Privacy

Last Updated: 2026/10/22

Moneda Digital GmbH ("Moneda", "we", "us", "our" or "Company") is committed to protecting your privacy. This Privacy Policy explains how we handle your personal data, your rights under the GDPR, and the steps we take to protect your information when you use our services ("Service"). We aim to be transparent, respectful, and secure in everything we do. By using Moneda, you agree to the practices described in this Privacy Policy.

If you have any questions or concerns, you can contact us at privacy@moneda.com.

Scope. This Privacy Policy covers people who use the Moneda app and website. It does not cover a business that uses the Moneda Platform API to process personal data for its own purposes. In that case the business is the controller, Moneda acts as its processor, and a separate data processing agreement applies.

1. Purposes and Legal Bases for Data Processing

We process personal data for the following purposes. The legal basis for each processing activity is listed together with a short explanation and category:

  • Account Management: When you create an account or profile to use our Services, we collect personal information such as your name, email address, and any other details necessary for account creation. We use this information to authenticate your account and provide you with the requested Services.
  • Communication: When you contact us via our website, email, or other channels, we collect your name, email address, and any other details you choose to provide (including the content of your communications). We use this information to respond to your inquiries and improve our support.
  • Transaction Facilitation: Facilitating user-initiated blockchain transactions via third-party providers, including payment providers. Moneda itself is not regulated and does not provide regulated financial services.
  • Personalization: Allowing users to configure preferences, goals, risk tolerance, and view general suggestions based on those inputs. No investment advice is provided.
  • AI-Powered Features: We use artificial intelligence to power in-app chat support, Moneda AI (our agent, which answers questions about your account and researches markets), and automated extraction of receipt or expense data from images you upload. To provide these features, relevant account information (such as your balances, recent transactions, and verification status) and the content of your messages or uploaded receipts may be processed by our AI infrastructure providers. If you connect Moneda to a third-party AI assistant you authorize (for example, through our developer API), that assistant can access the account data covered by the permissions you grant it, and any money transfer it proposes requires your explicit in-app approval before it is executed. Your use of a third-party AI assistant is also subject to that provider's own privacy policy, which we encourage you to review. Section 5 explains in detail what Moneda AI processes, what it remembers and the controls you have.
  • Security & Fraud Prevention: Monitoring blockchain addresses to prevent you from interacting with known fraudulent accounts. We also process biometric data (e.g. Face ID or fingerprint information) to facilitate secure sign-ins and transaction approvals related to your self-custodial wallet. This biometric data is processed locally on your device and is not stored or accessible by Moneda.
  • Use of Third-Party Services: To provide our services efficiently and securely, we rely on various external service providers. These include providers of hosting, analytics, authentication, app distribution, transaction infrastructure, and regulated financial services.
  • Legal Compliance: Fulfilling our regulatory duties and record-keeping obligations. This includes complying with financial regulations and other legal requirements (for example, anti-money laundering verification checks). Certain processing may also occur at the instruction of regulated service partners (e.g. when we assist our partners in meeting their compliance obligations).
  • Identity Verification (KYC & AML Compliance): If you choose to access features of Moneda that involve fiat currency or other regulated financial services. for example, linking a bank account, topping up your Moneda account with EUR or USD, withdrawing funds to a bank, or opening a virtual IBAN account, we will ask you to complete an identity verification process as required by law (Know Your Customer or “KYC”). This one-time verification involves collecting certain information and documents (such as a government-issued photo ID, a live selfie for liveness verification, and a recent proof of address) to confirm your identity. We use this information only to verify your identity, comply with anti-money laundering (”AML”) regulations, and enable the requested financial services for you.
  • Mandatory Service Notifications: Sending essential information about account activity, security alerts, system updates, or transaction confirmations. These are service-related and not promotional in nature.
  • Website Analytics: On moneda.com we use PostHog to measure visits and how the site is used. Without your consent we do this without cookies and cannot recognise you on a later visit. With your consent we set a cookie that lets us recognise returning visitors. You can change your choice at any time under “Cookie settings” on the website. This data is not linked to a Moneda account.
  • Newsletters: Sending optional newsletters, marketing updates, or educational content, if you have subscribed to receive them. You can unsubscribe at any time, and we will only send these with your consent.

