MPChat Privacy Policy

Effective Date: 2025-06-15

Welcome to MPChat!

The MPChat Operating Entity (hereinafter referred to as "we," "us," or "MPChat") fully understands the importance of personal information to you and will make every effort to protect the security and reliability of your personal information. We are committed to maintaining your trust in us and adhere to the following principles to protect your personal information: consistency of rights and responsibilities, clarity of purpose, opt-in consent, data minimization, ensuring security, subject participation, and transparency.

This MPChat Privacy Policy (hereinafter referred to as "this Policy") aims to explain how we collect, use, store, share, and protect your personal information, as well as how you can manage your personal information. Please read carefully and fully understand all the content of this Policy before using MPChat services, especially the terms that we have highlighted in bold, underlined, or by other means for your attention. When you start or continue to use our services, it means that you have fully understood and agreed to this Policy.

If you are a minor (as defined by the laws of your jurisdiction), please read this Policy accompanied by your legal guardian, and ensure that your legal guardian agrees to our processing of your personal information in accordance with this Policy.

This Policy will help you understand the following:

  1. How We Collect and Use Your Personal Information
  2. How We Use Cookies and Similar Technologies
  3. How We Share, Transfer, and Publicly Disclose Your Personal Information
  4. How We Store and Protect Your Personal Information
  5. Your Rights
  6. How We Handle Children's Personal Information
  7. How Your Personal Information Is Transferred Globally
  8. How This Policy Is Updated
  9. How to Contact Us

1. How We Collect and Use Your Personal Information

Personal information refers to various kinds of information recorded electronically or otherwise that can, alone or in combination with other information, identify a specific natural person or reflect the activities of a specific natural person.

We will follow the principles of lawfulness, legitimacy, and necessity, and only collect and use personal information necessary to achieve the product functions of MPChat.

1.1 Information You Provide to Us

  • Account Registration Information: When you register for an MPChat account, you will need to provide your mobile phone number or email address to create an account and set your password. You may also choose to provide a nickname, profile picture, and other profile information.
  • Identity Verification Information (KYC): To use convenient payment features such as the MPChat Account and MPChat Card, as required by applicable laws and regulations, we need to collect your identity verification information. This may include your name, ID type and number, date of birth, nationality, proof of address, facial recognition information, and other information we require to fulfill Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) obligations.
  • Chat Information:
    • End-to-End Encrypted Content: We provide end-to-end encryption for your private chats and group chats. This means your message content is encrypted upon sending, and only you and the designated recipient(s) can decrypt and read it. MPChat cannot access or store your encrypted message content.
    • Message Metadata: To provide and maintain the chat service, we may collect metadata related to your messages, such as the sender, recipient(s), time of sending, message status (e.g., sent, delivered, read), and the list of members in a group chat.
    • User Content (Non-Encrypted): If you post content in public areas of MPChat (such as public channels, if this feature is offered in the future) or interact with non-end-to-end encrypted bots, we will collect that content.
  • Account Transaction Information: When you use your MPChat Account, we will collect your transaction information, including the counterparty's MPChat account information (or user identifier), the USD amount of the transaction, timestamp, transaction status, and other necessary information related to the transaction.
  • MPChat Card Information: When you apply for and use an MPChat Card, we will collect your card application information, the MPChat Account information associated with the card, and card transaction records (including merchant information, transaction amount, transaction time, location, etc.; some information may be provided by third-party card issuers or payment networks).
  • Contact List Information: If you choose to use the contact matching feature, with your explicit consent and authorization, we may access your device's contact list to help you find contacts who are already using MPChat. We will only process this information using methods such as cryptographic hashing to protect the privacy of your contacts.
  • Customer Support Information: When you contact our customer service or submit feedback, you may provide your contact details, a description of the issue, and other relevant information.

1.2 Information We Collect Automatically

  • Device Information: When you use MPChat services, we will collect your device information, such as device model, operating system version, unique device identifiers (e.g., IMEI, Android ID, IDFA), IP address, MAC address, application version, language settings, and network type.
  • Log Information: We automatically record details of your use of our services and save them as network logs, including your search queries, pages or features accessed, time of operation, crash information, and diagnostic data.
  • Location Information:
    • Approximate Location: We may infer your approximate geographical location based on your IP address.
    • Precise Location: Only with your explicit authorization and when you enable device location features will we collect your precise geographical location information in specific scenarios (such as when you choose to send your real-time location to a friend). You can disable this permission in your device settings at any time.
  • Usage Information: We collect information about how you interact with our services, such as the features you use, buttons you click, and time spent, to help us understand user preferences and improve our services.

