Privacy Policy

We collect information you provide directly to us, information collected automatically when you use our services, and information from third parties as described below.

Information you provide:

• Full legal name, date of birth, email address, and mobile phone number
• Home address, mailing address, and government-issued identification details
• Financial account information (bank account, debit card, and funding source details)
• Cryptocurrency wallet addresses linked to your account, which you use to send and receive digital assets such as USDC on Polygon
• Profile photo, display name, and Flow ID (handle) you choose
• Recipient information for transfers (name, phone number, country, delivery details)
• Communications you send us (support requests, feedback, bug reports)

Information collected automatically:

• Device identifiers, IP address, browser type, and operating system
• Approximate location derived from IP address (we do not track precise GPS location unless you explicitly enable it)
• Usage data including pages visited, features used, timestamps, and transaction history
• App activity logs for security, fraud detection, and troubleshooting

We use your personal information to:

• Create, verify, and manage your FlowMoney account
• Process payments, transfers, and card transactions
• Verify your identity and comply with financial regulations (KYC/AML)
• Send you verification codes and security notifications via SMS, email, and push notifications
• Detect, prevent, and investigate fraud, unauthorized activity, and security threats
• Provide customer support and respond to your inquiries
• Personalize your experience and deliver relevant features and insights
• Comply with legal obligations and cooperate with law enforcement
• Maintain and improve our services, products, and security measures

As a financial technology company, FlowMoney is required by law to verify the identity of its users. We collect and process the following information for identity verification and compliance purposes:

• Social Security Number (SSN) or equivalent national identification number
• Government-issued photo ID (driver's license, passport, state ID)
• Date of birth and residential address
• Selfie or liveness verification images for biometric matching
• Bank account credentials (collected via secure third-party providers — we never store your banking login credentials)
• Transaction history for risk assessment and fraud screening

This information is processed by our identity verification partners (such as Stripe Identity and other regulated providers) and retained in accordance with applicable financial regulations. Your verification data is encrypted in transit and at rest.

We automatically collect certain technical information when you access FlowMoney, including:

• Device model, operating system version, and unique device identifiers
• IP address and network connection type (Wi-Fi, cellular)
• App version, language settings, and timezone
• Camera and biometric data (only when you explicitly use features like Face ID login or ID verification; biometric data never leaves your device for local authentication)

This information helps us provide secure access, detect suspicious login attempts, and ensure compatibility across devices.

What you agree to:

• You voluntarily provide your mobile phone number when registering or using FlowMoney.
• You request verification codes during signup, login, password reset, or security verification.
• FlowMoney sends one-time verification codes and account security notifications only.
• FlowMoney does not send marketing SMS unless you separately opt in.
• Message frequency varies based on your account activity (typically 1–5 messages per month for routine security verification).
• Standard message and data rates may apply according to your mobile carrier plan.

Opt-out and help:

• Reply STOP to any SMS from FlowMoney to unsubscribe from SMS messages.
• Reply HELP to any SMS from FlowMoney for assistance.
• For additional support, email support@flowmoney.app.
• Opting out of security verification SMS may limit your ability to access certain account features.

FlowMoney uses cookies, local storage, and similar technologies to:

• Authenticate your session and keep you logged in securely
• Remember your preferences (theme, language, settings)
• Measure and analyze how you use our services to improve them
• Detect and prevent fraud and unauthorized access

We use privacy-focused analytics that do not sell or share your data with third-party advertising networks. You can control cookies through your browser settings, but disabling them may affect functionality.

We employ industry-standard security measures to protect your personal information:

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Access controls: Strict role-based access with multi-factor authentication for all internal systems.
• Tokenization: Full card numbers and bank account numbers are never stored — we use tokenized references from our payment processors.
• Biometric data: Face ID and Touch ID data never leave your device.
• Regular audits: We undergo security reviews and vulnerability assessments.
• Fraud monitoring: Real-time transaction monitoring and anomaly detection.

We do not sell your personal information. We share your information only in the following circumstances:

With service providers:

• Payment processors (Stripe, banking partners) to facilitate transactions
• Identity verification providers to complete KYC/AML checks
• Licensed cryptocurrency onramp, liquidity, and exchange providers (such as Stripe's Crypto Onramp and Coinbase) to process digital-asset purchases and deliver them to your personal wallet, and wallet-infrastructure providers that help provision your non-custodial wallet
• International remittance partners to execute cross-border transfers
• Cloud infrastructure and analytics providers who help us operate the platform
• Customer support and communication providers (email, SMS, push notifications)

For legal and security reasons:

• To comply with court orders, subpoenas, or regulatory requests
• To cooperate with law enforcement in fraud or criminal investigations
• To detect, prevent, or respond to fraud, security threats, or illegal activity
• To enforce our Terms & Conditions and protect our rights and property
• In connection with a merger, acquisition, or asset sale (with notice where required)

All third-party providers are contractually bound to protect your information and use it only for the purposes we specify.

Cryptocurrency and blockchain data: Cryptocurrency transactions are recorded on public blockchains. Your wallet address and transaction details (such as amounts, timestamps, and recipient addresses) are visible to anyone who inspects the blockchain and cannot be edited or deleted. This transparency is inherent to public blockchain networks and is outside FlowMoney's control. Please do not use a wallet address if you wish to keep it private.

We retain your personal information for as long as your account is active or as necessary to provide our services. After account closure, we retain certain information:

• Financial records: Retained for up to 7 years as required by financial regulations and anti-money laundering laws.
• Identity verification data: Retained per regulatory requirements (typically 5 years post-closure).
• Transaction history: Retained for legal, tax, and audit purposes.
• Security logs: Retained for up to 3 years for fraud investigation and prevention.
• Non-essential data: Deleted or anonymized within 90 days of account closure where not legally required to be retained.

Depending on your location (particularly if you are a resident of California, the EU/EEA, the UK, or other jurisdictions with privacy laws), you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information (subject to legal retention requirements).
• Portability: Receive your personal information in a structured, machine-readable format.
• Opt-out: Opt out of the sale or sharing of your personal information (we do not sell your data).
• Restriction: Request that we limit our processing of your information in certain circumstances.
• Withdraw consent: Withdraw consent for processing that relies on your consent (e.g., marketing).

To exercise any of these rights, contact us at support@flowmoney.app. We will respond within 30 days.

You can delete your FlowMoney account at any time:

• Open the FlowMoney app and go to Settings.
• Scroll to the Support section.
• Tap Account Deletion and follow the prompts.
• Alternatively, email support@flowmoney.app with the subject "Account Deletion Request."

Before deletion, you must resolve any pending transactions, negative balances, or compliance holds. Certain data will be retained as described in the Data Retention section above.

FlowMoney is not directed at children under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, please contact us immediately at support@flowmoney.app, and we will take steps to delete it.

Our Flo Kids feature is designed for supervised family use with parental consent and does not collect personal information directly from children. Parental accounts manage all data, and parents can delete their child's profile at any time.

If you have any questions about this Privacy Policy or your personal information, please contact us:

• Email: support@flowmoney.app
• Company: FlowMoney LLC
• Jurisdiction: Florida, United States