How Cool processes user data.
Effective date: March 11, 2026. This policy applies to the Cool mobile application and its supporting services.
1. Who operates Cool
Cool is a mobile application for community finance coordination, mobility matching, partner services, ticketing, and credit visibility in the Rwanda market only. For privacy questions, contact info@ikanisa.com.
2. Data we collect
Depending on how you use the app, Cool may process:
- Phone and WhatsApp number for authentication and account recovery. Authentication may use any valid global WhatsApp number.
- Profile details such as full name and driver status.
- Mobile Money routing details you provide, such as MoMo number or MoMo code.
- Community group, contribution, referral, partner, ticket, and mobility activity.
- Approximate or precise location when you use mobility or nearby-driver features.
- Camera data only when you actively scan QR codes.
- NFC interaction data on supported devices when you initiate NFC flows.
- Push-notification tokens and notification delivery metadata.
- Analytics and feature-flag data through Firebase services.
3. Android-only SMS verification
If you explicitly enable SMS verification on Android, Cool processes incoming payment-confirmation SMS from approved Mobile Money sender IDs to reconcile transactions. The app does not use SMS access for general messaging, marketing, or unrelated inbox reading.
Cool currently narrows automatic verification to approved M-Money sender aliases used for MTN Rwanda payment confirmations. Messages from other senders are not parsed into reconciliation records.
4. How we use data
- To authenticate users and secure accounts.
- To route Mobile Money payment handoffs and reconcile confirmations.
- To operate groups, partner services, tickets, mobility, and credit features.
- To provide product analytics, stability monitoring, and feature rollouts.
- To respond to support requests, disputes, and fraud or abuse concerns.
5. Sharing
Cool may share relevant data with infrastructure and feature providers used to operate the service, including Supabase, Firebase, Meta WhatsApp messaging services, and licensed or designated partners that provide group, financial, mobility, or ticketing services. We do not sell personal information.
6. Data retention
We retain account, transaction, audit, and operational records only as long as reasonably necessary for service delivery, fraud prevention, support, compliance, and legitimate business operations.
7. Your choices
- You can choose whether to enable Android SMS verification.
- You can control some device permissions through Android settings.
- You can request support or delete your account from inside the app.
8. Account deletion
Cool provides an in-app account deletion flow. See Account Deletion for current steps and support details.
9. Security
We use reasonable technical and organizational measures to protect account and transaction data, but no system can guarantee absolute security.
10. Changes
We may update this policy as the product or compliance requirements evolve. The latest version will remain published at this URL.