Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how Finhattan Corp. ("Finhattan", "we", "us") collects, uses, and protects your information when you use the Finhattan mobile applications for iOS and Android (the "Services"). Finhattan is a mobile-only product; finhattan.app is an informational site where this policy is published. By using the Services, you agree to this policy.

1. Who we are

The Services are provided by Finhattan Corp. If you have any questions about this policy or your personal data, you can reach us through our Support page.

2. Information we collect

Information you give us

• Account details such as your name, username, and email address when you create an account or sign in.
• Profile information you choose to add, such as a photo, bio, or other details.
• Content you create in the app, such as posts, comments, messages, and any media you upload.
• Communications you send us, for example when you contact support.

Information collected automatically

• Device and technical information, such as device type, operating system, app version, language, and general region.
• Usage information about how you interact with the Services, for analytics and to improve the product.
• Log and diagnostic data, including approximate location derived from your IP address and crash reports, used for security and reliability.
• Push notification identifiers, so we can deliver notifications you have enabled.

Wallet and connected accounts

• Your public wallet address. Activity linked to a public address is recorded on public blockchains and is outside our control.
• If you choose to connect an external account or service, the credentials you provide for that connection are stored only on your device and are used solely to carry out the actions you request.

3. How we use your information

• To provide, operate, and maintain the Services and your account.
• To personalize your experience and enable the features you use.
• To send notifications and important service communications.
• To keep the Services safe, prevent fraud and abuse, and troubleshoot issues.
• To analyze and improve the Services.
• To comply with our legal obligations.

4. Legal bases (EEA/UK users)

Where the GDPR/UK GDPR applies, we process personal data to perform our contract with you (to provide the Services), for our legitimate interests (to secure and improve the Services), with your consent where required, and to meet legal obligations.

5. How we share information

We do not sell your personal information. We share it only as needed to run the Services:

• With trusted service providers who process data on our behalf to help us operate the Services (for example, cloud hosting and storage, analytics, communications, and customer support), under confidentiality obligations.
• With third-party services you choose to connect or use through the app, which handle your data under their own privacy policies.
• When required by law or to protect the rights, safety, and security of our users and the Services.
• As part of a business transfer, such as a merger, acquisition, or reorganization.

6. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards to protect it in connection with such transfers.

7. Data retention

We keep your personal data for as long as your account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal data, except where we are required to retain it.

8. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit. Your wallet keys and recovery phrase never leave your device. No method of transmission or storage is completely secure, and you are responsible for protecting your device, credentials, and recovery phrase.

9. Your rights and choices

• Depending on where you live, you may have the right to access, correct, delete, port, or object to the processing of your personal data.
• You can delete your account and associated data at any time from within the app.
• You can manage or turn off push notifications in your device settings.
• Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us through our Support page. We do not sell or share personal information for cross-context behavioral advertising.

10. Children's privacy

The Services are intended for users aged 18 and over and are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, please contact us and we will delete it.

11. Third-party links and services

The Services may link to or integrate with third-party websites and services. Their handling of your data is governed by their own privacy policies, and we are not responsible for their practices.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date above. Where appropriate, we will notify you of material changes.

13. Contact us

Finhattan Corp.
You can reach us through our Support page at finhattan.app/support.