سياسة الخصوصية

Last Updated: July 8, 2026

Oasis Digital Solutions - F.Z.E ("Company," "we," "us," or "our") operates TB Wallet, TBChat, our website, mobile applications, desktop applications, wallet features, communication features, cloud storage features, SocialFi features, payment-related features, and related products and services.

This Privacy Policy explains how we collect, use, store, share, transfer, and protect your personal information when you access or use our Services.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should stop accessing or using our Services.

I. Data Controller

The data controller responsible for your personal information is:

Oasis Digital Solutions - F.Z.E Office - C1 - 1F - SF10449, Ajman Free Zone C1 Building, Ajman Free Zone, UAE

License No.: 53988
Registration No.: 53988
Email: director@tbchat.io

II. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with:

(a) TB Wallet;
(b) TBChat;
(c) our website;
(d) our mobile applications;
(e) our desktop applications;
(f) wallet features;
(g) instant messaging and communication features;
(h) cloud storage features;
(i) SocialFi / Discovery features;
(j) QR code scanning features;
(k) payment-related features;
(l) AEON Pay or other partner payment services where available;
(m) customer support, dispute handling, compliance, security, and risk-control activities.This Privacy Policy does not apply to third-party websites, merchants, payment partners, DApps, blockchain networks, or external services that we do not control. Such third parties may have their own privacy policies and terms.

III. Definitions

For the purposes of this Privacy Policy:

"Services" means TB Wallet, TBChat, our website, applications, wallet features, chat features, cloud storage features, SocialFi features, payment features, QR scanning features, and related services.
"Personal Information" means information that identifies, relates to, describes, or can reasonably be associated with an individual.
"Digital Assets" means cryptocurrencies, tokens, stablecoins, blockchain-based assets, or other digital representations of value.
"Wallet Address" means a public blockchain address associated with a wallet.
"Seed Phrase" or "Mnemonic Phrase" means a recovery phrase used to restore access to a non-custodial wallet.
"Private Key" means a cryptographic key that controls access to Digital Assets.
"Partner Payment Services" means payment services provided by third-party partners, including AEON Pay where available, that may allow users to make crypto-to-fiat payments through supported QR codes, local payment rails, bank transfers, or other payment methods.
"Third-Party Merchant" means a merchant, seller, service provider, or payment recipient that is not the Company.
"User Content" means messages, files, images, videos, audio, posts, comments, replies, profile content, cloud files, or other content uploaded, stored, sent, published, or shared by users through the Services.

IV. Non-Custodial Wallet and Seed Phrase Protection

We will never ask you to provide your Seed Phrase, Mnemonic Phrase, or Private Key. If you lose your Seed Phrase or Private Keys, we may not be able to recover your wallet, account, or Digital Assets.

V. Information We Collect

The types of information we may collect include the following.

VI. Account and Profile Information

When you create or use an account, we may collect or process:

(a) user ID;
(b) nickname;
(c) avatar;
(d) profile information;
(e) account creation time;
(f) login method;
(g) PIN-related security status, but not your actual PIN in plain text;
(h) wallet address linked to your TBChat identity;
(i) account settings;
(j) language, region, and preference settings;
(k) friend, follower, following, and social connection information where applicable.At the current stage, TBChat may support quick registration through PIN and wallet identity. If we introduce email login, phone login, Google login, or other login methods in the future, we may collect the relevant email address, phone number, third-party login identifier, or verification status.

VII. Wallet and Blockchain Information

When you use wallet features, we may collect or process:

(a) public wallet addresses;
(b) blockchain network selected;
(c) token selected;
(d) transaction hash;
(e) transaction status;
(f) transaction timestamp;
(g) public on-chain transaction data;
(h) gas fee or network fee information;
(i) wallet connection records;
(j) QR code scan records related to wallet address or payment address;
(k) error logs related to wallet transactions;
(l) transaction history displayed in the application.Blockchain transaction data may be publicly available on blockchain networks. Public blockchain data is not controlled by us and may remain visible even if you delete your account or stop using the Services.We do not collect or store your Seed Phrase, Mnemonic Phrase, or Private Keys.

