FayPass — Privacy policy
Last updated: 14 October 2026
This policy applies to the FayPass app (travellers), the FayPass Pro app (transport company staff) and the faypass.com website. FayPass is a product of Fawzayni Group.
Data controller
Fawzayni Group, Dakar, Senegal — contact@fawzaynigroup.com.
Data we collect
Account
- Name, phone number and, if you provide it, email address.
- PIN code: never stored in plain text, only as an irreversible hash.
- For FayPass Pro: your company and role (owner, manager, agent…).
Phone verification
A one-time code is sent to you by SMS to confirm your number or reset your PIN.
Bookings and trips
Trips searched and booked, seats, passenger details, tickets (QR code) and boarding status.
Payments
Amount, status and reference of transactions. Payments are processed by Wave: we never receive or store your Wave credentials.
Location (traveller app)
Only if you allow it, to suggest nearby terminals and addresses. You can refuse or withdraw this permission at any time in your phone settings.
Camera and photos (FayPass Pro)
- The camera is used to scan ticket QR codes. Images are neither saved nor sent.
- Photo access is used only to import the company logo you choose.
Notifications
A device notification identifier, to keep you informed about your trips (departure, delay, boarding).
Technical data
Device model, system and app version, technical logs and error reports, to keep the service working and secure.
Why we use it
- Create and secure your account.
- Sell, issue and check tickets.
- Process payments, refunds and payouts to companies.
- Let companies organise their trips, vehicles and staff.
- Send you information about your trips.
- Fix errors, prevent fraud and meet our legal obligations.
We do not use your data for advertising and we never sell it.
Who we share it with
The transport company running your trip receives what it needs for the trip and boarding (name, phone, ticket, seat).
Our service providers, only to run the service:
| Provider | Role |
|---|---|
| Wave | Payments and refunds |
| Africa’s Talking | Verification SMS |
| Google Firebase | Notifications |
| Sentry | Technical error tracking |
| [Server host] | Hosting of service data |
Some of these providers process data outside Senegal, with appropriate security safeguards.
We may also disclose data to authorities when required by law.
Retention
- Account: while the account is active, then deleted within [30] days of a deletion request.
- Bookings and payments: [period] years, for accounting and tax obligations.
- Technical logs: [period].
Security
Traffic is encrypted (HTTPS), PIN codes are stored as hashes and access to data is limited to people who need it.
Your rights
Under Senegalese Law No. 2008-12 of 25 January 2008 on personal data protection, you may access your data, have it corrected or deleted, and object to its processing.
Write to contact@fawzaynigroup.com. To delete your account, follow the account deletion procedure.
You may also contact Senegal’s Personal Data Protection Commission (CDP).
Children
FayPass is not intended for children under [13], who must not create an account. Their tickets are booked by an adult.
Changes
We may update this policy. The last update date is shown at the top of this page; for significant changes, we will let you know in the app.