Privacy Policy
Last updated: 29 October 2026
This policy explains how [Operator legal name and address] (“Dildiy”, “we”) handles personal data in the Dildiy (ድልድይ) mobile app and the partner-bank portal. Dildiy helps people in Ethiopia prepare education and medical payments abroad and passes them to a partner bank, which makes the payment. Dildiy never holds, receives or transfers money.
What we collect
- Account data: name, email, phone (optional), country of residence, and your role (applicant or supporter).
- Case data (applicants): who the payment is for and your relationship, the institution, amount, due date, and the partner bank you choose.
- Documents (applicants): invoices, admission letters, ID, proof of relationship and — for medical cases — the hospital’s acceptance or referral letter. Medical documents can reveal health information, which is sensitive data. We only ask for what the bank needs to make the payment; please do not upload diagnoses or medical records beyond that.
- Pledge data (supporters): amount, the licensed remittance operator you use, its transaction reference, and the name and phone of the person in Ethiopia who receives your remittance.
- Technical data: push-notification tokens and basic server logs.
Why we use it
- To check your documents and forward your case to the partner bank you chose (to take steps at your request, and with your explicit consent for health-related documents).
- To let the bank match supporter remittances to cases.
- To send you updates about your case or pledge.
- To prevent fraud and meet legal obligations.
Who sees what
- Partner bank: the full case and documents, once Dildiy forwards the case to that bank. The bank handles the payment under its own licence and privacy policy.
- Supporters abroad: only a redacted summary — category, institution country (and the institution name for education cases), amount, deadline and the short text you write. Never your name, contact details, documents or medical information.
- Applicants: see that support arrived and from which country, not who sent it or their family’s details.
- Service providers: Google Firebase (sign-in and database), our own server host (document storage), and Expo (push notifications). They process data on our instructions.
We never sell personal data or use it for advertising.
Where it is stored and for how long
Documents are stored on our own server, not in third-party file storage. We keep case and pledge records for as long as needed for the payment and for any record-keeping the partner bank or the law requires, then delete or anonymise them. You can ask us to delete your account at any time; some records may have to be kept for legal reasons.
Your rights
You can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent for health-related documents (this may stop a medical case from going ahead). Contact us at [privacy contact email]. You can also complain to your data protection authority (in Norway: Datatilsynet).
Changes
We will post updates here and tell you in the app about significant changes.