Privacy policy

This policy explains what personal data we collect, why, who we share it with and the choices you have.

1. Scope

This policy explains what personal data NuviCard Ltd. collects when you use the NuviCard app, website and account, why we collect it, who we share it with and what choices you have. It applies to applicants, customers and visitors to our website. Our partners who issue the card and process payments have their own privacy notices, which we point you to during sign-up.

2. Information we collect

We collect the information you give us and the information generated when you use the service:

• identity and contact details: name, date of birth, nationality, residential address, email, phone number;
• verification data: images of your identity document, a selfie and the results of document and liveness checks, plus the screening results our partners return;
• financial data: your balance, top-ups, card transactions, transfers and withdrawals, the bank account or wallet you withdraw to, and the deposit address assigned to you;
• device and usage data: device model and operating system, app version, IP address, approximate location derived from it, crash reports and how you move through the app;
• support data: messages you send us and notes we keep about them.

3. How we use it

We use your data to open and run your account, to verify who you are and meet anti-money-laundering and sanctions obligations, to issue and operate your card, to detect fraud and unusual activity, to send you service messages such as transaction notifications, to answer your questions, and to improve the app. We rely on our contract with you, our legal obligations, and our legitimate interest in running a safe service. Where we need your consent, for example for analytics cookies, we ask for it separately.

We don't sell your data and we don't use it for advertising by third parties.

4. Who we share it with

We share data only where the service needs it:

• the licensed partner institution that issues your card and the payment processor that handles transactions, so that they can issue, authorise and settle;
• identity-verification and screening providers that run document, liveness and sanctions checks on our behalf;
• banks and payment providers that move your top-ups and withdrawals;
• cloud hosting, email delivery, analytics and customer-support tools that process data under contract with us;
• regulators, law enforcement and courts where the law requires it, and the Visa network under its rules.

Each of these providers may only use your data for the purpose we share it for.

5. International transfers

Our providers operate in several countries, so your data may be stored or processed outside the country you live in. Where that happens we use recognised safeguards such as standard contractual clauses and we require providers to protect your data to the standard set out in this policy.

6. How long we keep it

We keep account, verification and transaction records for the period required by anti-money-laundering law, which is normally five to seven years after your account closes. Usage and crash data is kept for up to 24 months. Support messages are kept for three years after the conversation ends. We delete or anonymise data when it is no longer needed.

7. Security

Data is encrypted in transit and at rest. Access inside NuviCard is limited to staff who need it for their role and is logged. Identity documents are stored separately from other account data. We test our systems regularly and we require the same of our providers. No system is perfectly secure, so if we learn of a breach that affects you we will tell you and the relevant authority without undue delay.

8. Your rights

Depending on where you live you may have the right to access the data we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent where we rely on it. Some records must be kept by law even after you ask us to delete them, and we will tell you when that applies. To exercise a right, write to privacy@nuvicard.com from the email on your account. You can also complain to your local data-protection authority.

9. Cookies and analytics

Our website uses a small number of cookies. Necessary cookies keep the site working and remember your cookie choice. Analytics cookies, which help us understand how the site is used, are set only if you accept them in the cookie bar. The app uses crash reporting and basic usage analytics; you can turn usage analytics off in the app settings.

10. Children

NuviCard is for people aged 18 and over. We don't knowingly collect data from anyone younger, and we close any account we find was opened by someone under 18.

11. Changes

We update this policy when our practices or the law change. For material changes we tell you by email and in the app before they take effect. The date at the top shows when the policy was last revised.

12. Contact

Questions about this policy or your data: privacy@nuvicard.com. For everything else: support@nuvicard.com.