Your data stays yours

Overview

BlueCards is built for people the financial system has overlooked, so trust is everything. This policy explains, in plain language, what information we hold, why we hold it, and the choices you have. It applies to the BlueCards app, cards and services operated by BlueCards Technologies Ltd.

The short version: we keep your data in Bangladesh, use it only to run the service you asked for, protect it with bank-grade security, and never sell it.

Information we collect

• Identity your name, date of birth, National ID (NID) number, photograph and a biometric confirmation, used to verify who you are.
• Contact your mobile number and address, so we can reach you and deliver a card.
• Employment and pay your employer, role and verified salary, shared by your employer with your consent, to set a fair credit limit.
• Transactions your card, wallet, QR, wage-advance, savings and repayment activity.
• Device and usage device identifiers, app logs and approximate location, used to keep your account secure and prevent fraud.

How we use your information

• Run the service to issue your card and provide credit, early wages, savings, insurance and payments.
• Verify and decide to confirm your identity (KYC) and set a credit limit sized to the wage we can verify.
• Keep you safe to detect, prevent and investigate fraud and unauthorised access.
• Meet our duties to comply with Bangladesh Bank, BFIU and other legal requirements.
• Support and improve to answer your questions and make the service work better.

Why we are allowed to use it

We rely on your consent, on the contract we have with you to provide the service, on our legal obligations as a regulated financial provider, and on our legitimate interest in keeping the platform safe. You can withdraw consent at any time, though some features may not work without the data they depend on.

Where your data lives

Your data is stored on servers located in Bangladesh. If any processing needs to happen outside the country, it does so only with appropriate safeguards and where the law permits.

Who we share it with

We share data only where it is needed to run the service or where the law requires it:

• Our partner bank which issues the card and holds funds under its own licence.
• The Visa network to authorise and settle payments.
• Our licensed insurer and asset manager to provide the insurance and savings features you choose.
• Identity and fraud services to verify you and protect your account.
• Regulators and authorities when we are legally required to report or respond.

We never sell your data, and we never share it for third-party advertising.

How long we keep it

We keep your data for as long as your account is open. After it closes, we keep the records that financial law requires us to retain, and then delete or anonymise the rest.

Your rights

You can ask us to show, correct, export or delete your data, and to withdraw consent, from inside the app or by emailing us. We will always respond. Some records must be kept to meet our legal duties, and we will tell you when that applies.

How we keep it safe

We protect your data with AES-256 encryption in transit and at rest, hardware-backed key storage, strict least-privilege access, full audit logging and round-the-clock monitoring. No system is perfect, but we hold worker data to a higher standard, not a lower one.

Age

BlueCards is for adults aged 18 and over. We do not knowingly collect data from anyone under 18.

Changes to this policy

If we make an important change, we will tell you in the app before it takes effect, so nothing changes quietly.

Contact us

For any privacy question, or to exercise a right above, email privacy@getbluecards.com. You can also write to BlueCards Technologies Ltd, Level 7, Bay's Galleria, 57 Gulshan Avenue, Dhaka 1212, Bangladesh.