2. Your Rights under GDPR

  • Right of access (Art. 15 GDPR): You may request confirmation as to whether personal data concerning you is being processed and receive a copy of such data, along with details about its purpose, origin, and recipients.
  • Right to rectification (Art. 16 GDPR): You may request that inaccurate or incomplete personal data be corrected or completed.
  • Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data if the processing is no longer necessary, you have withdrawn your consent, or the data was unlawfully processed. Exceptions may apply (e.g. legal retention obligations).
  • Right to restriction of processing (Art. 18 GDPR): You may request that we restrict the processing of your data, e.g., while we verify its accuracy or assess an objection.
  • Right to data portability (Art. 20 GDPR): You may request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and request its transmission to another controller.
  • Right to object (Art. 21 GDPR): You may object to the processing of your personal data where we process it based on legitimate interests, including any use of your conversations to train AI models (Section 5). We will stop processing unless we demonstrate compelling legitimate grounds.
  • Right to withdraw consent (Art. 7(3) GDPR): If you have given consent, you may withdraw it at any time. This does not affect the lawfulness of prior processing.
  • Right to lodge a complaint (Art. 77 GDPR): If you believe that the processing of your data violates data protection law, you can file a complaint with the relevant supervisory authority.
  • Children's data: Our services are only available to people aged 18 or over. We do not knowingly collect personal data from anyone younger.

3. Legal Basis for Processing

We process your data based on the following legal bases:

  • Performance of a Contract: Processing is necessary to deliver the services you have requested (for example, using your information to set up your account and provide the Moneda app’s functionality).
  • Legitimate Interests: Processing is based on our legitimate interests in operating and improving our services, maintaining security, and providing user support. In such cases, we ensure that our legitimate interests are not overridden by your privacy rights.
  • Legal Obligations: Processing is necessary for us to comply with applicable laws and regulations. This includes obligations under financial laws (for example, verifying customer identity under AML regulations), tax laws, or other legal requirements.
  • Consent: In specific situations, we rely on your consent to process your data (for instance, for sending optional newsletters or certain analytics cookies, where required by law). In those cases, you have the right to withdraw your consent at any time, and we will stop the processing in question.

4. Data Sharing

We do not sell your personal data. However, we do share certain data with third parties in order to operate our service and comply with legal requirements. We are committed to being transparent about who we share data with and why. Here are the categories of recipients and the purposes of sharing:

