> For the complete documentation index, see [llms.txt](https://docs.anodos.finance/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.anodos.finance/legal/anodos-app-privacy-policy.md).
# Anodos App Privacy Policy
Last updated: August 25, 2026
## 1. Scope
This Privacy Policy explains how Anodos Labs Inc. (“Anodos,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information in connection with the Anodos website, mobile application, software, interfaces, account dashboards, support channels, and related services (collectively, the “Services”).
Anodos is designed around data minimization and self-custody. We do not sell personal data to data brokers or advertisers. We use information to operate and secure the Services, support users, comply with applicable law, prevent fraud and abuse, and make partner-provided services available where requested by the user.
## 2. Controller and Provider Roles
Anodos may act as a controller of information that it collects directly for account administration, app functionality, support, security, fraud prevention, compliance coordination, and product operations. Third-party providers may separately act as controllers or processors of information they collect directly to provide identity verification, sanctions screening, card issuing, payment processing, virtual accounts, on-ramp/off-ramp services, wallet infrastructure, or other services.
Where a third-party provider collects identity verification, KYC, AML, sanctions, payment, or regulated-service information directly from you, that provider is responsible for its own collection, use, retention, and disclosure of that information under its own terms and privacy notices. Anodos may receive limited information from those providers, such as verification status, risk or eligibility outcomes, account identifiers, transaction references, support information, or information required to operate the Services, prevent fraud, resolve disputes, or comply with law. Anodos does not seek to collect or store more KYC, AML, or identity documentation than is necessary for those purposes.
## 3. Information We Collect or Receive
| Category | Examples | Source / purpose |
| --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Account and contact information | Name, email address, phone number, country, account settings | Collected from you to create and operate your account, authenticate you, and provide support. |
| Verification and compliance information | Verification status, eligibility outcome, sanctions or fraud review status, provider reference IDs, limited identity information where necessary | Typically collected directly by verification or regulated partners. Anodos may receive limited status or reference information to operate the Services, prevent fraud, and comply with law. |
| Transaction and service information | Transaction history shown in the app, card activity references, transfer status, fees, receipts, virtual account status, provider account references | Collected or received from your use of the Services and partner integrations to display activity, provide support, resolve disputes, and satisfy legal or operational requirements. |
| Wallet and blockchain information | Wallet addresses, transaction hashes, network, asset, amount, smart-contract interactions, public blockchain activity associated with your use of the Services | Collected from you, your wallet, public blockchains, or infrastructure providers to provide non-custodial interface functionality, routing, records, security, and support. |
| Device, usage, and security information | IP address, device type, operating system, app version, crash logs, security events, approximate location inferred from IP, analytics events | Collected automatically to secure, debug, improve, and operate the Services. |
| Communications | Support messages, emails, forms, complaints, call recordings where disclosed | Collected from communications with us to provide support, resolve issues, and maintain records. |
| Marketing preferences | Communication preferences, opt-in or opt-out status | Collected from you to send permitted communications and honor choices. |
## 4. How We Use Information
* Provide, operate, maintain, secure, and improve the Services.
* Create accounts, authenticate users, provide customer support, and send service communications.
* Coordinate with third-party providers to make requested card, payment, virtual account, transfer, wallet, on-ramp, off-ramp, routing, and other services available.
* Conduct or support fraud prevention, abuse prevention, sanctions screening, KYC/AML coordination, transaction monitoring, risk controls, dispute handling, and legal compliance.
* Provide transaction history, receipts, fee disclosures, support, and account notifications.
* Comply with applicable law, legal process, regulatory obligations, partner obligations, and valid requests from authorities.
* Protect the rights, property, safety, and security of Anodos, users, partners, and the Services.
## 5. KYC, AML, and Partner-Collected Information
For regulated features, identity verification, KYC, AML, sanctions screening, card issuing, virtual accounts, fiat rails, on-ramp/off-ramp services, and similar services may be performed by third-party providers. Those providers may collect identity documents, selfies, liveness data, date of birth, address, nationality, source-of-funds information, transaction information, and other information required by law or their compliance programs. Where possible, Anodos uses provider-hosted or provider-managed flows so that sensitive verification information is collected and retained by the relevant provider rather than by Anodos.
