Privacy Policy

Manfaa (operated by Manfaa Pvt Ltd, Malé, Republic of Maldives) is a cashback rewards platform: you shop at partner stores, the store credits your purchase, and you earn cashback paid out in Maldivian rufiyaa. This policy explains what information we hold about you as a Manfaa member and how we use it. For questions or requests, write to [email protected].

• Account details — your name, Maldivian mobile number (verified by SMS code) and password. Your account is assigned a member code, which is how stores identify you at the till.
• Payout details — the bank account name, bank and account number you provide so we can pay out your cashback. We never ask for or store card numbers.
• Transaction records — created when a partner store credits a purchase: the store, invoice number, eligible amount, cashback earned and its status (pending, confirmed, reversed, paid).
• Device and preference data — a push notification token if you enable notifications in the mobile app, and your language and theme choices.
• Location, only when you ask — the “Near you” feature uses your device location to sort nearby stores at the moment you use it. We do not track or store your location history.

• To operate your cashback balance and pay out what you earn.
• To let a store verify you at the till: when you present your member code or QR, that store sees your name and member code so the right person is credited.
• To send service notifications — cashback earned or confirmed, payouts made — and SMS codes for signing in.
• To prevent fraud and abuse of the rewards programme.
• To comply with law and keep accurate financial records.

We do not sell your personal information, and we do not share it with anyone for their marketing.

• The store you shop at — sees your name and member code when crediting your purchase, and the transaction it created. Stores may use this only to operate cashback, not for marketing.
• Service providers — our SMS gateway (to deliver sign-in codes) and Google Firebase (to deliver push notifications).
• Banks — the details needed to transfer your payout.
• Authorities — where the law of the Maldives requires it.

Your account details are kept while your account is active. Transaction and payout records are financial records shared with the stores that funded your cashback, so after account deletion they are retained in a form no longer linked to your identity — see our account deletion page for exactly what is removed and what is anonymised.

• View and correct your profile and payout details in the app.
• Turn push notifications off in your device settings.
• Delete your account — the process is described on the account deletion page.

If this policy changes in a way that matters, we will tell you in the app or by notification before the change takes effect. The date at the top is the version you are reading.