1. The short version
- We never see your recovery phrase, your private keys or your PIN.
- We collect what we need to run your account, verify who you are, move money, and keep the service safe.
- Your chat messages are sent to our AI provider so the assistant can answer them.
- We do not sell your personal data, and we do not share it with advertisers.
- Anything written to a public blockchain is permanent and outside our control.
- You can ask us for a copy of your data, ask us to correct it, or delete your account from Settings.
2. Your keys are not ours to see
Your recovery phrase and private keys are generated on your device and stored encrypted. Your PIN is stored only as a one-way hash, which cannot be turned back into your PIN. Nobody at Jumpa can read any of them, and nobody at Jumpa will ever ask you for them.
3. What we collect
Depending on what you use, this includes:
- Account and profile: your name or nickname, email address, phone number, Jumpa tag, country, referral code, and the hashed form of your password and PINs.
- Identity verification: images of a government ID, a selfie, your date of birth and address, and the result of the checks run on them.
- Wallet and transaction: your public wallet addresses, balances, transaction history, the assets and networks you use, savings plans, and card and bill activity.
- Chat: the messages you send, the assistant's replies, and any file you attach to them.
- Payment details: the bank or mobile money account names and numbers you enter to deposit or withdraw, and the reference and status of each transfer.
- Device and usage: your IP address, device and browser type, approximate location derived from your IP, sign-in times, active sessions, and which parts of the app you use.
- Communications: your support conversations with us, and emails you send us.
4. Where it comes from
- From you, when you register, verify your identity, transact or contact us.
- From your device, automatically, when you use the app.
- From our partners: verification results, payment status, and fraud or sanctions screening outcomes.
- From public blockchains, which we read to show your balances and history.
5. Why we use it
- To run your account and do what you have asked us to do, because that is what performing our contract with you requires.
- To verify your identity and to meet anti-money-laundering, sanctions and other regulatory duties, because the law requires it.
- To detect and prevent fraud, abuse and unauthorised access, and to keep the service secure, because we and our users have a legitimate interest in that.
- To answer your questions and support you.
- To understand how the app is used and to improve it, with your consent where analytics rely on cookies.
- To send you service messages about your account and your transactions, and marketing only where you have asked for it.
6. Public blockchains are permanent
When you transact, the details (wallet addresses, amounts and timestamps) are written to a public ledger by the network, not by us. Anyone can read them, they are outside our control, and they cannot be changed or erased, including by a deletion request to us.
7. The assistant and your messages
- To generate a reply, the content of your message is sent to our third-party AI provider. Files you attach stay on our servers; we send the assistant a description of them, and it cannot open them.
- Your conversations are stored against your account so you can come back to them, and you can delete a conversation at any time.
- Please do not put your recovery phrase, private key, PIN, password or anyone else's personal data into the chat.
- TODO(legal): confirm with the AI provider whether message content is retained, or used to train their models, and state the answer here plainly.
9. Where your data goes
Some of our providers are outside the country you live in. When your data is transferred, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision, and you can ask us for details.
10. How long we keep it
- Account and profile data, for as long as you have an account.
- Identity verification records and transaction records, for at least five (5) years after our relationship ends, because anti-money-laundering law requires it. That obligation overrides a request to delete them.
- Chat messages and attachments, until you delete them or close your account.
- Support conversations and security logs, for as long as we need them to handle disputes and protect the service.
- Data written to a public blockchain, which we cannot delete at all.
11. How we protect it
We encrypt data in transit and at rest, store passwords and PINs only as one-way hashes, restrict who can access production systems, and let you see and end your active sessions in Settings. No service can promise perfect security, so please use a strong, unique password and keep your device locked.
12. Your rights
You can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong or out of date;
- delete your data, where we are not required to keep it;
- restrict or object to how we use it, including for analytics;
- send your data to you or to someone else in a portable format;
- stop sending you marketing, which you can also do from any message we send.
Email privacy@usejumpa.com and we will respond within 30 days. You can delete your account yourself in Settings, under Account. We may need to confirm who you are first. If you are unhappy with how we have handled your data, you can complain to the data protection authority where you live.
14. Children
Jumpa is not for anyone under 18. We do not knowingly collect data from children, and if we discover we have, we will delete it and close the account.
15. Changes to this policy
We will post any update here and change the date at the top. Where a change materially affects you, we will tell you in the app or by email before it takes effect.
16. Contact us
Jumpa Technologies Limited (RC 0000000), Registered address to be confirmed. For anything about your data, email privacy@usejumpa.com.