Privacy Policy

Last Updated: December 2024

1. Introduction

Welcome to Nobak ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Account Information: Email address, phone number, and authentication credentials
• Identity Verification: Name, date of birth, address, and government-issued ID (for KYC compliance)
• Financial Information: Stellar wallet addresses, transaction history, and balance information
• Device Information: Device ID, operating system, app version, and device settings

2.2 Automatically Collected Information

• Usage data and analytics
• Log data (IP address, access times, app crashes)
• Location data (with your permission)
• Biometric data (Face ID/Touch ID, stored locally on your device)

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our wallet services
• Process transactions and manage your account
• Comply with legal and regulatory requirements (KYC/AML)
• Improve our services and user experience
• Send important notifications about your account
• Detect and prevent fraud and security threats
• Provide customer support

4. Data Storage and Security

4.1 Local Storage

The following data is stored locally on your device using encrypted storage:

• Private keys (encrypted with device-level security)
• PIN and biometric authentication data
• Transaction cache
• User preferences

4.2 Cloud Storage

The following data is stored on our secure servers:

• Account metadata and profile information
• Transaction history
• KYC verification data
• Device registry

4.3 Security Measures

• End-to-end encryption for sensitive data
• Secure device-server communication (Diffie-Hellman key exchange)
• Multi-factor authentication
• Regular security audits
• Industry-standard encryption protocols

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: Third-party services that help us operate our platform (e.g., KYC providers, cloud hosting)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: When you explicitly authorize us to share your information

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Opt-out: Disable non-essential data collection

7. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

After account deletion, we may retain certain information for legal and regulatory compliance purposes.

10. Third-Party Services

Our app may contain links to third-party services (e.g., Stellar anchors, exchanges). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app
• Sending you a notification
• Requiring acceptance of the new policy

12. Contact Us

© 2024 Nobak. All rights reserved.