Privacy policy
Effective 28 October 2026
Wola Wola speaks payments out loud: when money arrives on a shop's phone, the phones at the counter say how much came in. This policy explains what the Wola Wola Android app, the Wola Wola web page for iPhone, and the Wola Wola server collect, why, and what you can do about it. Wola Wola is run by Yuvista, Nepal (“we”).
What the app reads on your phone
- Bank SMS and payment app notifications. With your permission, the app reads incoming SMS and notifications from banks and wallets (for example eSewa, Khalti, Fonepay and bank apps) only to find payment amounts. Each message is read on your phone. The full text of your messages never leaves your phone.
- Money sent. If you turn on “speak money sent”, debit messages are spoken on this phone only and are never sent anywhere.
What is sent to our server
- Payments, in Owner mode only. For each payment received: the amount, a short label from the message (the payer's or bank's name, at most 40 characters) and the time. This lets the shop's other phones (Associates) speak it. Phones in “This phone only” mode send no payments. We keep the last 500 payments per shop.
- Your phone. An app-generated phone id (based on Android's app-specific ID), the phone's name and model, Android and app versions, the mode in use and the shop name. This runs your free trial and subscription and lets the shop's admin see which phones are connected.
- Your Google account, if you sign in with Google. Your email address, your name and Google's account id. We use them only to keep one free trial and one plan per account, so your plan follows you to a new phone. We do not get your password, contacts or any other Google data.
- Subscription payments. When you pay for Wola Wola by QR, we match the amount you paid with your request. We never receive your bank, card or wallet login.
- Online status. An Owner phone tells the server it is online every 20 to 30 seconds, so Associates can see that the shop phone is working.
The iPhone web page
The Associate page for iPhone keeps the shop's join code in your browser so you don't have to type it again. It receives payments from the server and speaks them. It reads nothing on your iPhone.
What we don't do
- We don't sell or rent your data, and we don't show ads.
- We don't use advertising or analytics trackers.
- We don't read messages that are not from banks or payment apps.
Who else handles data
- Oracle Cloud hosts our server.
- Google confirms your sign-in when you use Sign in with Google.
We may share data if the law requires it.
Security
All traffic between the app and the server is encrypted (HTTPS). Each phone gets its own secret access token. Only the shop's own phones receive its payments.
Keeping and deleting data
- Uninstalling the app removes everything it stored on your phone.
- Removing a phone from a shop stops it receiving that shop's payments.
- To have your phone, shop or Google account data deleted from our server, email us from the address below. We delete it within 30 days, except records we must keep by law.
Children
Wola Wola is made for shops and businesses. It is not meant for children under 13.
Changes
If this policy changes, we will update this page and its date. Big changes will also be shown in the app.
Contact
Questions or deletion requests: yuvista02@gmail.com