Privacy Policy
Effective Date: March 25, 2026 Last Updated: March 25, 2026
Guraba Inc. ("Guraba," "we," "us," or "our") operates the Guraba platform, including the Guraba mobile application, website at guraba.io, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Services.
By accessing or using our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address — for account creation, authentication, and communication
- Full name — for identity verification and account management
- Phone number — for account security and two-factor authentication
- Date of birth — for age verification and regulatory compliance
- Gender — for identity verification purposes
- Nationality — for regulatory and compliance purposes
- Physical address — including street address, city, state, postal code, and country
1.2 Identity Verification (KYC) Information
To comply with anti-money laundering (AML) and know-your-customer (KYC) regulations, we collect:
- Government-issued identification documents — passport, national ID card, or driver's license (front and back images)
- Selfie photographs — for facial verification and document matching
- Document numbers — for identity validation
1.3 Financial and Transaction Information
When you use our Services, we collect:
- Blockchain wallet addresses — generated for your account on the Guraba Chain and associated networks
- Transaction history — deposits, withdrawals, swaps, and card spending records
- Asset balances — GRB, WUSDT, and other supported tokens
- Card information — virtual and physical Visa card details, spending limits, and transaction history
1.4 Technical Information
We automatically collect:
- Device information — device type, operating system, and version
- Log data — IP address, access times, and pages viewed
- App usage data — features used and interactions within the application
1.5 Third-Party Login Information
If you sign in using Google or Apple, we receive your name and email address from the respective provider. We do not receive or store your third-party account passwords.
2. How We Use Your Information
We use the collected information for the following purposes:
- Account management — to create, maintain, and secure your account
- Identity verification — to complete KYC/AML checks as required by law
- Transaction processing — to facilitate deposits, withdrawals, swaps, bridge operations, and card payments
- Card issuance — to issue and manage your Guraba Visa card through our licensed partners
- Security — to detect and prevent fraud, unauthorized access, and other illegal activities
- Communication — to send you transaction confirmations, security alerts, and service updates
- Legal compliance — to comply with applicable laws, regulations, and legal processes
- Service improvement — to analyze usage patterns and improve our Services
3. How We Share Your Information
We do not sell your personal information. We may share your information with:
3.1 Card Issuance Partners
We share necessary personal and KYC information with our licensed card issuance partners to provide Visa card services. These partners are bound by their own privacy policies and applicable regulations.
3.2 Identity Verification Providers
We may use third-party KYC/AML verification services to validate your identity documents and perform required compliance checks.
3.3 Blockchain Networks
Transaction data on the Guraba Chain and other blockchain networks (such as TRON) is publicly visible by nature. Wallet addresses and transaction amounts are recorded on-chain and cannot be deleted.
3.4 Legal and Regulatory Authorities
We may disclose your information when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect the rights, property, or safety of Guraba, our users, or the public.
3.5 Service Providers
We engage trusted service providers who assist us in operating our Services, such as cloud hosting, analytics, and customer support. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
4. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption — private keys and sensitive data are encrypted at rest and in transit
- Access controls — strict role-based access to personal data
- Two-factor authentication — available for account security
- Secure infrastructure — hosted on protected cloud infrastructure with regular security assessments
Despite these measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your information.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide our Services. We may also retain information as required by applicable laws and regulations, including AML/KYC record-keeping requirements.
When your account is closed, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law.
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — request a copy of your personal information
- Correction — request correction of inaccurate information
- Deletion — request deletion of your personal information, subject to legal retention requirements
- Portability — request a machine-readable copy of your data
- Objection — object to certain processing of your information
- Withdrawal of consent — withdraw consent where processing is based on consent
To exercise any of these rights, please contact us at the address provided below.
7. Blockchain Data
Please note that certain data recorded on blockchain networks is immutable and publicly accessible. This includes wallet addresses, transaction amounts, and transaction hashes on the Guraba Chain, TRON, and other supported networks. We cannot modify or delete on-chain data. This is an inherent characteristic of blockchain technology.
8. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will promptly delete it.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by other appropriate means. Your continued use of our Services after such changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Guraba Inc. Email: privacy@guraba.io
This Privacy Policy is effective as of the date stated above and applies to all users of the Guraba platform and Services.