Privacy policy

The short version

You can browse Addis CashMap without an account. We do not sell, share, or monetise personal data. We log only what we need to keep the service running, secure, and improving. If you create an admin account or sign in to leave a cash report, we store your email and the actions you take so we can prevent abuse.

What we collect

When you visit the website

Our reverse proxy (Nginx) logs IP address, browser user-agent, and the URL of each request for 14 days. We use these logs only to debug errors and detect abuse. We delete logs older than 14 days automatically.

When you grant location access

The browser may ask for your approximate location to show agents close to you. Your coordinates are processed in your browser and sent to our server only if you tap “use my location”. We do not store individual coordinates after the request returns.

When you create an admin or verifier account

We store your email, your hashed password (Argon2id), your role, and the timestamp of your last login. We log every verification action you take so the call log has a full audit trail.

When you report cash availability via the bot

We store the agent ID, the report (cash available / not), and the timestamp. If you reported via Telegram, your Telegram numeric ID is stored so we can prevent spam. We do not access your Telegram name or photo.

What we don't collect

• We do not use third-party advertising trackers.
• We do not embed Facebook, TikTok, or Google Analytics pixels.
• We do not require any account to use the public search.
• We do not record agents' phone calls or interactions with end users.

Agent listings

The agent listings (name, phone, location, services) are sourced from public agent directories published by Telebirr, CBE Birr, M-Pesa, and our own verification calls. If you are an agent and would like to be removed, updated, or hidden, email [email protected] with your phone number and we will action your request within 7 working days.

Where data lives

Our infrastructure is hosted in Frankfurt, Germany. Backups are encrypted at rest and retained for 30 days. Production databases are not accessible from the public internet.

Your rights

You can ask us at any time what data we hold about you, request a copy, ask for a correction, or ask for deletion. Email [email protected] and we will respond within 30 days.

Changes

If we materially change this policy, we will update the date at the top of this page and post a note on the homepage. Continued use of the service after that point means you accept the updated terms.