VIII. AEON Pay and Partner Payment Information

When you use AEON Pay or other Partner Payment Services through TB Wallet or TBChat, we may collect and process information necessary to provide the payment experience, display payment status, support user inquiries, prevent fraud, and comply with legal or partner requirements.Such information may include:

(a) wallet address;
(b) transaction hash;
(c) AEON Pay order ID or partner transaction ID;
(d) merchant name or merchant identifier where available;
(e) QR code or payment rail information where available;
(f) country or region of payment;
(g) local fiat currency;
(h) local fiat amount;
(i) crypto token used;
(j) blockchain network used;
(k) exchange rate or estimated exchange rate where available;
(l) network gas fee;
(m) payment partner fee or service fee where available;
(n) payment status;
(o) payment creation time;
(p) payment confirmation time;
(q) error code or failure reason;
(r) refund, reversal, or dispute status where applicable;
(s) device information, IP address, and security logs related to the payment;
(t) support tickets and dispute records.For Partner Payment Services, certain information may be processed by AEON Pay, other payment partners, local acquiring partners, settlement providers, merchants, compliance providers, KYC providers, blockchain analytics providers, or other service providers.

IX. Communication and Chat Information

When you use IM Chat, group chat, secret room, audio/video call, file sharing, location sharing, or related communication features, we may process information necessary to provide and secure those features.This may include:

(a) sender and recipient identifiers;
(b) chat room or group identifiers;
(c) message timestamps;
(d) message delivery status;
(e) call connection metadata;
(f) file sharing metadata;
(g) cloud drive sharing metadata;
(h) abuse reports or complaint records;
(i) security and anti-spam logs.Depending on the feature design, some message content or shared content may be stored or transmitted through our systems or infrastructure providers to provide the Services. You are responsible for ensuring that any content you send or share complies with our Terms of Use and applicable law.

X. Cloud Storage Information

When you use Cloud Drive or related storage features, we may collect or process:

(a) file name;
(b) file type;
(c) file size;
(d) upload time;
(e) storage usage;
(f) folder structure;
(g) sharing status;
(h) access logs;
(i) privacy space status;
(j) technical metadata necessary to store, retrieve, secure, and display files.Cloud Drive may support files such as videos, albums, documents, compressed files, and audio files.If you use privacy space or double-password protection features, we may process technical status information necessary to provide the feature. We do not use this feature to access your files for unrelated purposes.

XI. SocialFi / Discovery Information

When you use Discovery or other social features, we may collect or process:

(a) profile information;
(b) posts;
(c) replies;
(d) comments;
(e) likes;
(f) reposts;
(g) follower and following relationships;
(h) hashtags;
(i) view counts;
(j) visibility settings;
(k) location tag information if you choose to share location;
(l) content moderation, complaint, or abuse report records.Content you publish with "everyone" or similar public visibility settings may be visible to other users.You should not publish personal information, private information, or content belonging to others unless you have the right to do so.

XII. Location Information

Some features may allow you to share or use location information, such as location sharing in chat or location-based Discovery feeds.We may collect or process location information only when:

(a) you authorize location permission;
(b) you actively share your location;
(c) location is needed to provide a feature you choose to use;
(d) location is needed for security, fraud prevention, compliance, or payment risk control where permitted by law.You may disable location permission through your device settings. Some location-based features may not work properly if permission is disabled.

XIII. Camera, Photo Library, and QR Code Permissions

If you use QR scanning or image-related features, we may request access to your camera or photo library.Camera or photo permissions may be used to:

(a) scan wallet address QR codes;
(b) scan user identity QR codes;
(c) scan merchant QR codes;
(d) scan AEON Pay or partner payment QR codes;
(e) upload images;
(f) send photos;
(g) upload files from album;
(h) provide other app features you choose to use.We use camera and photo permissions only to provide the relevant features. You may disable these permissions through your device settings, but some features may not work properly.

