momo-agent-pro-privacy

Privacy Policy for MoMo Agent Pro

Effective date: 3 July 2026

MoMo Agent Pro (“the app”, “we”, “our”) is a productivity tool for Ghanaian MTN Mobile Money agents. This policy explains what data we collect, why we collect it, and how we protect it. It applies to the mobile app distributed on the Google Play Store.

If you have questions, contact us at [YOUR-EMAIL@example.com].

---

1. Who we are

The app is developed and operated by [YOUR NAME OR BUSINESS NAME], based in Ghana. It is not affiliated with MTN. It is an independent productivity tool that dials MTN USSD codes on your behalf.

2. What we collect

We collect the minimum data required to run the app:

Account information

• Your phone number, which you provide when you first sign in.
• A device fingerprint — a unique code identifying your phone — used to bind one account to one device so someone else cannot log in as you from another phone.

Transaction records

• The metadata of each MoMo transaction you initiate through the app: transaction type (Cash In, Cash Out, Buy Credit), recipient phone number, amount, date, time, and success/failure status.

Subscription information

• Whether you are on the free trial, an active paid period, or expired.
• The Google Play purchase token issued when you renew. We use it only to verify with Google that payment succeeded.

3. What we do NOT collect

To be explicit about what the app never touches:

• We do not collect or store your MoMo PIN. Your PIN is entered directly in MTN’s own dialer dialog, never in our app or on our servers.
• We do not read your SMS messages.
• We do not access your contacts, photos, files, camera, or microphone.
• We do not track your location.
• We do not collect banking or card information — Google Play handles all payments and we never see them.
• We do not use advertising networks or sell your data.

4. Why the app requests each permission

Android requires apps to declare the permissions they use. Here is exactly why each permission is needed:

Phone (CALL_PHONE) — Required to dial MTN USSD codes (like *171#) when you tap a transaction button. Without this, no transaction can start.

Phone state (READ_PHONE_STATE, READ_PHONE_NUMBERS) — Required to detect which SIM slot is your MTN line, so the call is placed on the correct SIM instead of Android prompting you to pick a SIM every time.

Network state (ACCESS_NETWORK_STATE) — Required so the app can decide whether to sync your transaction history now or save it locally and sync later.

Call log (READ_CALL_LOG) — [If you do not actually use this permission in the current app, delete this line and remove the permission from AndroidManifest.xml before submitting to Play Store. Google reviewers scrutinize this permission heavily. If you do use it, explain exactly why here — e.g., “to confirm the USSD call completed on your dialed number.”]

Accessibility Service (USSD Helper) — See Section 5.

5. The USSD Helper accessibility service

MTN’s USSD menus require typing multiple selections (option numbers, phone number, amount) into a dialog. Doing this by hand takes 10–15 seconds per transaction. The USSD Helper is an Android accessibility service that types those selections automatically, so you only enter your PIN.

What the USSD Helper reads

• Only the MTN USSD dialog in your phone’s system dialer.
• Only while a transaction you initiated is in progress.

What the USSD Helper does NOT do

• It does not read any other apps or screens.
• It does not record your PIN. PIN entry happens in MTN’s own dialog, not in ours.
• It does not send anything it observes to our servers or any third party.
• It stops watching as soon as MTN’s final response is received (or after a 2-minute safety timeout).

The USSD Helper is a required part of the app’s core function. It runs entirely on your device. Nothing it reads leaves your phone.

6. Third parties we work with

We use two third-party services, only for the purposes described:

Supabase (supabase.com) — Hosts our database and authentication service. Stores your phone number, subscription status, and transaction metadata. Supabase does not receive any other data from you.

Google Play (play.google.com) — Processes all payments. When you renew, Google Play collects your payment details directly — we never see them. Google returns only a purchase confirmation token, which we forward to our verification server.

We do not share your data with anyone else, and we do not sell it.

7. Where your data is stored

• Account, subscription, and transaction data are stored on Supabase’s cloud servers, which may be hosted outside Ghana.
• A copy of your recent transaction history is also stored on your phone so the app works when you have no data connection. This on-device copy is removed when you clear the app’s data or uninstall.

8. How long we keep your data

• Transaction records: kept while your account is active.
• Account information: kept until you request deletion.
• On your request, we delete all your data within 30 days. Deletion is permanent.

9. Your rights

You have the right to:

• See what data we have about you — email us; we send it within 14 days.
• Correct data — update your phone number in the app’s Account screen, or email us for anything else.
• Delete your account and all data — email us; deletion completes within 30 days.

To exercise any of these rights, email [YOUR-EMAIL@example.com].

10. Children’s privacy

The app is intended for adult MoMo agents. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, email us and we will remove it.

11. Security

• All communication with our servers uses HTTPS encryption.
• Your session token is stored on your phone using Android’s SecureStore.
• Our database uses row-level security so each user can only read their own data.

No system is 100% secure. If a breach occurs that affects your data, we will notify you within 72 hours of discovery.

12. Changes to this policy

If we change this policy, we will update the “Effective date” above and post the new version in the app and on this page. Continued use of the app after a change means you accept the new terms.

13. Contact

Questions, requests, or complaints:

Email: [allureyaw@gmail.com]

We respond to all inquiries within 5 business days.