Anodos may receive and retain limited verification, compliance, risk, account, or transaction information when necessary to enable the Services, enforce terms, prevent fraud, respond to support requests, maintain records, or comply with law. Anodos does not use KYC or AML information for unrelated advertising, does not sell such information, and does not seek to build unnecessary user surveillance or behavioral profiles.
## 6. Self-Custody and Public Blockchain Information
Anodos does not custody user funds and does not hold user private keys. However, blockchain networks are public or partially public ledgers. Wallet addresses, transaction hashes, asset transfers, smart-contract interactions, and related activity may be publicly visible, permanent, and capable of being associated with you by third parties. Anodos cannot delete, reverse, or modify information recorded on a public blockchain.
## 7. How We Disclose Information
We disclose information only as reasonably necessary for the purposes described in this Privacy Policy. We do not sell personal data to data brokers or advertisers.
| Recipient | Purpose |
| -------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Third-party providers and regulated partners | To provide identity verification, sanctions screening, fraud prevention, card issuing, card processing, virtual accounts, payment rails, on-ramp/off-ramp services, wallet infrastructure, routing, settlement, or other requested services. |
| Service providers | Hosting, cloud infrastructure, analytics, security, support, email, error monitoring, document handling, compliance tooling, and other operational services. |
| Professional advisers | Legal, compliance, accounting, audit, tax, insurance, and corporate advisory purposes. |
| Authorities and legal recipients | Where required or permitted by law, legal process, court order, regulator, law enforcement authority, sanctions authority, tax authority, or to protect rights, safety, and security. |
| Business transfer recipients | In connection with an actual or proposed merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards. |
## 8. Google Play and Mobile App Data Practices
For mobile app distribution, Anodos maintains a privacy policy in the app and through a public web link, maintains accurate data safety disclosures, limits collection and sharing of personal and sensitive user data to app functionality and policy-compliant purposes, uses modern cryptography for data in transit, and provides account deletion mechanisms as required by applicable platform policies.
* We do not sell personal and sensitive user data.
* We do not publicly disclose financial information, payment information, or government identification numbers.
* We request device permissions only when needed for a feature and after any required disclosure or consent.
* We require integrated SDKs and service providers to support policy-compliant data handling.
* Users may request account deletion in-app and at .
## 9. Retention
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with law, prevent fraud, resolve disputes, enforce agreements, maintain security, satisfy tax and accounting obligations, and meet partner or regulatory requirements.
| Data type | Typical retention approach |
| ----------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Account and contact data | For the life of the account and thereafter as necessary for legal, security, fraud prevention, dispute, or business record purposes. |
| Verification, KYC, AML, sanctions, and fraud records received by Anodos | Only to the extent received by Anodos, retained as necessary for legal, regulatory, fraud prevention, dispute, and partner obligations. Regulated providers may retain their own records under their policies. |
| Transaction, card, payment, and financial records | Generally retained for periods required or appropriate for AML/CFT, tax, accounting, chargeback, dispute, legal, and partner obligations, often at least five years where applicable. |
| Blockchain information | On-chain records may be permanent and outside Anodos’ ability to delete or modify. |
| Support communications | Retained as needed for support, quality, legal, and dispute purposes. |
## 10. Account Deletion
You may request deletion of your Anodos account through the app or at . After receiving and verifying a deletion request, Anodos will delete or de-identify information associated with your Anodos account unless retention is required or permitted for legal, regulatory, tax, accounting, fraud prevention, security, dispute, chargeback, partner, or legitimate business purposes. Deleting your Anodos account does not delete records maintained independently by third-party providers under their own legal obligations, nor can it delete or modify information recorded on public blockchains.
## 11. Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit, monitoring, and vendor review. No system is perfectly secure. You are responsible for maintaining the security of your device, account credentials, wallet credentials, passkeys, and recovery methods.
## 12. International Transfers
We and our providers may process information in the United States, European Economic Area, United Kingdom, and other jurisdictions. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.
## 13. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your information, and to opt out of certain marketing or data sharing. You may also have the right to withdraw consent where processing is based on consent. To exercise rights, contact . We may verify your identity before responding.
## 14. Children
The Services are not intended for children under 18. We do not knowingly collect personal data from children.
## 15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version and update the “Last updated” date. If required by law, we will provide additional notice or request consent.
## 16. Contact
Privacy questions and requests may be sent to .