IKO
Privacy Policy
1. What this policy covers
This Privacy Policy explains what personal data IKO collects when you use the app, how that data is used, who it is shared with, and the choices you have — including how to request deletion. IKO is a self-custody fintech app, so some data is required to provide regulated fiat services through our partners.
2. Identity and KYC data (via Noah)
To use fiat services (your virtual IBAN and SEPA pay-out), you must complete identity verification (KYC). This is carried out by our regulated partner, Noah. The identity, address, and document information you submit during verification is collected and processed by Noah to meet its KYC/AML and regulatory obligations. IKO does not store your raw identity documents; verification is handled on Noah's hosted flow.
3. Account and contact data
When you sign in, we collect your email address, which is used to authenticate you and to send important account, transaction, and verification notices. We also store basic profile details (such as your name) needed to operate your account and link it to your verified identity.
4. Device and usage data
We collect limited technical data from your device — such as device and platform information and security signals — to keep your account secure, prevent fraud, support passkey-based transaction signing, and operate the app reliably.
5. Wallet and transaction data (via Privy)
Your self-custody wallet is created and secured using our partner Privy. Wallet identifiers and on-chain transaction details are processed to let you hold and move funds. On-chain activity is recorded on public blockchains and is, by nature, publicly visible and irreversible. IKO does not take custody of your funds and cannot access, move, or recover them on your behalf.
6. How we use your data
We use your data to provide and secure the app, verify your identity, enable fiat pay-in and SEPA pay-out, process transactions, prevent fraud and abuse, comply with legal and regulatory obligations, and communicate with you about your account.
7. Who we share data with
We share data only as needed to provide the service: with Noah (identity/KYC and fiat rails), with Privy (wallet infrastructure), and with service providers that help us operate the app. We may also disclose data where required by law or to meet regulatory and compliance obligations. We do not sell your personal data.
8. Data retention
We retain personal data for as long as your account is active and as required to provide the service. Identity and transaction records may be retained by us or our partners for longer where necessary to meet legal, regulatory, and anti-money-laundering record-keeping obligations.
9. How to request deletion
You can request deletion of your account and associated personal data by contacting us at privacy@iko.money. We will delete data that we are not legally required to retain. Some records held by our regulated partners (for example KYC and transaction records held by Noah) may need to be retained for a statutory period even after account closure. Because IKO is self-custody, deleting your account does not affect funds held in your wallet — you remain in control of those.
10. Changes to this policy
We may update this Privacy Policy from time to time. Continued use of the app after an update constitutes acceptance of the revised policy.