Privacy Policy

Effective Date: March 25, 2026 Last Updated: March 25, 2026

Guraba Inc. ("Guraba," "we," "us," or "our") operates the Guraba platform, including the Guraba mobile application, website at guraba.io, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Services.

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.


1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address — for account creation, authentication, and communication
  • Full name — for identity verification and account management
  • Phone number — for account security and two-factor authentication
  • Date of birth — for age verification and regulatory compliance
  • Gender — for identity verification purposes
  • Nationality — for regulatory and compliance purposes
  • Physical address — including street address, city, state, postal code, and country

1.2 Identity Verification (KYC) Information

To comply with anti-money laundering (AML) and know-your-customer (KYC) regulations, we collect:

  • Government-issued identification documents — passport, national ID card, or driver's license (front and back images)
  • Selfie photographs — for facial verification and document matching
  • Document numbers — for identity validation

1.3 Financial and Transaction Information

When you use our Services, we collect:

  • Blockchain wallet addresses — generated for your account on the Guraba Chain and associated networks
  • Transaction history — deposits, withdrawals, swaps, and card spending records
  • Asset balances — GRB, WUSDT, and other supported tokens
  • Card information — virtual and physical Visa card details, spending limits, and transaction history

1.4 Technical Information

We automatically collect:

  • Device information — device type, operating system, and version
  • Log data — IP address, access times, and pages viewed
  • App usage data — features used and interactions within the application

1.5 Third-Party Login Information

If you sign in using Google or Apple, we receive your name and email address from the respective provider. We do not receive or store your third-party account passwords.


2. How We Use Your Information

We use the collected information for the following purposes:

  • Account management — to create, maintain, and secure your account
  • Identity verification — to complete KYC/AML checks as required by law
  • Transaction processing — to facilitate deposits, withdrawals, swaps, bridge operations, and card payments
  • Card issuance — to issue and manage your Guraba Visa card through our licensed partners
  • Security — to detect and prevent fraud, unauthorized access, and other illegal activities
  • Communication — to send you transaction confirmations, security alerts, and service updates
  • Legal compliance — to comply with applicable laws, regulations, and legal processes
  • Service improvement — to analyze usage patterns and improve our Services

3. How We Share Your Information

We do not sell your personal information. We may share your information with:

3.1 Card Issuance Partners

We share necessary personal and KYC information with our licensed card issuance partners to provide Visa card services. These partners are bound by their own privacy policies and applicable regulations.

3.2 Identity Verification Providers

We may use third-party KYC/AML verification services to validate your identity documents and perform required compliance checks.

3.3 Blockchain Networks

Transaction data on the Guraba Chain and other blockchain networks (such as TRON) is publicly visible by nature. Wallet addresses and transaction amounts are recorded on-chain and cannot be deleted.

3.4 Legal and Regulatory Authorities

We may disclose your information when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect the rights, property, or safety of Guraba, our users, or the public.

3.5 Service Providers

We engage trusted service providers who assist us in operating our Services, such as cloud hosting, analytics, and customer support. These providers are contractually obligated to protect your information and use it only for the purposes we specify.


4. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption — private keys and sensitive data are encrypted at rest and in transit
  • Access controls — strict role-based access to personal data
  • Two-factor authentication — available for account security
  • Secure infrastructure — hosted on protected cloud infrastructure with regular security assessments

Despite these measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your information.


5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Services. We may also retain information as required by applicable laws and regulations, including AML/KYC record-keeping requirements.

When your account is closed, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law.


6. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access — request a copy of your personal information
  • Correction — request correction of inaccurate information
  • Deletion — request deletion of your personal information, subject to legal retention requirements
  • Portability — request a machine-readable copy of your data
  • Objection — object to certain processing of your information
  • Withdrawal of consent — withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at the address provided below.


7. Blockchain Data

Please note that certain data recorded on blockchain networks is immutable and publicly accessible. This includes wallet addresses, transaction amounts, and transaction hashes on the Guraba Chain, TRON, and other supported networks. We cannot modify or delete on-chain data. This is an inherent characteristic of blockchain technology.


8. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will promptly delete it.


9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.


10. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.


11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by other appropriate means. Your continued use of our Services after such changes constitutes acceptance of the updated policy.


12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Guraba Inc. Email: privacy@guraba.io


This Privacy Policy is effective as of the date stated above and applies to all users of the Guraba platform and Services.