How Monway Portal collects, uses, and protects your information
Effective Date: December 28, 2025
Last Updated: December 28, 2025
Version: v1.0
This Privacy Policy explains how Monway Portal ("Monway Portal," "we," "us," "our") collects, uses, discloses, retains, and protects information when you access or use our websites, mobile applications, and related services (collectively, the "Service").
This Privacy Policy is intended to be clear and transparent. It is not legal advice. You should have counsel review it before launch, especially if you offer sweepstakes/prizes, financial features, or target multiple states/countries.
Controller / Business: Monway Portal Inc. ("Monway Portal")
Contact: privacy.monwayportal@gmail.com
Address: 2933 Sunstone St, Las Vegas, NV, 89128, USA
Support: support.monwayportal@gmail.com
If we appoint a data protection officer or EU/UK representative, we will list contact details here.
This Privacy Policy applies to information collected:
It does not apply to third-party websites/apps that you may access via links in the Service. Their privacy practices govern their own services.
"Personal Information" / "Personal Data": information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with you or your household/device.
"Sensitive Personal Information": certain categories that may receive special protections under some laws (e.g., precise geolocation, login credentials, government IDs).
"Consumer Health Data": as defined under Washington's My Health My Data Act (MHMDA), which can be broad and may include health-related purchase context from receipts. (Washington State Legislative Information)
"Service Providers/Processors": vendors who process information on our behalf under contract.
"Targeted Advertising" / "Cross-Context Behavioral Advertising": advertising based on activity across non-affiliated services over time (terms used in some U.S. privacy laws). (California DOJ)
(What we collect, why we collect it, and what we share)
If you use features that require it (e.g., receipt capture):
Depending on the features you enable:
We do not store full payment card numbers. Card processing is handled by payment processors.
We do not intentionally request:
We use information for the following purposes:
If GDPR/UK GDPR applies, we process personal data under one or more of the following bases:
GDPR requires transparency about retention periods and categories of disclosures. (GDPR)
We disclose personal information only as described below:
We share information with vendors that help us operate the Service, such as:
They are contractually required to protect information and use it only to provide services to us.
If you choose to participate in an offer, promotion, or rewards program connected to a participating business, we may disclose limited information necessary to:
We disclose the minimum necessary for the selected feature.
If we use advertising measurement or targeted advertising, we may disclose limited information such as:
You may have the right to opt out of "sale/share" or targeted advertising under certain laws. (California DOJ)
We may disclose transaction data to:
to complete and secure transactions and comply with law.
We may disclose information to comply with law or protect rights, including:
If we undergo a merger, acquisition, financing, reorganization, or sale, information may be transferred as part of the transaction, subject to safeguards.
We may create and share aggregated or de-identified information that cannot reasonably identify you, for analytics and business insights.
We do not use sensitive personal information to infer characteristics about you. We collect or use it only as needed for the Service, for security, or with consent where required.
Examples (depending on features used):
We retain personal information only as long as reasonably necessary for the purposes described, then delete or de-identify it unless we must keep it for legal/security reasons.
Account data: while your account is active; then deletion/archival within 30–180 days after deletion request, subject to exceptions.
Support communications: 2–3 years for training, dispute handling, and quality control.
Security logs: 6–24 months depending on risk and operational need.
Receipt verification records: 12–36 months to prevent repeat fraud and resolve disputes.
Financial/prize records: as required by law (often multiple years).
Advertising logs (if used): 3–18 months depending on provider defaults and needs.
Exceptions: We may retain data longer if required to comply with law, detect/prevent fraud, enforce agreements, or resolve disputes.
We use reasonable safeguards such as:
No system is 100% secure. You're responsible for keeping your credentials confidential and using strong passwords.
You can typically:
You may request deletion via:
We will verify your request and process it subject to legal/security exceptions.
Depending on your state, you may have rights to:
California specifically provides opt-out rights for sale/sharing. (California DOJ)
We may need to verify your identity. You may designate an authorized agent where allowed by law.
You may have rights to:
GDPR requires disclosure of key controller details, purposes, and retention. (GDPR)
Monway Portal is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn we did, we will delete it.
If you plan to allow under-13 use, you need verifiable parental consent mechanisms and policy changes. (Google also flags this in Play Console.)
If you access the Service from outside the United States, your information may be processed in the U.S. and other countries where we or our providers operate. We take steps designed to provide appropriate safeguards where required by law (such as contractual clauses).
The Service may link to third-party services. We are not responsible for their practices. Review their policies before using them.
We may update this Privacy Policy. We will revise the "Last Updated" date and, where required, provide additional notice in the Service.
By using the Service, you understand that we collect, use, and disclose personal information as described in this Privacy Policy to provide the Service.
When you choose to participate in an offer or rewards program tied to a participating business/partner, you consent to our disclosure of the minimum necessary information to validate eligibility and provide the selected feature.
You can withdraw optional consents at any time by:
Last Updated: December 28, 2025
This Washington Consumer Health Data Privacy Policy ("WA CHD Policy") supplements the Monway Portal Privacy Policy and applies to the extent Monway Portal collects "consumer health data" as defined by Washington's My Health My Data Act ("MHMDA"). The MHMDA can apply broadly to data that may reveal health-related context. (Washington State Legislative Information)
Depending on how you use the Service, consumer health data may include:
To the extent we collect consumer health data, we use it only to:
We may disclose consumer health data only to:
Washington law restricts the "sale" of consumer health data and requires valid authorization in specific form if any sale were to occur. We do not sell consumer health data. (Washington State Legislative Information)
Washington residents may have rights to confirm, access, delete, and withdraw consent regarding consumer health data, subject to exceptions.