LeCoCash

LeCoCash Agent Privacy Policy

Last updated: October 28, 2026

Version: 1.1

0. IN SHORT

  • Once your account is created, LeCoCash Agent works without an Internet connection: your deposits go through the MTN or Orange network, and your withdrawals are confirmed by the operator's SMS.
  • Your operations and your customers' data stay on your phone, in an encrypted database protected by your code. No number, name, reference, balance or SMS is sent to us, except an unrecognised SMS you choose to send us, with its digits hidden (section 3).
  • When the Internet is available, the app sends LeCoCash anonymous statistics on each finished operation: the operator, the type, the status, the rounded amount, the rounded commission, the day and the hour. They identify neither you nor your customers (section 7).
  • The app reads only the operator's SMS (Orange Money and MTN MoMo). Your personal messages are neither analyzed nor stored.
  • We never know your Mobile Money secret code, and we never sell your personal data or your customers' data.
  • You can view, correct or delete your data at any time.

1. WHO WE ARE

The LeCoCash Agent app is published by LeCoCash Inc., a Canadian company, Quebec, Canada. LeCoCash Inc. is the controller of your account data within the meaning of Law No. 2024/017 of December 23, 2024 on the protection of personal data.

LeCoCash Agent helps Orange Money and MTN MoMo agents and merchants in Cameroon launch their deposits and keep the register of their operations. LeCoCash is neither a bank nor a payment institution: the funds stay with the operator. This policy is part of the LeCoCash Agent Terms of Use.

2. YOUR ACCOUNT DATA

To create your account, you give your first name, your last name and your phone number. This number receives a sign-in code by SMS. This information is kept in your account, on the servers of our provider Google Firebase (section 6).

The LeCoCash account

After you sign in, the app also opens a minimal account on the LeCoCash servers. It holds only the technical identifier of your Firebase account (the project and the identifier given by Firebase), its creation and last sign-in dates, and the versions of the Terms of Use and of this policy that you accepted, with their date. Neither your number nor your name is stored there. "Delete my account", in Settings, deletes it (section 9).

The Internet is needed only to create your account and to sign in again, for example on a new phone. When the Internet is available, the app also uses it to keep the LeCoCash account up to date and to send the anonymous statistics of section 7; without the Internet, it works exactly the same way.

3. THE DATA KEPT ON YOUR PHONE

This data stays in the app's private storage, on your phone. It is not sent to us: only the anonymous statistics of section 7 are drawn from it, and an unrecognised SMS leaves only if you decide so (below).

The operator's SMS

  • The app reads only the SMS sent by Orange Money and MTN MoMo to your SIM, to confirm your operations.
  • It keeps the amount, the customer's number and name, the operation reference, the date, the balance, the commission and the fees. It does not keep the text of the SMS.
  • SMS from other senders are set aside as soon as the sender is checked: their content is neither analyzed nor stored.

Unrecognised SMS

  • When an operator SMS looks like an operation but does not match the format the app knows, the app shows it to you and offers to send it to the LeCoCash team, to improve how SMS are read.
  • Before it is kept or shown, its text is masked: each phone number keeps only its first digit and its last two, and the balance is hidden. The amount, the date, the reference and any names remain visible.
  • Nothing is sent unless you tap "Send on WhatsApp". The app then opens WhatsApp (or, failing that, your phone's share sheet) with the message ready; you are the one who sends it. WhatsApp handles this message under its own terms.
  • You can decline with "Later". Either way, the masked SMS is erased from your phone. The app keeps at most 20 of them awaiting your choice.

Your operations and your tools

  • Operations: the deposits you launch and the withdrawals received from your customers (type, amount, customer's number and name, status, dates).
  • SIMs: the operator and slot of your SIMs, to dial each code on the right SIM.
  • Directory: the customer numbers and names you save yourself. The app does not read your phone's contacts.
  • QR posters: the information you enter for your poster (business name, holder, agent or merchant code, number).
  • Pending statistics: the anonymous records of section 7, kept until they are sent.

Your security

  • App code: it is never stored in plain text; only an encrypted fingerprint is kept, in the phone's secure area.
  • Operator secret code: the app never sees it, you enter it in the operator's menu.

4. YOUR CUSTOMERS' DATA

Your customers' numbers and names appear in the operator's SMS and in your directory. They are used only to keep your register, on your phone: we do not receive them and do not use them.

You process them as part of your activity as an agent or merchant. It is up to you to use them only to serve your customers, in accordance with Law No. 2024/017 and your contract with the operator.

5. THE PERMISSIONS REQUESTED

  • SMS (receive and read): confirm your operations from the operator's SMS.
  • Phone (phone state, calls): recognize your SIMs and dial the operator's code on the chosen SIM.
  • Camera: read a customer's QR code, at the moment you scan it. No image is stored.
  • Internet: create your account, sign in again, keep the LeCoCash account up to date and send the anonymous statistics of section 7.

You can withdraw a permission at any time in the phone settings; only the feature that depends on it then stops working.

6. WHO HAS ACCESS TO YOUR DATA

  • Our technical provider, Google Firebase, on our behalf and only for us: hosting your account, sending the sign-in code by SMS and checking that the app signing in, or sending the statistics, is genuine (Google's Play Integrity and Firebase App Check services). It acts on our instructions, under contract, and cannot use your data for itself.
  • Our host, Amazon Web Services (AWS), on our behalf and only for us: it hosts the LeCoCash servers, which keep the LeCoCash account of section 2 and the anonymous statistics of section 7. It acts on our instructions, under contract, and cannot use this data for itself.
  • The QR code reader: it uses a Google Play services component (ML Kit) that processes images on the phone. Google may receive technical operating information from it; no operation, customer or SMS data is passed to it.
  • The authorities, administrative or judicial, when the law requires us to.
  • A possible buyer of the LeCoCash business, who would be bound by this policy.

