Moii Privacy Policy

The short version

Moii collects the least it can: a phone number to sign you in, a name so a prize can reach you, the bids you submit, and records of payments. We never receive your card number or mobile-money PIN. Your bids are private while an auction is active.

We do not sell your data, we do not use it for advertising, and there is no advertising identifier or tracking in this app.

Who we are

Moii is the controller of the personal data described here. For privacy questions, email support@moiiauctions.com.

Signing in and your account

When you sign in with a phone number we store that number and a one-time code verifier. The code itself is never stored and cannot be recovered from what we hold.

If you sign in with Apple or Google, we receive and store an opaque account identifier from them, and an email address if they provide one. We verify the token they issue; we do not receive your password, and we never post anything on your behalf.

At onboarding we ask for your name, so a prize can be delivered to a person. We store your language preference so the app and your notifications are in the language you chose.

• We do not store your date of birth — we use it once, on our server, to check that you are 18 or older — and we do not collect a national identity number or any government identifier.
• We do not collect biometric or face data, and there is no identity or face verification anywhere in the product.
• We do not collect your precise location, your contacts, or an advertising identifier.

Keeping your account secure

We store a hash of your session's refresh credential, never the credential itself. On your device that credential lives only in the platform secure store — the iOS Keychain or the Android Keystore — and never in ordinary app storage or a log.

To stop abuse we count sign-in attempts against a hashed identifier derived from your network address and installation. Those values are hashed with a secret we hold on the server and are never stored in a readable form.

We keep a security log of actions — a sign-in, a bid accepted, a payment verified. It records what happened, not who you are beyond an account identifier, and it never contains bid values or payment credentials.

Your age and where you live

Moii is for adults aged 18 or older who live in Ethiopia. When you set up your account we ask for your date of birth and your country of residence.

We use your date of birth once, on our server, to work out whether you are 18 or older on that day in Ethiopia. We do not store the date itself. We keep only the result — whether you are 18 or older, and whether you live in Ethiopia — and when you told us.

These are your own declarations. We do not ask for identity documents, we do not use your location or GPS, and we do not treat an Ethiopian phone number as proof of where you are. A declaration cannot be changed from the app; if you made a mistake, contact support, who can clear it so you can declare again. Every such change is recorded in our security log.

Your bids

We store each number you submit, which auction it was for, and what you were charged for it. We need this to run the auction and to settle it.

While an auction is active your bid is private. No other participant can see it, and we do not disclose how many bids or participants there are, whether your number is unique, what the lowest number is, or where a number sits in the ordering. That applies to everyone equally.

We also store which auctions you have saved. That list is yours alone and nobody else can see it.

Payments

Payments are taken by Chapa, the only payment provider the app currently offers, on Chapa's own secure hosted page. Your card number, expiry, security code and any mobile-money PIN are entered there. They never reach us, we never store them, and no screen in this app asks for them.

We store our own record of each payment: the amount, the currency, what it was for, which provider you chose, the transaction reference, and whether it succeeded.

Chapa requires a phone number and an email address to process a payment. We send your verified phone number in the local format they require. If your account has no email — which is normal for a phone-first account — we generate a stable address at a domain we control that contains only an opaque account identifier, so that nothing about you is disclosed that does not need to be.

If you win

To release a prize we ask the winner for their full legal name and to confirm again that they are 18 or older and live in Ethiopia. We do not ask for identity documents.

If you choose delivery, we store the recipient's name, a phone number a courier can reach, the delivery address and any delivery notes. If you choose collection, we record that you will collect it and show you where. We use these details only to verify the winner and get the prize to them.

Referrals

Every account has a referral code. If someone joins with your code, or you join with someone else's, we record that link and the points it earns.

Notifications

If you enable notifications we store a push token for each device, and we store which categories of alert you want. We keep a record of the notifications we have sent you so the in-app Notifications list works.

Delivering a notification means passing the token and the message to a push service, and from there to Apple or Google for delivery to your device. That is unavoidable if a notification is to arrive at all.

Turning off a category stops the alert on your device. The message still appears in the app.

Who else receives your data

We use a small number of processors, and each receives only what it needs:

• Chapa, for every payment — the amount, currency, transaction reference, your phone number and an email address — to take the payment and let us verify it.
• Our SMS provider — your phone number and the one-time sign-in code — to deliver the code you asked for when signing in with your phone.
• Our push notification infrastructure, and Apple's and Google's push services — a device token and the notification content — to deliver alerts you have enabled.
• Apple and Google identity services — nothing is sent to them; we receive a signed token from them when you choose to sign in that way, and verify it.
• Our hosting and database provider — which stores the data described in this policy so the service can run.

Where your data is processed

Our servers and database are hosted by Amazon Web Services in its Frankfurt, Germany region, so the data described in this policy is stored and processed there. Our payment provider, Chapa, operates in Ethiopia.

Notifications are sent through Expo's push service, which is operated from the United States, and from there through Apple's and Google's push services, which are operated internationally. We do not claim that your data stays within Ethiopia, because that would not be true.

Where data is transferred outside Ethiopia we do so to provide the service you have asked for, and we require our processors to protect it.

How long we keep it

Your account data is kept while your account is open. When you delete your account, your sign-in methods, name, saved auctions, notification settings, notification history and push tokens are deleted, and every session ends immediately. The record of whether you declared yourself 18 or older and living in Ethiopia stays with the closed account, with no name, phone number or sign-in account attached to it.

Records of completed transactions and of auctions you entered are kept, no longer linked to your name, phone number or sign-in accounts. We keep them because removing a bid would change the outcome of an auction other people entered, and because a payment, refund or dispute may have to be answered for afterwards.

If you won a prize, the prize claim is kept with the legal name you declared and, for a delivery, the recipient name, phone number, address and notes you gave, because a delivery or collection may have to be evidenced or disputed afterwards.

If you delete your account after paying for a prize that has not yet been delivered or collected, we still deliver it or hold it for collection, using the details you gave for that prize. You will not receive updates in the app after deletion; email support@moiiauctions.com about it.

Your referral code, any referral link between your account and another, and the points those links earned are kept with the closed account, because they also belong to the other participant's record.

The exact retention period for financial records is set by the accounting and tax rules that apply to us. Account & Data Deletion sets out precisely what is kept and why.

Your choices

You can change your language in Profile, choose which notifications you receive, sign out, and delete your account — all from inside the app. To correct your name, email us at the address below.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email support@moiiauctions.com and we will respond.

If you are not satisfied with how we have handled your data, you may complain to the competent Ethiopian data protection authority.

Security

Data is encrypted in transit. Credentials on your device are held in the platform secure store. Access to production data is restricted, and privileged actions are logged.

Every read of your account data is scoped to your own account at the database level, so another participant asking for your record is told it does not exist rather than being refused.

Children

Moii is for adults only. You must be 18 or older to take part. If the date of birth you give shows you are under 18, the account cannot bid, pay or claim a prize, and you can delete it from inside the app. If we learn in any other way that an account belongs to someone under 18, we will close it and delete the account data as described in Account & Data Deletion.

Changes

We may update this policy. Each change produces a new version with a new effective date, shown at the top. If a change materially affects how we use your data we will tell you in the app.