but this will not affect your use of other features.
2.1 Registration and Login
Information collected: email address, login password (stored encrypted), email verification codes.
Purpose: to create your account, verify your identity, log you in and send you verification codes by email.
2.2 Identity Verification
Information collected: name, ID type and number, ID photos, date of birth, nationality or region, contact address. Depending on review requirements, this may also include facial images.
Purpose: to verify your identity and review card applications in accordance with applicable anti-money laundering, counter-terrorist financing and compliance requirements.
This is sensitive personal information. We only collect it when you actively apply for a card, and we obtain your separate consent beforehand. If you do not provide it, you will not be able to apply for a card, but you can still browse and use other features.
2.3 Card Application and Management
Information collected: card application records, card details (card number, expiry date, security code and similar, all stored encrypted), card status, spending limit settings and card transaction records.
Purpose: to issue and manage your cards, display your card balance and transaction details, and process actions such as freezing or unfreezing.
Card details and transaction records are sensitive personal information, and we only process them to provide card services to you.
2.4 Account Funds
Information collected: account balance, top-up records, transfer-to-card records, fund statements and transaction password (stored encrypted).
Purpose: to process top-ups and transfers to cards, show your fund statements, and verify your transaction password for important actions to keep your account secure.
2.5 Customer Service
Information collected: contact details, problem descriptions, screenshots and similar information you choose to provide when contacting support.
Purpose: to handle your enquiries, complaints and suggestions.
2.6 Service Security
Information collected: device model, operating system version, device identifiers (such as IDFV), IP address, app version, login and activity logs, crash logs.
Purpose: to detect account anomalies, prevent fraud and misuse, troubleshoot problems and keep the Service running reliably.
2.7 Local Storage
We store information such as your language preference, amount show/hide setting and login status locally on your device to remember your preferences. You can delete this information by clearing the app data or uninstalling the app.
2.8 What We Do Not Do
- We do not collect your contacts, text messages, call logs or precise location.
- We do not send you personalised advertising, and we do not use your information to track you across apps.
- We do not sell your personal information.
3. Device Permissions
The following permissions are only requested when you use the related feature, and we will ask for your authorisation in a pop-up first. You can turn off any permission at any time in your device settings; doing so will not affect other features.
| Permission | When it is used |
|---|---|
| Camera | Taking ID photos or completing face verification during identity verification |
| Photos | Uploading ID photos during identity verification, or sending screenshots to support |
| Network | Connecting to our servers to provide the Service |
| Clipboard | Only written to when you tap "Copy" (for example your user ID or card number). We do not read any other clipboard content. |
4. Cookies and Similar Technologies
The web parts of the Service may use cookies or local storage to keep you signed in and remember your preferences. They are not used for advertising tracking. You can manage or clear this data in your browser settings.
5. Storage of Personal Information
Location: our operating entity and servers are located in the Hong Kong Special Administrative Region, and your personal information is stored and processed in Hong Kong. If you use the Service from another country or region, your information will be transferred to Hong Kong for processing. Where required by applicable law, we will inform you and obtain your separate consent before the transfer, and take the necessary measures to ensure your information receives a level of protection equivalent to this Policy.
Retention: we only keep your personal information for the shortest period necessary to achieve the purposes described in this Policy. Identity verification information and transaction records are retained as required by applicable laws and regulations (including anti-money laundering rules); once the statutory period ends, we will delete or anonymise them.
6. Sharing, Transfer and Public Disclosure
6.1 Sharing
We do not share your personal information with third parties, except in the following cases:
- Card issuing and payment partners: to issue your cards, process card transactions and settle funds, we need to provide necessary identity and transaction information to licensed card issuers, card networks and payment service providers.
- Identity verification providers: to verify your identity, we provide your ID and facial information to partners that provide identity verification services.
- Legal requirements: where required by laws and regulations, litigation, arbitration or mandatory requests from government authorities.
- Where we have obtained your separate consent in advance.
We sign agreements with our partners requiring them to process your personal information in accordance with this Policy and applicable law, and not to use it for any other purpose.
6.2 Third-Party SDKs
| SDK | Provider | Purpose | Information collected |
|---|---|---|---|
| UNI base module | DCloud (Shuzi Tiantang (Beijing) Network Technology Co., Ltd.) | App runtime framework | Device model, operating system version, device identifier, network type |
We continuously review how third-party SDKs collect personal information and will update this Policy promptly if anything is added or changed.
6.3 Transfer
If personal information needs to be transferred because of a merger, division, dissolution or bankruptcy, we will tell you the name and contact details of the recipient and require the recipient to continue to fulfil the obligations in this Policy. If the recipient changes the original purpose or method of processing, it will ask for your consent again.
6.4 Public Disclosure
We will not publicly disclose your personal information unless required by law or with your separate prior consent.
7. How We Protect Your Personal Information
- We use HTTPS encryption in transit. Passwords, transaction passwords and sensitive card information are stored encrypted.
- We apply least-privilege access controls. Staff may only access personal information when necessary for their duties and are bound by confidentiality obligations.
- Important actions require your transaction password, and you can freeze your card at any time to reduce risk.
- We maintain an incident response plan for personal information security. If a security incident occurs, we will promptly inform you, as required by law, of what happened, its possible impact and the measures we have taken or will take, and report it to the relevant authorities.
Please keep your account password, transaction password and card details safe and never share them with anyone. Our staff will never ask you for your password or verification code.
8. Your Rights
- Access and copy: you can view your profile, card information and fund statements in the app. Contact us if you need a copy.
- Correction: you can edit some information in the app. To correct identity verification information, please contact support.
- Deletion: you can ask us to delete your personal information when the processing purpose has been achieved, when you withdraw consent, or if we have processed it in breach of the rules — except where the law requires us to retain it.
- Withdrawing consent: you can withdraw your authorisation by turning off device permissions or contacting us. Withdrawal does not affect processing already carried out on the basis of your consent.
- Closing your account: you can contact support from the "Me" page in the app to close your account. Before closing it, please make sure your card balance and account balance have been dealt with. After closure, we will delete or anonymise your personal information, except where the law requires us to retain it.
- Explanation: you have the right to ask us to explain our rules for processing personal information.
We will respond to your request within 15 business days after verifying your identity.
9. Protection of Minors
The Service is only intended for adults aged 18 or over. We do not knowingly collect personal information from minors, and if we discover that we have done so by mistake, we will delete it as soon as possible.
10. Updates to This Policy
We may update this Policy from time to time. When we do, we will notify you prominently in the app, for example by pop-up or announcement. If an update involves a significant change to the purposes or methods of processing or the types of information collected, we will ask for your consent again.
11. Contact Us
If you have any questions, comments or complaints about this Policy or how we handle personal information, you can contact us:
- Operator: YP GLOBAL TECHNOLOGY LIMITED
- Email: support@ypcards.hk
- WhatsApp: +852 64542857
- Telegram: @ypcards
If you are not satisfied with our response, you may also complain to the personal data protection authority that has jurisdiction.