1.3 Personal Information We Obtain from Third Parties

Where permitted by law, we may obtain your personal information from third parties (such as our partners and service providers). For example:

  • When you log in to MPChat using a third-party account (such as Google, Apple), with your authorization, we will obtain your public information on that third-party platform (such as nickname, profile picture).
  • For identity verification and risk control purposes, we may obtain your verification results from third-party identity verification service providers.
  • If you pay for MPChat services or top-up using third-party payment channels, we will obtain information related to your payment from that payment channel.

1.4 Purposes of Collecting and Using Personal Information

We collect and use your personal information primarily for the following purposes:

  • To Provide, Maintain, and Improve Our Services: Including account registration, enabling chat communication, USD transfers, card payments, and other core and convenient payment features, as well as providing necessary customer support.
  • Security Assurance: For identity verification, security prevention, fraud monitoring, archiving, and backup, to ensure the security of the products and services we provide to you, and to prevent abuse and illegal activities.
  • To Fulfill Legal Obligations and Compliance Requirements: Such as fulfilling KYC/AML obligations and responding to lawful requests from government or judicial authorities.
  • To Communicate With You: To send you service notifications, updates, security alerts, and marketing information that may be of interest to you (you have the right to opt-out of marketing communications).
  • Data Analysis and Research: To understand how users use our services so that we can improve product design, optimize user experience, and develop new features. We will use anonymized or de-identified data as much as possible in this process.
  • Personalized Experience (with your consent): To provide you with more relevant service content or feature recommendations based on your usage preferences.

2. How We Use Cookies and Similar Technologies

To ensure the proper functioning of the MPChat website or web-based services, to provide you with an easier access experience, and to recommend content that may be of interest to you, we will store small data files called Cookies on your computer or mobile device. Cookies usually contain identifiers, site names, and some numbers and characters.

We will not use Cookies for any purpose other than those described in this Policy. You can manage or delete Cookies according to your preferences. Most web browsers have a feature to block Cookies. However, if you do so, you will need to change user settings yourself each time you visit our website, any corresponding information you previously recorded will be deleted, and the security of the services you use may be affected.

In addition to cookies, we may also use web beacons, pixel tags, and other similar technologies on our website.

3. How We Share, Transfer, and Publicly Disclose Your Personal Information

3.1 Sharing

We will not share your personal information with companies, organizations, or individuals other than MPChat service providers, except in the following cases:

  • With Your Explicit Consent or Authorization: After obtaining your explicit consent, we will share your personal information with other parties.
  • Sharing in Legal Circumstances: We may share your personal information externally in accordance with laws and regulations, the need for litigation dispute resolution, or as required by administrative or judicial authorities in accordance with the law.
  • Sharing with Our Affiliates: Your personal information may be shared with our affiliates. We will only share necessary personal information and are bound by the purposes stated in this Privacy Policy. If our affiliates wish to change the purpose of processing personal information, they will seek your authorization again.
  • Sharing with Authorized Partners: Only for the purposes stated in this Policy, some of our services will be provided jointly by us and authorized partners. We may share some of your personal information with partners to provide better customer service and user experience. For example, companies we engage to provide third-party data statistics and analysis services may need to collect and access personal data for statistical analysis. In such cases, these companies must comply with our data privacy and security requirements. We will only share your personal information for legitimate, proper, necessary, specific, and explicit purposes, and will only share personal information necessary to provide the services. We will sign strict data protection agreements with companies, organizations, and individuals with whom we share personal information, requiring them to process personal information in accordance with our instructions, this Policy, and any other relevant confidentiality and security measures.
    • Payment Processors: To process your MPChat Account top-ups, card payments, and other transactions.
    • Identity Verification Service Providers: To complete KYC/AML reviews.
    • Cloud Service Providers: To store your data.
    • Customer Service Tool Providers: To provide efficient customer support.
    • Marketing and Analytics Service Providers: To help us analyze service usage and conduct marketing promotions (we will require them to anonymize or de-identify the data).
  • When You Actively Choose to Share: For example, when you send messages or files to other users in a chat, or use an MPChat Card to make purchases at merchants.

3.2 Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following cases:

  • With your explicit consent.
  • In the event of a merger, acquisition, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this Policy; otherwise, we will require that company, organization, or individual to seek your authorization again.

3.3 Public Disclosure

We will only publicly disclose your personal information in the following circumstances:

  • With your explicit consent or based on your active choice, we may publicly disclose your personal information.
  • If we determine that you have violated laws or regulations or seriously violated MPChat-related agreements and rules, or to protect the personal and property safety of MPChat, its affiliates' users, or the public from infringement, we may disclose personal information about you in accordance with laws and regulations or with your consent under MPChat-related agreements and rules.
  • Disclosure Based on Law: We may publicly disclose your personal information in cases of mandatory requirements by law, legal procedures, litigation, or government authorities.

