Privacy Policy
Last updated: 15 October 2026
1. Who we are
anka ("anka", "we", "us") is a wallet and card platform available at anka.tf and in the anka app. The operator of anka, which is responsible for your personal data, is [to be updated]. You can reach us using the details in section 12.
2. What this policy covers
This policy explains what personal data we collect when you use our website, apps, and business and merchant portals (the "Services"), how we use and share it, and the choices you have.
3. Data we collect
- Sign-in and account data — the email address, mobile number or wallet address you use to sign in. If you sign in with Google, we receive your Google account email address, whether it is verified, and a Google account identifier. We also keep the referral or merchant code you joined with and your account settings.
- Security data — your security password (stored only as a salted hash); trusted-device records (a random device identifier stored only as a hash, a device label and when it was last seen); sign-in and verification-code records, including IP address and time; and authenticator settings for business and platform staff accounts.
- Card application and identity data — when you apply for or activate a card: your name, date of birth, gender, nationality, phone number, email, residential address, identity document details and images, a selfie, occupation, income range, account purpose and expected usage. Our servers pass this information to the card-issuing institution for identity verification and card issuance, and that institution holds it under its own privacy terms. We keep the verification status, cardholder and card identifiers, and the last four digits of your card.
- Card details — when you view your full card number and CVV, enter a physical card's details to activate it, or set a card PIN, these values pass through our servers only to be shown to you or sent to the card-issuing institution. We do not store full card numbers, CVV, PINs or identity document images. Card verification codes for online payments or for adding your card to Apple Pay or Google Pay are sent to us by the card-issuing institution and shown to you in the app; we keep them in memory for no more than 10 minutes and do not store them.
- Transaction data — top-ups and deposits (including blockchain addresses, networks and transaction hashes), card transactions (merchant, amount, currency, fees and status), transfers, rewards and referral commissions, and payroll or gift payouts you receive through a business.
- Business data — if you use the business or merchant portal: the business name, team members' contact details and roles, and the payroll rosters, card batches and payout batches you create.
- Data from businesses and merchants — if a business adds you to its payroll roster or card batch, or a merchant brings its members to anka, we receive the details they provide, such as your name, phone number, email, employee number, nationality, country of residence, wallet address, member level and referral relationships.
- Referral data — who referred you, who you referred, and the resulting referral tree.
- Technical data — IP address, browser and device type, language, pages visited and error logs. Our website uses aggregated web analytics from our content delivery provider; these analytics do not use cookies.
- Communications — messages you send us and records of service notices we send you.
4. How we use your data
- To create and secure your account and sign you in, including checking verification codes, detecting unusual sign-ins and asking for your security password before sensitive actions.
- To provide the cards, top-ups, payouts and other features you request, and to show your balances and history.
- To meet legal obligations, including identity verification, anti-money-laundering and counter-terrorist-financing checks, sanctions screening, record-keeping and responding to lawful requests.
- To prevent fraud, abuse and misuse of rewards and referral programs.
- To provide support and send service notices, such as security alerts and changes to our terms.
- To maintain, analyse and improve the Services.
Where the law requires a legal basis, we rely on performing our contract with you, complying with legal obligations, our legitimate interest in keeping the Services secure and improving them, and your consent where we ask for it.
5. How we share data
We share personal data only as needed with:
- Card-issuing institutions and card networks (such as Visa and Mastercard), to verify identity, issue and operate cards, and process transactions.
- Custody, wallet-infrastructure and blockchain service providers, to receive and send digital assets. Transactions on public blockchains are visible to anyone.
- Sign-in and communication providers, such as Google if you choose to sign in with Google, and the email or SMS providers that deliver verification codes.
- Cloud hosting, content delivery and security providers that run our infrastructure.
- Businesses you are connected with — if you join through a merchant, or receive payroll or gifts from a business, that business can see what is needed for that relationship, such as your account ID, wallet address, activation and card status, referral relationships within its community, the payouts it sent you and the commissions arising from your activity.