  • Service Providers (Processors): We use trusted third-party service providers to perform tasks on our behalf. These include cloud hosting providers (to store and process data securely), authentication services, push notification and email services, and other IT infrastructure providers necessary for running the Moneda app. We also use payment processing services when you purchase or use certain features. These providers only process your data under our instructions and for the purposes we specify.
  • Identity Verification Partners: When identity verification (KYC) is required, we use a specialized third-party provider to conduct these checks. Our current KYC verification partner is Sumsub. Sumsub collects and processes your identification documents and information (such as your ID, selfie, and proof of address) to verify your identity on our behalf. Moneda does not keep a copy of your identity documents. Where a regulated partner needs your identity information to open your account, it is shared with that partner. We only initiate this KYC process for users who opt to use financial features that legally require identity verification.
  • Financial Partners: For certain features, such as providing you with a virtual IBAN account or enabling fiat on-ramps/off-ramps (converting between fiat currency and crypto assets), we partner with regulated financial service providers. In particular, Moneda has integrated with MoonPay Enterprise (formerly Iron) to offer EUR/USD virtual accounts and automated deposit/withdrawal services. If you choose to use these features, we will securely share the personal data necessary to open and operate your account with our partner MoonPay Enterprise (for example, your name, contact details, and confirmation that you have passed KYC) so that they can create and manage the bank account services for you. In practice, your account with MoonPay Enterprise is only set up if you choose to use these features, so your KYC data is shared only when it’s needed to provide the service, and not before.
  • Brokerage Partner: If you choose to trade tokenised shares or funds, they are issued and your orders are executed by Dinari. We share with Dinari the personal data it needs to open and operate your brokerage relationship and to meet its own regulatory duties, including your identity and verification information and the details of your orders.
  • Legal and Regulatory Authorities: We may disclose personal data to government authorities, law enforcement, or regulators if required to do so by law. Examples include fulfilling a court order or legal request, or sharing information to comply with anti-money laundering reporting obligations and other legal requirements. We only share what is necessary and will notify you of such disclosures when permitted by law.
  • Sanctions Screening: We screen incoming blockchain transactions against sanctions and watchlists using Chainalysis, which processes the relevant wallet addresses and transaction details. Where you access regulated financial services requiring identity verification (see Identity Verification (KYC & AML Compliance) above), a match may lead to those services being suspended while our compliance team reviews the case.
  • AI Infrastructure Providers: To power the AI features described above, we share relevant chat content, account information, or receipt images with our AI infrastructure providers, including OpenRouter and Modal Labs. These providers process your data only to generate the requested response or extraction, in accordance with the terms described in this Privacy Policy.
  • Website Analytics Provider: PostHog, which stores website usage data in the European Union.
  • Payment Processor: If you purchase a subscription or usage credits by card, your payment is processed by Stripe. Your card details are sent directly to Stripe and never pass through Moneda's servers; we receive only a payment confirmation and reference token.

All third-party partners we share data with are bound by strict data protection obligations. We require them to handle your data securely and only for the specific purposes we have defined, in accordance with this Privacy Policy and applicable privacy laws. We do not allow our service providers to use your data for their own purposes. Additionally, we remain responsible for protecting your personal data throughout these engagements.

International Data Transfers: Some of our providers, including AI infrastructure and model providers, process personal data outside the European Union (EU) and the European Economic Area (EEA), including in the United States. Where we transfer your personal data outside the EU or EEA, we do so only if one of the following conditions is met: (a) the destination country has been officially recognized by the EU Commission as providing an adequate level of data protection, (b) we have put in place appropriate safeguards such as Standard Contractual Clauses (SCCs) with the recipient, or (c) you have given us your explicit consent for the specific transfer.

5. Moneda AI and Your Data

This section explains how Moneda AI and our other AI features use personal data. When you use them you are interacting with an AI system, not a person.

What is processed.

  • What you send ("Input"): your messages, and any file or image you upload, such as a receipt, a statement or a screenshot of holdings you ask Moneda AI to import.
  • Account context: the account information needed to answer you, such as your balances, holdings, recent transactions and verification status. It is used to answer you at the time you ask.
  • What it produces ("Output"): the answers, summaries, illustrative portfolios and prepared payments or trades generated for you.
  • Memory: facts Moneda AI saves so that later answers fit you, such as your goals, your preferences and decisions you make, which it may note from your conversations.
  • Activity records: records of Moneda AI's answers and of the actions it took or prepared on your account, kept for security and to resolve disputes.
  • Feedback: if you rate an answer as helpful or not helpful, we store your rating together with your question and the answer it relates to. If you send us written feedback in the chat, we store what you wrote.

Why, and on what legal basis.

