Privacy Policy

Effective Date: June 21, 2025  |  Last Updated: June 21, 2025

1. Introduction

Fincheck ("we", "us", "our") is committed to safeguarding the privacy and data security of our users. This Privacy Policy outlines how we collect, use, share, and protect personal and financial information when you interact with our services — including but not limited to cryptocurrency investing, staking, trading bots, signal alerts, and enhanced account protection using Two-Factor Authentication (2FA).

2. Information We Collect

We collect the following types of data to provide you with secure, compliant, and personalized services:

• Personal Identifiable Information (PII): Full name, date of birth, email address, phone number, national ID or passport (for KYC verification), and residential address.
• Wallet & Transaction Data: Public crypto wallet addresses, transaction hashes, asset balances, staking activities, bot trades, and investment history.
• Authentication Data: Hashed passwords, 2FA tokens (encrypted), IP addresses, device fingerprints, browser metadata, and geolocation.
• Behavioral Data: Clickstreams, session activity, preferred assets, and feature usage to improve recommendations and signals.
• Communication Data: Support tickets, email conversations, and opt-in marketing or alert preferences.

3. How We Use Your Information

We use your information responsibly to:

• Verify your identity and meet Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations.
• Enable secure account access using 2FA and monitor unauthorized login attempts.
• Deliver personalized investment insights, signals, staking pools, and bot recommendations based on your preferences and risk profile.
• Send important service updates, alerts, performance reports, and compliance notices.
• Enhance platform usability and user experience through analytics and feedback.

4. Legal Basis for Processing

Our processing of your personal data is grounded in:

• Consent: You voluntarily provide information by signing up or enabling optional features like bot automation or alerts.
• Contractual Obligation: We process data to fulfill our service agreement with you.
• Legal Compliance: We are required to store and process certain data under Kenyan and international financial regulations.
• Legitimate Interests: We analyze anonymized usage patterns to improve our product offerings and protect our platform from fraud and abuse.

5. Data Security

We implement advanced security practices, including SSL encryption, firewalls, database hardening, and role-based access control. All sensitive data, including your 2FA secrets and passwords, are encrypted using industry-standard cryptographic methods. Regular security audits are performed to proactively detect and fix vulnerabilities.

6. Data Retention

We retain your data for as long as your account remains active or as required to comply with our legal obligations. You may request account deletion, after which we will permanently erase your data unless required to retain it for auditing, taxation, or legal purposes.

7. Sharing and Disclosure

Fincheck does not sell or rent your personal data. We may share your data with:

• Third-party KYC/AML providers for compliance verification.
• Service partners who support our platform (e.g., cloud hosting, payment processors).
• Regulatory bodies or law enforcement upon valid legal request.

8. Your Rights

As a Fincheck user, you have the right to:

• Access and correct your personal data via your account dashboard.
• Withdraw consent or disable 2FA or notifications at any time.
• Request data portability or deletion by contacting our privacy team.
• Lodge a complaint with your local data protection authority.

9. Cookies and Analytics

Our site uses cookies and third-party analytics (e.g., Google Analytics) to understand usage behavior and improve performance. You may disable cookies through your browser, although this may limit some features.

10. International Data Transfers

Your information may be stored or processed outside your home country. By using Fincheck, you consent to such transfers, which will always comply with applicable data protection regulations and safeguard your privacy.

11. Children’s Privacy

Fincheck does not knowingly collect data from individuals under the age of 18. If we discover that a minor has registered on our platform, we will delete their account and associated data immediately.

12. Changes to This Policy

We may revise this Privacy Policy periodically to reflect changes in law, technology, or business operations. All changes will be posted here with an updated effective date. Your continued use of Fincheck constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, concerns, or data requests, contact us at:
privacy@fincheck.io