Privacy, the YAP Way
At YAP, your data belongs to you. We just help keep it safe, secure, and used
responsibly, exactly how you’d expect from your fintech partner.
Information
We Collect
We collect information like your name, CNIC, biometrics, and financial details to ensure secure and personalised services. This may include usage data, device info, and verification documents for compliance. We also use your camera or TrueDepth API solely for identity verification and is never shared with third parties.
How We Use and Share Your Data
We use your personal data to provide, operate, and improve our services, verify your identity, process payments, prevent fraud, and comply with legal obligations. Your information may be shared with trusted service partners, affiliates, and regulators, but only when necessary and in line with Pakistani law. We never sell your data, and any sharing is done securely and with your consent where required.
Your Rights
At YAP Pakistan, you have full control over your personal information. You can access and update your details through the app or by contacting us. If you wish to delete your data, you may request it at any time, though some information may be retained to meet legal requirements. You can also opt out of certain uses, like marketing communications, by adjusting your settings or reaching out to our support team at privacy@yappakistan.com.
Account & PIN
Protection
Choose a strong 4-digit MPIN (avoid simple or repeated patterns). Never share it or store it on your device. Some transactions may also require a reference number or passcode—keep these confidential. If your MPIN, passcode, or SIM is lost or compromised, immediately inform YAP Pakistan. You’ll be responsible for any transactions made before we are notified.
Data Security & Retention
We securely store and encrypt customer data, using industry-standard safeguards like firewalls and access controls. While we maintain strong security measures, you’re also responsible for protecting your credentials and devices. We review our practices regularly and notify you of major policy changes. Personal data is retained only as long as necessary and securely deleted or anonymised when no longer needed.
