Legal

Privacy Policy

Version 1.1 · Effective 2026-06-29

1. Summary

This policy explains what information we handle and, above all, what we don't. We collect the minimum needed to run the app. We do not sell or share your personal data with third parties for their own purposes, and we never see your private key or PIN.

2. What we collect

Your email address (to authenticate you and send access codes via Clerk), your wallet address (which is public on the blockchain), basic device and usage information, your IP address, and basic analytics to understand how the product performs.

3. What we never collect

We never collect or see your private key or PIN. They are generated and encrypted on your device and never leave it. By design, we cannot access them.

4. How we use it

We use data to authenticate you, deliver access codes, maintain security, operate and improve the product, and show you relevant promotions inside the app. We do not use it for other purposes without your knowledge.

5. We don't sell or share your data

We do not sell your personal data and we do not share it with third parties for their own purposes: we do not work with data brokers and we do not hand your information to ad networks. We only use a small set of infrastructure providers that handle data strictly to operate the service on our behalf (see "Service providers").

6. The blockchain is public

Your on-chain activity (address, transactions, balances) is permanent and visible to anyone; this is how a public network works and we do not control it. Data on the blockchain cannot be deleted.

7. Service providers (sub-processors)

We rely on providers that process data only to run the product on our behalf, under their own security terms; this is not data sharing or selling: Clerk (authentication and codes), CoinGecko (prices, no personal data), Infura/Lava (RPC), analytics, Railway (database), and Vercel (hosting). The third-party services you choose to use (swaps, yield, cross-chain transfers, top-ups) are described in the Terms, and using them is your choice.

8. Retention

We retain personal data only for as long as needed to provide the service and to meet legal or security obligations. When it is no longer needed, we delete or anonymize it.

9. Your rights

You can request access to, correction of, or deletion of your personal data by contacting us. Note that information recorded on the blockchain is public and permanent, so we cannot delete it.

10. Children

The service is not directed to people under 18, and we do not knowingly collect data from minors. If you believe a minor has provided us data, contact us so we can delete it.

11. Changes and contact

We may update this policy; each version carries a number and an effective date. To exercise your rights or for any privacy question, contact us at carlos@chipipay.com.

This document is written in good faith and pending legal review. It is not legal advice.