The operators receive nothing from us: your phone dials the code, and the operator processes the operation under its own terms.

Data hosted outside Cameroon

Your account data is hosted by our provider Google Firebase outside Cameroon. The LeCoCash account and the anonymous statistics are hosted on the LeCoCash servers at AWS, in the United States (us-east-2 region), also outside Cameroon. These transfers are limited to what is necessary, protected by contractual safeguards and carried out under the conditions set by Law No. 2024/017, including the authorization of the Personal Data Protection Authority when it is required.

7. THE ANONYMOUS STATISTICS

Since version 1.1 of this policy, LeCoCash Agent sends LeCoCash anonymous figures on the operations you make. LeCoCash uses them to produce overall statistics (number of operations, volumes, success rates, by operator, by day and by hour) and to improve the app.

When a record is made

A record is made on your phone, once per operation, when a real operation reaches a final status: completed, failed, refused by the operator, not verified or expired. A correction made later on your phone does not change the record already made. Demo operations are never sent.

What is sent, for each operation

  • the operator: MTN or Orange;
  • the type: deposit or withdrawal;
  • the final status;
  • the amount, rounded to the nearest 500 F CFA (at least 500 F CFA);
  • your commission, rounded to the nearest 25 F CFA, when the operator's SMS gives it;
  • the day and the hour of the operation, in Douala time, without the minutes;
  • an identifier drawn at random for this record only, used only to avoid counting it twice. It is drawn neither from your account, nor from your phone, nor from the operation.

What is never sent

  • the customer's number or name;
  • the reference of the operation at the operator;
  • your balance;
  • your identity: your name, your number, your account;
  • an identifier of your phone or of your account;
  • the text or the content of the SMS.

How they are sent

  • Only when the Internet is available, in the background: the app never makes you wait and works the same way without the Internet. Records that could not be sent wait on your phone.
  • The authenticity of the app is checked by Google Firebase App Check, which attests that the sending comes from LeCoCash Agent. This check identifies only the app: it passes LeCoCash neither your name, nor your number, nor your account.
  • The statistics are linked to no account. Your IP address is not kept: it is neither stored with the statistics nor logged, and it is used, for the time of the sending, only to limit the number of requests.
  • They are hosted on the LeCoCash servers at AWS, in the United States (us-east-2 region), outside Cameroon (section 6).
  • They are kept as long as needed to produce the statistics.

These figures identify neither you nor your customers: they are not personal data. As they are linked to no one, they can be neither found nor deleted with your account.

8. FUTURE SYNCHRONIZATION

Today, your operations themselves (customers' numbers and names, references, balances, SMS) do not leave your phone: only the anonymous statistics of section 7 do. A future version may offer to synchronize your operations with your account, for example to find them again on a new phone.

Before such a feature is turned on, we will inform you in the app, this policy will be updated (section 12) and we will ask for your consent when the law requires it. Operations would still be saved on your phone first: the app would keep working without the Internet.

9. HOW LONG WE KEEP IT

  • On your phone: until you delete the app or its data. Cloud backup and transfer to another phone are turned off: uninstalling the app erases its data for good, and we cannot restore it.
  • In your account: as long as your account exists. After it is deleted, your data is erased from our servers within 30 days, except data the law requires us to keep, set aside and kept only for the required period.
  • The LeCoCash account: as long as your account exists. "Delete my account" erases the link with your Firebase account and your sessions; only the versions of the accepted texts and their dates remain, with no link to you, as proof of your consent.
  • The anonymous statistics: as long as needed for the statistics (section 7).

10. THE SECURITY OF YOUR DATA

  • The app's database is encrypted, and its key is kept in the phone's secure area.
  • Opening the app is protected by your code.
  • Screenshots and the preview in recent apps are blocked.
  • Exchanges with our servers are encrypted.
  • Sharing a QR poster opens the phone's share window: you choose the app that receives it. Exporting the history creates a copy protected by a password you choose; nothing is sent.

In the event of a data breach likely to concern you, we inform the Personal Data Protection Authority without delay and, when the law provides for it, you as well.

11. YOUR RIGHTS

At any time, you can:

  • access your account data and get a copy of it;
  • have it corrected if it is inaccurate;
  • have it erased, in particular by deleting your account;
  • object to processing based on our legitimate interest, or ask for it to be restricted;
  • withdraw your consent when you have given it;
  • lodge a complaint with the Personal Data Protection Authority.

To exercise these rights, write to support@lecocash.com, giving the number of your account. We may check your identity with a code sent to this number. We answer within one month.

LeCoCash Agent is for adult professionals only; it is not intended for minors.

12. CHANGES AND CONTACT

We may change this policy. In the event of a significant change, in particular before any new sending of data, we inform you in the app at least 30 days before it takes effect, and we ask for your consent when the law requires it. The date and version at the top of this page show the latest update.

LeCoCash Agent is an independent app: it is neither published nor endorsed by Orange or MTN, nor affiliated with these companies.

For any question: support@lecocash.com.

Personal data protection officer: admin@lecocash.com · LeCoCash Inc., Quebec, Canada.

In the event of a difference between the French and English versions, the French version prevails.