  • Answering your questions and carrying out what you ask: Input, account context, Output. Legal basis: Performance of our contract with you.
  • Remembering your goals and preferences across conversations: Memory. Legal basis: Legitimate interest in providing a relevant and personalised service.
  • Extracting data from receipts and documents you upload: Input. Legal basis: Performance of our contract with you.
  • Keeping the service secure, preventing abuse and investigating problems you report: Input, Output, activity records. Legal basis: Legitimate interest in the security and integrity of the service; legal obligations where they apply.
  • Measuring and improving the quality of answers, without training models: Input, Output and Feedback; where we derive reusable material from them, anything that identifies you is removed first. Legal basis: Legitimate interest in improving the service.
  • Training and fine-tuning our own AI models: Input and Output with direct identifiers and account figures removed. Never account context, Memory, uploaded files or identity verification data. Legal basis: Legitimate interest in developing AI models for financial research, subject to your right to object.

What Moneda AI remembers, and your controls. You can ask Moneda AI what it remembers about your investing preferences and ask it to forget any item. To see or delete anything else it has saved about you, contact us at privacy@moneda.com. You can use a temporary chat, which does not appear in your history and is deleted shortly afterwards. Moneda AI is designed to avoid saving sensitive information, such as health, religious or political details and card or bank account numbers. No such measure is perfect, so please do not share this kind of information unless it is needed for your question.

When a person reads your conversations. Moneda staff see your conversations with Moneda AI only when it is needed to: help you with a request you made to support; review suspected misuse of Moneda AI, or an appeal against such a review (Terms, Sections 7.1 and 14.5); investigate fraud or a security incident; or meet a legal obligation. Access is limited to the people handling that case and is logged. Conversations reviewed for suspected misuse are kept for 12 months after the review ends and then deleted, unless the law requires us to keep them longer. Our legal basis is our legitimate interest in keeping Moneda AI safe and preventing misuse, or a legal obligation where one applies. You can object to this processing as described in Section 2.

Training of AI models. Moneda may use the content of your conversations with Moneda AI to train and improve its own AI models for financial research. Before we do, we remove direct identifiers and account figures, and we never use your account context, Memory, uploaded files, temporary chats or identity verification data for this. You can object at any time by writing to privacy@moneda.com, and your objection applies to everything you send afterwards. Models trained this way are Moneda's own and your content is not passed to other companies to train theirs.

How long we keep it.

  • Conversations: until you delete the conversation or your account. If you do neither, we remove the content of each message five years after it was sent.
  • Memory: until you ask Moneda AI to forget it or delete your account.
  • Temporary chats: deleted from your chat history within 48 hours.
  • Uploaded files and images: the content of a file you attach in chat is kept for up to 90 days. Receipts and invoices you add to your account are kept until you delete them or your account.
  • Activity records: kept for as long as they are needed for security and to resolve disputes.

Automated decisions. Moneda AI gives you information and prepares actions. It does not take decisions that have legal or similarly significant effects on you: a payment or a trade is executed only when you approve it, or under an instruction you approved in advance. Separately, sanctions screening is automated: a match may lead to the regulated financial services being suspended while a member of our compliance team reviews the case. You can ask for that review and give your view by contacting us.

Connected assistants. If you connect a third-party assistant such as Claude or ChatGPT to your account, that assistant receives the account data covered by the permissions you grant. Its provider is the controller of what it does with that data, under its own privacy policy. You can end the connection at any time.

6. Data Retention

The periods for AI features are set out in Section 5. For everything else, we retain your personal data for as long as you have an active Moneda account or as long as necessary to fulfill the purposes described in this Policy. If you decide to delete your account (or request us to do so), we will delete or anonymize your personal data within 30 days of the request, unless a longer retention period is required by law or is necessary to resolve disputes or enforce our agreements. After this period, or once the data is no longer needed for any legal or business purpose, we will permanently delete it or irreversibly anonymize it.

Note: Certain data must be retained for fixed periods due to legal obligations. For example, if you have completed a KYC identity verification, we (or our regulated partners) are required under anti-money laundering laws to retain the related verification records for a minimum period (typically five years after the end of our business relationship with you). Such retention is mandated by law and is done to comply with financial regulations, even if you request your account to be deleted. Rest assured, any data we retain for legal reasons remains subject to the security and privacy protections outlined in this Policy, and we will not use it for any other purpose.

