Privacy Policy

Phesky is designed to minimise the data we collect. This policy explains what information we process across both parts of the platform: virtual Visa and Mastercard card services, and the Buy Crypto / Cash Out Crypto functionality provided through an integrated third-party gateway.

Information we collect

Account information

Your name, email address and phone number, plus profile details you provide for card issuance. Purpose: to create and operate your account and to issue a card.

Authentication and security information

Hashed password, two-factor authentication secret, optional PIN in hashed form, verification and password-reset codes, and sign-in activity records. Purpose: to authenticate you and protect your account. We do not store your password or PIN in readable form.

Card information

Card brand, card status, provider card reference/identifier, the last four digits where displayed, card balance, funding and spending activity, transaction records, and related timestamps. Purpose: to display your card, process funding, and show your transaction history. Sensitive card credentials such as the full card number and CVV are held by our card-issuing partner and retrieved securely for display to the verified account owner; Phesky does not keep them in our own database.

Payment and transaction information

Payment references, transaction status, amounts, fees, deposit and funding records, and blockchain transaction references (for example USDC transfers) where applicable. Purpose: to process and reconcile payments and to provide receipts.

Crypto gateway transaction information

When you use Buy Crypto or Cash Out Crypto, we process the information needed to create and manage a gateway transaction, initiate payment, track transaction status, receive and verify provider webhooks, reconcile transactions, prevent fraud and abuse, and provide customer support. This typically includes an order reference, the flow type (buy or cash out), amounts and currency/asset, and status updates returned by the provider.

Device and technical information

Standard technical data such as IP address, browser/user-agent and request logs generated when you use the site. Purpose: security, rate limiting, abuse prevention and troubleshooting.

Support communications

Messages you send to our support team and our replies. Purpose: to answer your questions and keep a record of the conversation.

Buy Crypto, Cash Out Crypto and Fonbnk

Buy Crypto and Cash Out Crypto are provided through an integrated third-party service operated by Fonbnk. When you use this functionality, certain information is transmitted to, or collected directly by, Fonbnk and its relevant service providers as necessary to provide the requested service — for example your account reference and the transaction details you enter in the gateway.

Information you provide directly to that gateway — including any payment details, additional identity information, or verification documents it may request — is controlled and processed by the provider under its own privacy practices and terms, not by Phesky. We receive transaction status information back from the provider so we can display and reconcile your activity. Please review the provider's own privacy policy and terms, which are published on Fonbnk's official website, before completing a transaction.

Third-party service providers

Phesky relies on third-party providers for:

• Card issuing and card transaction processing
• Cryptocurrency purchase and cash-out services (Fonbnk gateway)
• Authentication, database and backend infrastructure
• Hosting and content delivery
• Transactional and notification email delivery

We share only the information those providers need to perform their function. We do not sell your data.

Cookies and similar technologies

We use cookies and browser storage for essential purposes: keeping you signed in (authentication session storage), maintaining security state such as PIN/inactivity locks, and remembering interface preferences. The site can also be installed as a progressive web app, which stores assets locally for offline use. We do not run third-party advertising trackers.

Data security

We use industry-standard measures including encryption in transit, hashed credentials, encrypted storage of short-lived sensitive values, row-level access controls, two-factor authentication and PIN verification for sensitive actions. No online service can be guaranteed to be completely secure, and we do not claim otherwise; keeping your credentials and devices safe is an important part of protecting your account.

Data retention

We keep information for as long as your account is active and for as long as needed to operate the services, resolve disputes, maintain transaction and audit records, and meet legal or provider obligations. Short-lived security values such as verification codes and authorisation codes expire and are removed automatically.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights by contacting us via WhatsApp at +44 20 3970 1293. Some information may need to be retained where we have a legal or operational obligation to keep it. For information processed directly by a third-party provider, you may also need to contact that provider.

Contact

Questions about this policy? Contact us via WhatsApp at +44 20 3970 1293. See also our Terms & Conditions.