4. How We Store and Protect Your Personal Information

4.1 Information Storage

  • Storage Location: To provide you with global services, your personal information collected and generated by us may, based on our global operational needs, be stored on servers located in different jurisdictions. These locations may include, but are not limited to, our primary operating locations or the server locations of cloud service providers we use. Regardless of where your information is stored, we will take appropriate measures to protect your personal information in accordance with applicable laws and regulations.
  • Cross-border Transfer: To support our global operations, your personal information may be processed in or transferred to other jurisdictions outside the country/region where you initially provided the information. In such cases, we will strictly comply with applicable data protection laws and regulations, taking measures including but not limited to necessary contractual safeguards, technical security, and organizational management measures to ensure that your personal information receives adequate protection at any processing or receiving location.
  • Storage Period: We will only retain your personal information for the period necessary to achieve the purposes described in this Policy, unless there is a mandatory retention requirement by applicable law. For example, laws in certain jurisdictions may require specific types of transaction information to be retained for several years from the date of transaction completion. We determine the storage period of personal information mainly by reference to the following standards and whichever is longer:
    • Completing the transaction purposes related to you, maintaining corresponding transaction and business records, and responding to your possible inquiries or complaints;
    • Ensuring the security and quality of the services we provide to you;
    • Whether you agree to a longer retention period;
    • Whether there are other special agreements or applicable legal requirements on the retention period. After your personal information exceeds the retention period, we will delete your personal information or anonymize it in accordance with the requirements of applicable laws.

4.2 Information Protection

  • We have implemented industry-standard, reasonably practicable security measures to protect the personal information you provide, preventing unauthorized access, public disclosure, use, modification, damage, or loss of personal information. For example, we use encryption technologies (such as SSL/TLS) to enhance the security of personal information; we use trusted protection mechanisms to prevent personal information from malicious attacks; we deploy access control mechanisms to ensure that only authorized personnel can access personal information; and we conduct security and privacy protection training courses to strengthen employees' awareness of the importance of protecting personal information.
  • We will take reasonably practicable measures to avoid collecting irrelevant personal information. We will only retain your personal information for the period necessary to achieve the purposes described in this Policy, unless an extension of the retention period is required or permitted by law.
  • The internet is not an absolutely secure environment. We strongly recommend that you use secure methods and complex passwords to help us ensure the security of your account. If you discover that your personal information has been leaked, especially your account or password, please contact us immediately using the contact information provided at the end of this Policy so that we can take appropriate measures.
  • In the unfortunate event of a personal information security incident, we will, in accordance with the requirements of laws and regulations, promptly inform you of: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedial measures for you. We will inform you of the incident-related situation by email, letter, telephone, push notification, etc. When it is difficult to inform personal information subjects one by one, we will adopt a reasonable and effective way to issue an announcement. At the same time, we will also report the disposal of personal information security incidents in accordance with the requirements of regulatory authorities.

5. Your Rights

In accordance with the relevant laws, regulations, and standards in your region, as well as common practices in other countries and regions, we guarantee your exercise of the following rights regarding your personal information:

  • 5.1 Access Your Personal Information: You have the right to access your personal information, except in circumstances stipulated by laws and regulations. You can exercise your right of data access yourself through paths such as "Settings" -> "Account and Security" -> "Personal Information Management" within the MPChat application, or by contacting us through the contact information provided in this Policy.
  • 5.2 Correct Your Personal Information: When you find that the personal information we process about you is incorrect, you have the right to request us to make corrections. You can submit a correction request through the methods listed in "Access Your Personal Information" above.
  • 5.3 Delete Your Personal Information: You can request us to delete your personal information in the following circumstances:
    • If our processing of personal information violates laws and regulations;
    • If we collect or use your personal information without obtaining your explicit consent;
    • If our processing of personal information seriously violates our agreement with you;
    • If you no longer use our products or services, or you voluntarily cancel your account;
    • If we permanently no longer provide you with products or services. If we decide to respond to your deletion request, we will also, as much as possible, notify entities that have obtained your personal information from us to request their timely deletion, unless otherwise stipulated by laws and regulations, or these entities have obtained your independent authorization. When you delete information from our services, we may not immediately delete the corresponding information from backup systems but will delete it when the backup is updated.
  • 5.4 Change the Scope of Your Authorized Consent: Each business function requires some basic personal information to be completed. For the collection and use of additionally collected personal information, you can give or withdraw your authorized consent at any time. You can do this through the settings function within the MPChat application. When you withdraw your consent, we will no longer process the corresponding personal information. However, your decision to withdraw consent will not affect the personal information processing previously carried out based on your authorization.
  • 5.5 Personal Information Subject Cancels Account: You can cancel your previously registered account at any time. You can do this yourself through paths such as "Settings" -> "Account and Security" -> "Cancel Account" within the MPChat application, or by contacting us through the contact information provided in this Policy. After you voluntarily cancel your account, we will stop providing you with products or services and delete your personal information or anonymize it in accordance with the requirements of applicable laws.
  • 5.6 Personal Information Subject Obtains a Copy of Personal Information: You have the right to obtain a copy of your personal information. If you need to obtain it, you can contact us. Where technically feasible, such as data interface matching, we can also, at your request, directly transmit a copy of your personal information to a third party designated by you.
  • 5.7 Restrict Automated Decision-Making by Information Systems:</strong> In some business functions, we may make decisions based solely on non-manual automated decision-making mechanisms, including information systems, algorithms, etc. If these decisions significantly affect your legitimate rights and interests, you have the right to request an explanation from us, and we will also provide appeal methods without infringing on MPChat's trade secrets or the rights and interests of other users or the public interest.
  • 5.8 Responding to Your Above Requests: To ensure security, you may need to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request. We will respond within fifteen (15) working days. If you are not satisfied, you can also file a complaint by contacting us. For your reasonable requests, we generally do not charge a fee, but for repeated requests that exceed reasonable limits, we will charge a certain cost fee as appropriate. We may refuse requests that are unreasonably repetitive, require excessive technical means (e.g., requiring the development of new systems or fundamentally changing existing practices), pose risks to the legitimate rights and interests of others, or are very impractical. In the following circumstances, as required by laws and regulations, we will not be able to respond to your request:
    • Related to national security and defense security;
    • Related to public safety, public health, and major public interests;
    • Related to criminal investigation, prosecution, trial, and execution of judgments;
    • Where there is sufficient evidence that the personal information subject has subjective malice or abuses rights;
    • Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals or organizations;
    • Involving trade secrets.

6. How We Handle Children's Personal Information

Our products, websites, and services are primarily aimed at adults. Children (as defined by applicable law in the respective region, for example, minors under the age of 13, 14, or 16 in certain jurisdictions) may not create their own user accounts without the consent of a parent or guardian.

For the collection of children's personal information with parental consent, we will only use or publicly disclose this information if permitted by law, with the explicit consent of parents or guardians, or as necessary to protect the child.

Although local laws and customs define children differently, we will consider anyone under the age of 14 as a child.

If we discover that we have collected children's personal information without prior verifiable parental consent, we will try to delete the relevant data as soon as possible.

7. How Your Personal Information Is Transferred Globally

In principle, the personal information we collect and generate within your jurisdiction will be stored within that jurisdiction.

As we provide products or services through globally distributed resources and servers, this means that, with your authorized consent, your personal information may be transferred to, or accessed from, jurisdictions outside the country/region where you use the product or service. Such jurisdictions may have different data protection laws or may not even have relevant laws. In such cases, for example, we will request your consent for cross-border transfer of personal information, or implement security measures such as data de-identification before cross-border data transfer, and enter into legally binding data transfer agreements with the data recipients.

8. How This Policy Is Updated

Our Privacy Policy may change.

We will not limit your rights under this Privacy Policy without your explicit consent. We will post any changes to this Policy within the MPChat application or on our official website.

For material changes, we will also provide a more prominent notice (for example, for some services, we will send an email notification explaining the specific changes to the Privacy Policy, or provide an in-app push notification).

Material changes referred to in this Policy include, but are not limited to:

  • Significant changes in our service model, such as the purpose of processing personal information, the type of personal information processed, the way personal information is used, etc.;
  • Significant changes in our control, etc., such as changes in ownership caused by mergers and acquisitions, reorganizations, etc.;
  • Changes in the main objects of personal information sharing, transfer, or public disclosure;
  • Significant changes in your rights to participate in the processing of personal information and the ways to exercise them;
  • Changes in our responsible department for handling personal information security, contact methods, and complaint channels;
  • When the personal information security impact assessment report indicates a high risk.

We will also archive old versions of this Policy for your review.

9. How to Contact Us

If you have any questions about this Policy, please contact us at:

Email: support@mpchats.com

Please confirm again that you have carefully read and understood all the contents of this Privacy Policy.