Since July 20, 2022, Google requires all apps published via the Google Play Store to declare how their app collects and handles user data. This document provides information about the Gini Bank SDK’s data use to help you fill out or update your app’s Data safety form for the Google Play Store.

Data collection and security

For the question “Does your app collect or share any of the required user data types?” please answer Yes. Gini Bank SDK collects information about purchases and transactions.

For the questions “Is all of the user data collected by your app encrypted in transit?“ please answer Yes. Gini Bank SDK transmits data only via https and in addition you can also use certificate pinning.

The answer to the question “Do you provide a way for users to request that their data is deleted?“ depends on whether you provide your users a way to request data deletion. If you do, then you can contact Gini support or use the Gini Pay API to delete user data.

Data types

Data usage and handling

The following sections provide information for filling out the “Data usage and handling” forms. For ease of use the terms and phrases which are used in the forms are highlighted in bold letters.

Financial info - Purchase history

The Gini Bank SDK collects data related to purchases for a limited duration. This duration is 28 days unless a different period has been agreed upon during contract negotiations. This means that data is not processed ephemerally. In addition users can’t choose whether this data is collected.

The purpose for collecting purchase history is to provide SDK functionality (app functionality) and for analytics.

This data is only used internally and is not shared with third-parties.

Photos and videos

The Gini Bank SDK collects photos for a limited duration. This duration is 28 days unless a different period has been agreed upon during contract negotiations. This means that data is not processed ephemerally. In addition users can’t choose whether this data is collected.

The purpose for collecting photos is to provide SDK functionality (app functionality) and for analytics.

This data is only used internally and is not shared with third-parties.

Files and docs

The Gini Bank SDK collects PDF files for a limited duration. This duration is 28 days unless a different period has been agreed upon during contract negotiations. This means that data is not processed ephemerally. In addition users can’t choose whether this data is collected.

The purpose for collecting PDF files is to provide SDK functionality (app functionality) and for analytics.

This data is only used internally and is not shared with third-parties.

App activity

The Gini Bank SDK may collect user app interactions with the SDK, provided you have given explicit consent. This data is not processed ephemerally. In addition users can’t choose whether this data is collected.

The purpose for collecting app interactions is analytics.

This data is only used internally via analytics service providers which process them on behalf of Gini.

Device or other IDs

The Gini Bank SDK may collect anonymous user IDs which are generated random IDs and unique to app installations, provided you didn’t override authentication (via a custom session manager) or you didn’t implement custom networking. This data is not processed ephemerally and users can’t choose whether this data is collected.

The reason for collecting anonymous user IDs is to provide SDK functionality (app functionality) and for analytics to monitor service quality.

This data is only used internally and is not shared with third-parties.