Lefujin Technology Co., Ltd. (“the Company”, “we”, “us”) is committed to protecting your privacy. This policy describes how we collect, use, and safeguard your personal data when you use our mobile application (LF-Pay App).
1. Data Security Measures
We implement the following security measures to protect your personal data:
- All data transmissions are encrypted using HTTPS/TLS protocols.
- User authentication uses JWT Token mechanism with automatic expiry to reduce unauthorized access risks.
- Mobile devices use secure storage (iOS Keychain / Android EncryptedSharedPreferences) for sensitive data.
- Server-side access control ensures only authorized personnel can access user data.
- User passwords are encrypted before storage; our staff cannot access your plaintext passwords.
2. App Data Collection
When you use the LF-Pay App, we may collect the following data:
| Data Type | Purpose | Permission |
|---|
| Camera Access | KYC identity verification (selfie & document capture) | User authorization required |
| Photo Library | Upload ID documents | User authorization required |
| Facial Image | Identity verification (processed by our servers) | User authorization required |
| ID Document Image | KYC verification | User authorization required |
| Bank Account Info | Account binding verification | User authorization required |
| Push Notification Token | Order & transaction notifications | User authorization required |
| Chat Messages | Real-time customer support | Generated upon use |
| Device Information | Technical support & debugging | Collected automatically |
3. Third-Party Services
Our mobile application uses the following third-party services:
- Expo Push Service — Push notification delivery.
- Firebase Cloud Messaging (FCM) — Android push notifications. See Google Privacy Policy.
- Apple Push Notification service (APNs) — iOS push notifications. See Apple Privacy Policy.
KYC identity verification is processed entirely by our in-house backend systems. We do not use any third-party verification services.
4. Data Retention & Deletion
Retention: Verification data (including facial images, ID document images, and bank account information) is retained for a minimum of 5 years in compliance with financial regulations.
Account Deletion:
- You may request account deletion via App Settings or by emailing [email protected].
- Deletion requests are processed within 30 days.
- Data required by law will be retained until the legal obligation expires, then securely destroyed.
Chat Messages: All chat messages are deleted upon account deletion.
5. Cookies & Tracking
Our website uses cookies to record your browsing preferences and conduct traffic analysis to improve service quality.
IP addresses are used for security protection and system analysis.
The LF-Pay mobile application does not use cookies.
6. Policy Updates
This privacy policy was last updated on February 21, 2026.
When significant changes are made to this policy, we will notify you via App push notifications or website announcements.
Contact: [email protected] / 03-4351318
