Privacy Policy

Last Updated: January 1, 2026

Your Privacy Matters: This Privacy Policy explains how Africoin and Africa Railways collect, use, disclose, and protect your personal information when you use our Services.

1. Introduction

Africoin ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy applies to all users of the Africoin platform, Africa Railways ticketing system, Sentinel Portal, OCC Dashboard, and related services (collectively, the "Services").

By using our Services, you consent to the collection and use of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect information that identifies you as an individual, including:

2.2 Blockchain Data

When you interact with our blockchain services, we collect:

2.3 Technical Information

We automatically collect technical data, including:

2.4 Communication Data

We collect information from your communications with us:

3. How We Use Your Information

3.1 Service Provision

We use your information to:

3.2 Platform Operations

We use your data to:

3.3 Communication

We may use your information to:

3.4 Legal Compliance

We process your data to:

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with third-party service providers:

Service Provider Purpose Data Shared
Alchemy Blockchain infrastructure Wallet addresses, transaction data
Pinata (IPFS) Metadata storage Ticket metadata, images
M-Pesa / Mobile Money Payment processing Phone number, payment details
Twilio / Africa's Talking SMS notifications Phone number, message content
Google Cloud Platform Cloud hosting Usage data, logs

4.2 Blockchain Transparency

Important: Blockchain transactions are public and permanent. Your wallet address and transaction history on Polygon and Sui blockchains are publicly visible and cannot be deleted.

4.3 Legal Requirements

We may disclose your information when required by law or to:

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide Services and comply with legal obligations:

7. Your Rights

Depending on your location, you may have the following rights:

To exercise these rights, contact us at privacy@africarailways.com.

Blockchain Limitation: Data stored on public blockchains (Polygon, Sui) cannot be deleted or modified due to the immutable nature of blockchain technology.

8. Cookies and Tracking

We use cookies and similar technologies to:

You can control cookies through your browser settings. Disabling cookies may limit functionality.

9. Third-Party Links

Our Services may contain links to third-party websites (e.g., blockchain explorers, payment gateways). We are not responsible for the privacy practices of these external sites.

10. Children's Privacy

Our Services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Data Protection Laws

12.1 GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing: We process your data based on:

Data Protection Officer: You can contact our DPO at dpo@africarailways.com

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with GDPR.

12.2 POPIA Compliance (South Africa)

We comply with the Protection of Personal Information Act (POPIA). You have rights under POPIA to access, correct, and delete your personal information.

12.3 IDO-Specific Data Processing

For participation in the AFRC Initial DEX Offering (IDO), we collect and process additional information:

Legal Basis: Processing of IDO data is based on:

Data Retention for IDO: KYC documents and transaction records are retained for at least 7 years after the IDO to comply with financial regulations.

Third-Party KYC Providers: We use verified third-party KYC/AML service providers (e.g., Jumio, Onfido) who process your data according to their own privacy policies and security standards.

12.4 Cookie Consent (GDPR/ePrivacy)

We use cookies and similar tracking technologies. Upon visiting our website, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies. You can modify your cookie preferences at any time through our Cookie Settings page.

Cookie Categories:

12.5 International Transfers & Data Localization

Your data may be transferred to and processed in countries outside your residence, including:

For transfers from the EEA to non-EEA countries, we rely on:

12.6 Automated Decision-Making

We may use automated systems for:

You have the right to request human review of any automated decision that significantly affects you.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Services after changes constitutes acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

15. Consent

By using the Africoin platform and Africa Railways services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.