§ Legal

Personal data & GDPR

Last updated: June 2026

1. Who we are

Amarah is the data controller for your personal data. We are a company registered in Cameroon, operating the site useamarah.vercel.app and the Amarah mobile app. For any data-related question: hello@useamarah.com.

2. What we collect

We collect only data necessary to provide our services:

Identity information: name, date of birth, government ID (required for regulatory KYC)
Contact details: email address, mobile phone number
Financial information: Mobile Money wallet number, Amarah transaction history
Technical data: IP address, device type, session data (via performance cookies)
Geolocation information: country of residence (for regulatory compliance)

3. Why we use them

Service deliveryAccount opening, order processing, portfolio management

Regulatory complianceKYC/AML obligations required by US and Cameroonian regulations

SecurityFraud detection, account protection, prevention of unauthorised access

CommunicationTransaction confirmations, security alerts, service updates

Product improvementAnonymised usage analytics to improve the experience

Marketing (with consent)Amarah news, new features — only if you have consented

4. Retention periods

We retain your data for as long as necessary for the purposes described above:

Active account data: account lifetime + 7 years (financial regulatory requirement)
KYC data: 5 years after account closure (AML obligations)
Transaction data: 7 years (accounting and tax obligations)
Performance cookies: maximum 13 months
Marketing communications: until you withdraw consent

5. Your rights

In line with Cameroonian electronic communications law and in the spirit of the European GDPR, you have the following rights:

Right of access: obtain a copy of your personal data we hold
Right of rectification: correct inaccurate or incomplete data
Right of erasure: request deletion of your data (subject to legal obligations)
Right to portability: receive your data in a structured, machine-readable format
Right to object: object to processing for marketing purposes
Right to withdraw consent: at any time, for consent-based processing

To exercise these rights, send your request to hello@useamarah.com. We respond within 30 days.

6. International transfers

Your data may be transferred to and processed in the United States, where our broker partner is based. These transfers are made with appropriate safeguards in place. Our hosting provider (Vercel) operates data centres in Europe and the United States.

7. Contact

For any question about your personal data or to exercise your rights:

hello@useamarah.com