XIV. Device, Log, and Technical Information

When you use the Services, we may automatically collect technical and log information, including:

(a) device model;
(b) operating system;
(c) app version;
(d) browser type;
(e) IP address;
(f) device identifiers where permitted;
(g) language and region settings;
(h) network status;
(i) crash logs;
(j) performance logs;
(k) error logs;
(l) login records;
(m) security event logs;
(n) API request logs;
(o) feature usage logs.We use this information to operate, secure, troubleshoot, improve, and protect the Services.

XV. Cookies and Similar Technologies

Our website and certain Services may use cookies, local storage, device identifiers, analytics tools, or similar technologies.We may use these technologies to:

(a) keep the website and Services functioning;
(b) remember preferences;
(c) improve user experience;
(d) analyze usage;
(e) detect errors;
(f) prevent fraud or abuse;
(g) improve security.You may manage cookies through your browser settings. Some features may not work properly if cookies are disabled.

XVI. Support, Dispute, and Communication Information

When you contact us for support, billing questions, refund requests, payment issues, complaints, or disputes, we may collect:

(a) your name or contact information if provided;
(b) email address;
(c) wallet address;
(d) transaction hash;
(e) AEON Pay order ID or partner transaction ID;
(f) merchant information;
(g) screenshots;
(h) receipts;
(i) description of the issue;
(j) communication history;
(k) support resolution records.We use this information to respond to your request, investigate issues, coordinate with payment partners where applicable, and maintain support records.

XVII. Identity Verification, KYC, and Compliance Information

Certain features, payment functions, countries, transaction limits, or Partner Payment Services may require identity verification, KYC, sanctions screening, wallet address screening, or other compliance checks.Where required, we or our partners may collect or process:

(a) name;
(b) date of birth;
(c) nationality;
(d) country or region of residence;
(e) identity document information;
(f) selfie or liveness check information;
(g) phone number;
(h) email address;
(i) proof of address;
(j) transaction history;
(k) wallet address risk information;
(l) sanctions, AML/CFT, fraud, and risk-control results.Such checks may be performed by us or by third-party providers, including payment partners, KYC providers, compliance providers, blockchain analytics providers, or other service providers.We do not use your Seed Phrase, Mnemonic Phrase, or Private Key for identity verification.

XVIII. How We Use Your Information

We may use your information for the following purposes:

(a) to provide, operate, and maintain the Services;
(b) to create and manage your account;
(c) to display wallet balances and transaction history;
(d) to provide wallet, chat, cloud storage, SocialFi, and QR scanning features;
(e) to enable AEON Pay and other Partner Payment Services where available;
(f) to process, display, investigate, and support payment-related transactions;
(g) to provide customer support;
(h) to handle refunds, disputes, complaints, and billing issues;
(i) to prevent fraud, scams, abuse, spam, unauthorized access, and security incidents;
(j) to comply with applicable laws, regulations, sanctions, AML/CFT, KYC, payment partner, and risk-control requirements;
(k) to monitor and improve service performance;
(l) to troubleshoot bugs, crashes, and technical issues;
(m) to enforce our Terms of Use and other policies;
(n) to protect the rights, property, safety, and security of users, the Company, partners, and the public;
(o) to notify you about service updates, security alerts, policy changes, and support matters;
(p) to develop, improve, and personalize the Services;
(q) to comply with legal process, court orders, regulator requests, or lawful government requests.

XIX. Legal Bases for Processing

Depending on your location and applicable law, we may process your personal information based on one or more of the following legal bases:

(a) your consent;
(b) performance of a contract with you;
(c) compliance with legal obligations;
(d) our legitimate interests, including service operation, security, fraud prevention, customer support, product improvement, and compliance management;
(e) protection of vital interests;
(f) public interest or legal claims where applicable.Where we rely on consent, you may withdraw your consent where permitted by law. Withdrawal of consent may affect your ability to use certain features.