- People in your referral tree — if you joined through someone's referral, they and the referrers above them (up to ten levels) can see limited information about your account: your wallet address, when you joined, how many cards you hold and your position in the tree.
- Authorities, auditors and professional advisers, where required by law or to protect rights and safety.
- A successor organisation in a merger, acquisition or restructuring, which will remain bound by this policy.
We do not sell your personal data.
6. International transfers
Our providers may process data in countries other than yours. Where the law requires it, we put appropriate safeguards in place for these transfers.
7. How long we keep data
We keep personal data while your account is open, and afterwards for as long as needed to meet legal, regulatory, tax, accounting and anti-money-laundering record-keeping requirements, to keep the Services secure, and to resolve disputes.
8. Security
Connections between your device and the Services use HTTPS encryption. Security passwords and device identifiers are stored as hashes. Designated sensitive actions, such as moving funds or viewing full card details, require a recent check of your security password. Access to personal data is limited to people who need it for their role.
9. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict certain processing, to receive your data in a portable format, and to withdraw consent. Some data must be kept to meet legal obligations even if you ask us to delete it. To exercise these rights, contact us using the details in section 12. You may also complain to your local data protection authority.
10. Local storage and cookies
We use your browser's local storage to keep you signed in, to remember preferences such as language and theme, and to hold the random device identifier used to recognise trusted devices. We do not use advertising cookies.
11. Children
The Services are for adults aged 18 and over. We do not knowingly collect personal data from children.
12. Changes and contact
We may update this policy. We will post the new version on this page with a new date and announce material changes in the app.
Operator: [to be updated]
Contact: [to be updated]
This policy is available in English and Chinese. If the two versions differ, the English version prevails.
隐私政策
最后更新：2026 年 10 月 15 日
1. 我们是谁