7. How We Protect Your Data

We take the security of your personal data very seriously. Moneda uses industry-standard security measures to protect your information from unauthorized access, loss, or misuse. These measures include, but are not limited to, encryption (we encrypt data in transit and at rest wherever applicable) and access controls (we limit access to personal data to authorized personnel on a need-to-know basis). We also employ techniques like tokenization and other pseudonymization methods to minimize direct exposure of sensitive data when working with third-party services.

Your self-custodial cryptocurrency wallet managed through Moneda is another area of security focus. Important: Moneda does not store or have access to your private keys or crypto funds. Those remain under your control. Our app provides an interface for you to manage your wallet, but the secure storage of your credentials (for example, the Passkeys saved on your device or in your password manager) is your responsibility. We cannot access or recover your funds if you lose your private keys, and we never transmit or store your secret keys on our servers. By keeping sensitive wallet data out of our reach, we ensure that even a breach of Moneda’s systems would not compromise your cryptocurrency assets.

8. On-Chain Data and Smart Contracts

When you use Moneda to initiate blockchain transactions (for example, token swaps, lending, or transfers via integrated smart contracts), certain personal data implicitly becomes public due to the nature of blockchain technology. Specifically, your Moneda wallet’s public address and the details of your transactions will be submitted to public blockchain networks. This on-chain data is permanently recorded on the blockchain and may be publicly viewable by anyone. It cannot be altered or erased once confirmed in a block.

While Moneda facilitates these transactions for your convenience, please understand that we do not control the blockchain networks or the storage of data on them. The data you broadcast (transaction amounts, blockchain addresses involved, and any metadata you include in a transaction) will exist indefinitely on the distributed ledger outside of Moneda’s control.

For transparency, when you interact with third-party decentralized protocols through Moneda (for example, decentralized exchanges or lending platforms that we integrate), those protocols might have their own data practices. We recommend reviewing the privacy policies of those specific protocol providers if you have concerns, though generally personal data is not exchanged in onchain interactions aside from the public blockchain data described above.

Please note that onchain data falls outside the scope of GDPR erasure rights because we are not able to remove data that is stored on a public blockchain that we do not control.

9. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, Moneda will follow all applicable legal requirements regarding breach notification. Where required, we will notify the competent data protection authority within 72 hours of becoming aware of the breach (Art. 33 GDPR). Where the breach is likely to result in a high risk to you, we will inform you without undue delay (Art. 34 GDPR). Notification will be done via in-app notification or email (or both), and will include information about the nature of the breach, the data affected, the steps we are taking to address it, and any recommendations for you to protect yourself. Once the immediate threat is contained, we will provide updates on the status of the issue and measures taken to prevent future incidents.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, the legal landscape, or other operational needs. When we make significant changes, we will notify you through appropriate channels (for example, via the Moneda app or by email) and update the “Last Updated” date at the top of this Policy. We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Where a change requires your consent, we will ask for it.

11. No Data Protection Officer (DPO) Appointed

In accordance to Art. 37 GDPR and §38 BDSG (German Federal Data Protection Act), Moneda Digital GmbH is not legally required to appoint a Data Protection Officer (DPO), because our core activities do not consist of large-scale processing of sensitive data categories that would mandate a DPO.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please do not hesitate to contact us:

Email: privacy@moneda.com

Postal Address: Moneda Digital GmbH, Wilmersdorfer Str. 122-123, 10627, Berlin, Germany

13. Supervisory Authority

Moneda Digital GmbH is based in Berlin, Germany. Our lead supervisory authority for data protection matters is the Berlin Commissioner for Data Protection and Freedom of Information. You have the right to contact this authority if you wish to lodge a complaint or seek further information about your data protection rights.

Supervisory Authority Contact Details:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

Alt-Moabit 59-61, 10555 Berlin, Germany

Website: https://www.datenschutz-berlin.de/