Privacy Policy

1. Introduction and Core Philosophy

Welcome to Project Aftab. A compliant humanitarian financial rail is operated to securely deliver aid to high-friction environments. Because the physical safety and digital privacy of users are paramount, the architecture is designed around “Privacy Pools” and zero-knowledge cryptography. Data minimization is prioritized, meaning only information strictly necessary to satisfy global regulatory requirements is collected, and systems are structured to protect users from hostile surveillance.

2. Information Collected

Information is collected in two distinct phases: Pre-Launch (Waitlist) and Active Service (Platform Onboarding).

A. Waitlist and Website Usage Data

When subscribing to the pilot waitlist, standard contact and preference information is collected to manage the rollout. This may include:

• Provided email addresses and contact information.
• The intended use of the platform (e.g., supporting a specific family versus donating to a general hardship pool).
• The estimated monthly donation or remittance volume.

B. Identity Verification (KYC) Data

To operate a legally compliant humanitarian voucher system, the identities of donors and beneficiaries must be verified.

• For Donors: Standard Know Your Customer (KYC) data is processed, including identity documents and liveness checks, to ensure compliance with aggregate funding limits.
• For Beneficiaries: Beneficiaries verify their identity using a local mobile scan of their governmentally issued documents. Mathematical processes confirm physical identity. Crucially, Project Aftab does not transmit, process, or store raw biometric data. The system merely generates a one-way cryptographic hash to verify the user.

3. How Information Is Used

Personal data is not sold. Data is processed only to the extent strictly necessary to:

• Ensure Regulatory Compliance: Continuous, dual-layer sanctions screening is utilized against global OFAC Specially Designated Nationals (SDN) lists, and secondary network checks are conducted to ensure funds only reach intended civilian recipients.
• Execute Secure Delivery: Secure digital proofs are used to verify that aid has been received directly in the beneficiary's local banking app without requiring invasive bank APIs.
• Communicate Updates: Provided contact information is used to send staged access invitations and critical platform updates.

4. How Information Is Shared

Data is shared only when strictly necessary to operate the regulated infrastructure:

• Regulatory & Compliance Partners: Anonymized or hashed data may be shared with designated compliance API partners solely for mandatory sanctions screening.
• Vetted Local Network: To convert digital vouchers into local currency, a vetted network of local agents is utilized. These partners only receive the cryptographic transaction data required to complete the digital “handshake” and verify receipt of funds.

5. Advanced Security & Physical Protection

Standard data security is not enough for the environments served. Unique safeguards are implemented:

• Cryptographic Anonymity: By using Privacy Pools, regulators are provided with mathematical certainty of compliance (Negative Assurance) while the transaction graph and user identities are actively shielded from hostile surveillance.
• The Panic Protocol: The mobile application includes a hidden “kill switch” (Duress PIN). This allows a user under physical duress to instantly wipe all sensitive data from their device and flag the transaction.

6. Rights Regarding Data

Depending on global jurisdiction (such as under GDPR or CCPA), users have the right to:

• Request access to personal data held about them.
• Request the deletion of personal data (subject to the legal obligation to retain certain compliance and anti-money laundering records for a minimum of 7 years).
• Opt-out of non-essential marketing communications.

7. Changes to This Privacy Policy

The platform operates in a dynamic regulatory environment. This Privacy Policy may be updated as the pilot expands or as regulatory frameworks evolve. Approved subscribers will be notified of any material changes.

8. Contact Us

For questions about this Privacy Policy, data protection practices, or cryptographic verification methods, please reach out at: https://tally.so/r/RGRyBv