anka 安卡（下称「anka」「我们」）是一个钱包与卡平台，通过 anka.tf 网站和 anka App 提供服务。anka 的运营方、即对你的个人数据负责的主体为：【待更新】。联系方式见第 12 条。
2. 本政策的适用范围
本政策说明你使用我们的网站、App 以及企业与商户后台（下称「本服务」）时，我们收集哪些个人数据、如何使用和共享，以及你有哪些选择。
3. 我们收集的数据
- 登录与账户数据——你用来登录的邮箱、手机号或钱包地址。使用谷歌账号登录时，我们会收到你的谷歌账号邮箱、该邮箱是否已验证，以及谷歌账号标识。我们也会保存你加入时使用的邀请码或商户码，以及账户设置。
- 安全数据——安全密码（只保存加盐哈希）；受信设备记录（随机设备号只保存哈希值，另有设备名称和最近使用时间）；登录与验证码记录，包括 IP 地址和时间；企业与平台人员账号的验证器设置。
- 开卡与身份数据——申请或激活卡片时填写的姓名、出生日期、性别、国籍、电话、邮箱、居住地址、证件信息与证件照片、自拍照、职业、收入区间、账户用途与预计用量。这些信息经我们的服务器转交发卡机构，用于身份核验和发卡，由发卡机构按其隐私条款保管。我们保存核验状态、持卡人与卡片标识，以及卡号后四位。
- 卡片信息——你查看完整卡号和 CVV、录入实体卡信息激活、或设置卡密码时，这些信息只经过我们的服务器展示给你或转交发卡机构。我们不保存完整卡号、CVV、卡密码或证件照片。网上支付或把卡添加到 Apple Pay、Google Pay 时的卡片验证码，由发卡机构发给我们，在 App 内显示给你；我们只在内存中保留不超过 10 分钟，不做保存。
- 交易数据——充值与入金（包括区块链地址、网络和交易哈希）、卡消费（商户、金额、币种、手续费和状态）、转账、奖励与推荐返佣，以及你通过企业收到的工资或红包。
- 企业数据——使用企业或商户后台时：企业名称、团队成员的联系方式与角色，以及你创建的工资名册、批量开卡和发放批次。
- 来自企业与商户的数据——企业把你加入工资名册或批量开卡名单，或商户把其会员带到 anka 时，我们会收到他们提供的信息，例如姓名、电话、邮箱、员工编号、国籍、居住国家、钱包地址、会员等级和推荐关系。
- 推荐关系数据——谁推荐了你、你推荐了谁，以及由此形成的推荐关系树。
- 技术数据——IP 地址、浏览器与设备类型、语言、访问的页面和错误日志。网站使用内容分发服务商提供的汇总访问统计，该统计不使用 Cookie。
- 沟通记录——你发给我们的消息，以及我们向你发送的服务通知记录。
4. 我们如何使用数据
- 创建并保护你的账户、让你登录，包括核对验证码、识别异常登录，以及在敏感操作前要求输入安全密码。
- 提供你申请的卡片、充值、发放等功能，展示你的余额和记录。
- 履行法律义务，包括身份核验、反洗钱与反恐怖融资审查、制裁名单筛查、记录保存，以及回应合法的调取要求。
- 防范欺诈、滥用，以及对奖励和推荐活动的不当使用。
- 提供客服支持并发送服务通知，例如安全提醒和条款变更。
- 维护、分析和改进本服务。
在法律要求说明处理依据的地区，我们依据的是：履行与你之间的合同、履行法律义务、保障本服务安全与持续改进的正当利益，以及在我们征求时你给予的同意。
5. 我们如何共享数据
我们只在必要范围内与以下各方共享个人数据：
- 发卡机构与卡组织（如 Visa、Mastercard）：用于身份核验、发卡与卡片运营、处理交易。
- 托管、钱包基础设施与区块链服务商：用于收发数字资产。公链上的交易任何人都可以查看。
- 登录与通讯服务商：例如你选择谷歌登录时的谷歌，以及发送验证码的邮件或短信服务商。
- 云托管、内容分发与安全服务商：用于运行我们的基础设施。
- 与你有关联的企业：如果你通过商户加入，或从企业领取工资、红包，该企业能看到这段关系所需的信息，例如你的账户 ID、钱包地址、激活与持卡状态、其社群内的推荐关系、它发给你的款项，以及你的使用产生的返佣。
- 你推荐关系树中的人：如果你经他人推荐加入，推荐你的人及其上方的推荐人（最多十层）能看到你账户的有限信息：钱包地址、加入时间、持卡数量，以及你在推荐关系树中的位置。
- 监管与执法机关、审计及专业顾问：在法律要求或为保护权利与安全时。
- 承继方：发生合并、收购或重组时的承继主体，其仍受本政策约束。
我们不出售你的个人数据。
6. 跨境传输
我们的服务商可能在你所在国家或地区以外处理数据。法律有要求时，我们会为这类传输采取适当的保障措施。
7. 保存期限
账户存续期间我们会保存你的个人数据；账户关闭后，仍会在满足法律、监管、税务、会计和反洗钱记录保存要求，保障本服务安全，以及处理争议所需的期限内继续保存。
8. 安全
你的设备与本服务之间的连接使用 HTTPS 加密。安全密码和设备号以哈希形式保存。动钱、查看完整卡片信息等指定敏感操作，需要你近期验证过安全密码。个人数据只对工作需要的人员开放。
9. 你的权利
视你所在地的法律，你可能有权查阅、更正或删除你的个人数据，反对或限制某些处理，以可携带的格式获取数据，以及撤回同意。部分数据即使你要求删除，也必须为履行法律义务而保存。行使这些权利，请按第 12 条的方式联系我们。你也可以向当地数据保护机构投诉。
10. 本地存储与 Cookie
我们使用浏览器的本地存储来保持登录、记住语言和主题等偏好，并保存用于识别受信设备的随机设备号。我们不使用广告类 Cookie。
11. 未成年人
本服务面向年满 18 周岁的成年人。我们不会有意收集未成年人的个人数据。
12. 变更与联系
我们可能更新本政策。新版本会在本页发布并更新日期；重要变更会在 App 内通知。
运营方：【待更新】
联系方式：【待更新】
本政策提供英文和中文版本；两者不一致时，以英文版本为准。