Privacy Policy

Last updated: March 10, 2026

Overview

This policy explains how we collect, use, share, and protect information when you use the DFi mobile app and related web pages.

Information We Collect

Account and profile data: name, email, username, phone, and profile photo (uploaded and cached locally).
Financial and wallet data: linked bank details (via our APIs), card status, Stripe payment IDs, crypto wallet addresses and balances (BTC/ETH/USDC), transaction history, and savings features (e.g., stashes, round-up selections).
KYC/verification data: documents or information you submit for identity verification.
Device and app data: device identifiers, operating system, app version, and basic diagnostics/usage needed to run the service.
Notifications: push notification tokens to deliver alerts.
Support and communications: messages you send to support.

How We Use Information

Provide and maintain app features (wallets, payments, transfers, round-ups, savings).
Process payments and transfers (via providers such as Stripe) and update wallet balances.
Perform identity/KYC checks when required.
Send security, transactional, and account notifications.
Improve reliability, troubleshoot, and protect against fraud or abuse.
Comply with legal and regulatory obligations.

Sharing and Disclosure

Service providers: payment processing (e.g., Stripe), hosting, storage (e.g., cloud object storage for profile images), notifications, and other vendors that help operate the service.
Compliance and safety: to satisfy legal obligations, enforce terms, or protect rights, security, and safety.
Business transfers: as part of a merger, acquisition, or asset transfer.

We do not sell personal information.

Data Storage and Retention

Account and transaction data are stored in our backend systems; some session data is stored on-device (e.g., AsyncStorage) for app functionality.
Profile images may be cached on your device and stored in our cloud storage.
We keep data while your account is active or as needed for the purposes above and legal requirements. Some records (e.g., financial/transaction or KYC) may be retained to meet regulatory obligations.

Security

We use measures such as encryption in transit, access controls, and segmented environments to protect information. No method is 100% secure; report any suspected issues to us.

Your Choices and Rights

Update your profile information in-app.
Control push notifications in device settings and within the app.
Request access or deletion of your data, subject to legal or regulatory retention requirements (certain financial/KYC data may need to be retained).

Children

The service is not directed to individuals under 18. We do not knowingly collect personal data from children.

International Transfers

Data may be processed and stored in countries other than where you reside (e.g., the United States). We apply protections consistent with this policy.

Changes

We may update this policy. Material changes will be noted by updating the “Last updated” date and, when appropriate, providing in-app notice.

Contact

Email: support@dfi.cash