Privacy Policy

1. Zero-Knowledge Architecture

BATWA is engineered on zero-knowledge cryptographic principles. User biometric authentication (fingerprints, facial recognition) and MPIN credentials are processed strictly inside the local hardware security module (Android Keystore / Hardware-Backed Enclave). At no point are raw biometric templates or cleartext MPINs transmitted to or stored on external cloud infrastructure.

2. Information We Process

To deliver core neo-banking services and State Bank of Pakistan (SBP) Raast compatibility, the platform processes:

• Identity Identifiers: CNIC, full legal name, and mobile number linked to your Raast ID.
• Transaction Metadata: Cryptographically signed timestamps, transaction amounts, receiver IBAN / Raast handles, and idempotency tokens.
• Device Telemetry: Hardware integrity states, app signature verification hashes, and OS patch levels to prevent execution on compromised environments.

3. Local Data Storage & Encryption

All sensitive user caches stored on the mobile device are encrypted using industry-standard AES-256-GCM. Decryption keys are managed exclusively by the operating system keystore and cannot be dumped via standard file system inspection or ADB backup utilities.

4. Third-Party Sharing & Commercialization

BATWA strictly does not sell, monetize, or distribute user personal or financial records to third-party ad networks, marketing brokers, or commercial aggregators. Data access is restricted strictly to clearing switches (e.g., SBP Raast switch) for transactional settlement.

5. User Data Rights & Retention

Users maintain full control over their account data. At any time, you may request account termination and cryptographic purging of your local profile cache via in-app settings or official inquiry.

6. Academic Transparency Notice

BATWA is an advanced university Object-Oriented Programming (OOP) initiative developed by Muhammad Ali, Muhammad Razi, and Deepak under academic supervision. Test and simulated transactions are run in sandbox environments without live commercial lending risk.