We do not sell your personal information.We may share your information only where reasonably necessary for the purposes described in this Privacy Policy.We may share information with:

(a) cloud hosting and infrastructure providers;
(b) analytics and performance service providers;
(c) customer support providers;
(d) payment partners, including AEON Pay where available;
(e) local acquiring partners and settlement providers;
(f) Third-Party Merchants where necessary for payment support or dispute handling;
(g) KYC and identity verification providers;
(h) sanctions, AML/CFT, fraud prevention, and blockchain analytics providers;
(i) security and risk-control providers;
(j) legal, accounting, audit, compliance, and professional advisers;
(k) affiliates, successors, or business partners where necessary to operate the Services;
(l) law enforcement, courts, regulators, government authorities, or other parties when required by law.We require service providers to process personal information only for authorized purposes and to apply appropriate security measures, subject to applicable law and contractual arrangements.

When you use AEON Pay or other Partner Payment Services, we may share necessary transaction, wallet, device, risk, compliance, and support information with the relevant payment partner and related parties.Such parties may include:

(a) AEON Pay;
(b) other payment partners;
(c) local acquiring partners;
(d) settlement providers;
(e) local payment rail operators;
(f) merchants;
(g) KYC providers;
(h) sanctions screening providers;
(i) fraud prevention providers;
(j) blockchain analytics providers;
(k) support and dispute handling providers.This sharing may be necessary to:
(a) process payments;
(b) calculate payment amounts, fees, and exchange rates;
(c) confirm payment status;
(d) settle fiat to merchants;
(e) prevent fraud and abuse;
(f) comply with sanctions, AML/CFT, KYC, and payment rules;
(g) handle refunds, reversals, disputes, and support requests.AEON Pay and other third-party partners may process your information under their own terms and privacy policies. You should review the applicable partner terms before using Partner Payment Services.

XXII. International Data Transfers

Where required by applicable law, we will use appropriate safeguards for cross-border transfers, such as contractual protections, technical security measures, access controls, or other legally recognized transfer mechanisms.

XXIII. How We Store Your Information

You are responsible for safeguarding any local wallet backup, Seed Phrase, Private Key, PIN, or device-level data.

XXIV. Retention Period

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.Retention periods may depend on:

(a) the type of information;
(b) the purpose of processing;
(c) account status;
(d) legal and regulatory obligations;
(e) payment partner requirements;
(f) AML/CFT, sanctions, fraud prevention, and risk-control requirements;
(g) dispute, refund, chargeback, or support needs;
(h) audit, tax, accounting, and recordkeeping requirements.When information is no longer needed, we will delete, anonymize, or securely retain it as required by applicable law and technical feasibility.Public blockchain data cannot be deleted by us because it is maintained by decentralized blockchain networks.

XXV. Information Security

We use reasonable technical, organizational, and administrative measures to protect personal information.These measures may include:

(a) encryption in transit;
(b) encryption at rest where appropriate;
(c) access controls;
(d) authentication controls;
(e) firewalls;
(f) logging and monitoring;
(g) data minimization;
(h) internal access restrictions;
(i) security review;
(j) incident response procedures;
(k) employee and contractor confidentiality obligations;
(l) vulnerability and risk management.However, no system is completely secure. We cannot guarantee absolute security of your information, wallet, device, blockchain transactions, or communications.You should protect your own device, Seed Phrase, Private Keys, PIN, password, and account access credentials.

XXVI. Security Incidents

Notification may be provided through email, in-app notice, website announcement, or other appropriate channels.

XXVII. Your Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including:

(a) the right to access your personal information;
(b) the right to correct inaccurate or incomplete information;
(c) the right to delete your personal information;
(d) the right to restrict processing;
(e) the right to object to processing;
(f) the right to withdraw consent;
(g) the right to data portability;
(h) the right to lodge a complaint with a data protection authority;
(i) the right to request information about how your personal information is shared.To exercise your rights, contact us at director@tbchat.io.We may need to verify your identity before responding to your request.Some requests may be limited by legal, regulatory, security, fraud prevention, payment, AML/CFT, sanctions, tax, accounting, dispute, or technical requirements.

XXVIII. Accessing and Correcting Your Information

You may access or update certain profile information through the app settings where available.This may include:

(a) nickname;
(b) avatar;
(c) profile information;
(d) app settings;
(e) privacy settings;
(f) permission settings;
(g) social visibility settings.If you cannot access or correct certain information through the app, you may contact us at director@tbchat.io.

XXIX. Deleting Your Information and Account

You may request deletion of your personal information or account by contacting us at director@tbchat.io.After verifying your request, we will delete or anonymize personal information where required by applicable law and technically feasible.However, we may retain certain information where necessary for:

(a) legal or regulatory compliance;
(b) AML/CFT, sanctions, fraud prevention, or risk-control obligations;
(c) tax, accounting, audit, or recordkeeping obligations;
(d) dispute, refund, chargeback, or support handling;
(e) security investigation;
(f) enforcement of our Terms of Use;
(g) protection of legal rights;
(h) blockchain transaction records that are publicly available and outside our control.Deleting your account does not delete public blockchain records.Because TB Wallet is non-custodial, deleting your account or app data does not necessarily delete your on-chain wallet or Digital Assets from the relevant blockchain network.You should back up any important information before requesting account deletion.

You may manage certain permissions through your device settings or in-app settings.Such permissions may include:

(a) camera;
(b) photo library;
(c) location;
(d) microphone;
(e) notifications;
(f) storage access;
(g) contacts, if supported and authorized.If you withdraw a permission, some features may not work properly.Where we rely on consent to process personal information, you may withdraw consent where permitted by law. Withdrawal of consent will not affect processing that occurred before withdrawal.

XXXI. Children and Minors

If you believe that a child has provided us with personal information, please contact us at director@tbchat.io, and we will take appropriate steps as required by law.

XXXII. Marketing Communications

You may opt out of marketing communications where available. However, you may still receive important service, security, legal, payment, or account-related messages.

XXXIII. Third-Party Services

The Services may include links or integrations with third-party services, including:

(a) AEON Pay;
(b) payment partners;
(c) local acquiring partners;
(d) Third-Party Merchants;
(e) blockchain networks;
(f) DApps;
(g) wallet services;
(h) analytics providers;
(i) cloud providers;
(j) social or communication tools;
(k) SDKs or APIs.We do not control the privacy practices of third parties.Your use of third-party services may be subject to their own privacy policies and terms. You should review those policies before using third-party services.

XXXIV. User Content and Public Information

If you share information publicly, other users may copy, save, forward, screenshot, or redistribute it.

XXXV. Automated Processing and Risk Controls

We may use automated or semi-automated tools to help detect fraud, abuse, security risks, suspicious activity, prohibited content, sanctions risks, wallet address risks, payment risks, and violations of our Terms of Use.These tools may consider information such as:

(a) wallet address;
(b) transaction behavior;
(c) device information;
(d) IP address;
(e) country or region;
(f) payment amount;
(g) frequency of transactions;
(h) merchant or payment rail information;
(i) account activity;
(j) abuse reports;
(k) compliance screening results.These tools may result in a transaction being delayed, blocked, rejected, reviewed, limited, or escalated for manual review.

XXXVI. Changes to This Privacy Policy

If you do not agree with the updated Privacy Policy, you should stop using the Services.

XXXVII. Contact Us

If you have any questions, requests, complaints, or concerns about this Privacy Policy or our handling of personal information, please contact us at:Oasis Digital Solutions - F.Z.EOffice - C1 - 1F - SF10449,Ajman Free Zone C1 Building,Ajman Free Zone, UAELicense No.: 53988Registration No.: 53988Email: director@tbchat.io