1. Introduction
Welcome to Kova. This Privacy Policy explains how Kova ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our platform, mobile application, and related services (collectively, the "Service").
Kova is a technology platform that enables users to convert Brazilian Reais (BRL) to US Dollar-denominated stablecoins (primarily USDC) and access yield-generating opportunities through decentralized finance (DeFi) protocols. By using our Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
When you create an account and use Kova, you may provide us with the following information:
Account Information: Your email address, which is used as your primary login credential and for communication purposes.
Identity Verification (KYC): To comply with applicable anti-money laundering (AML) and know-your-customer (KYC) regulations, we may collect your full legal name, date of birth, government-issued identification documents (such as CPF, RG, or passport), proof of address, and a selfie for identity verification.
Transaction Information: Records of your deposits, conversions, yield allocations, and withdrawals.
2.2 Information Collected Automatically
When you interact with the Service, we may automatically collect device information (device type, operating system, unique device identifiers), usage data (features accessed, interaction patterns, timestamps), IP address and approximate location data, and crash reports and performance analytics.
2.3 Information from Third Parties
We work with trusted third-party service providers who may share information with us, including MoonPay (fiat on-ramp/off-ramp transaction data), Turnkey (wallet authentication and passkey-related metadata), and identity verification partners (KYC/AML screening results).
3. How We Use Your Information
We use the information we collect to provide, maintain, and improve the Service, including facilitating currency conversions and yield allocations; verify your identity and comply with legal obligations such as KYC and AML requirements; communicate with you about your account, transactions, and Service updates; detect and prevent fraud, unauthorized access, and other security threats; analyze usage patterns to improve the user experience; and respond to your inquiries and provide customer support.
4. How We Share Your Information
We do not sell your personal information.
Service Providers: Including MoonPay (payment processing), Turnkey (wallet infrastructure), and analytics providers. These partners process your data only on our behalf and are bound by contractual obligations to protect your information.
Legal and Regulatory: We may disclose information when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
5. Wallet and Self-Custody
Kova uses Turnkey to provide a non-custodial wallet experience. Your wallet is secured using passkeys (biometric or device-based authentication) and your email. Your wallet keys are secured within Turnkey's secure enclave infrastructure, and only you can authorize transactions.
Because Kova is non-custodial, you are solely responsible for maintaining access to your wallet credentials (passkeys and email). If you lose access to these credentials, we may not be able to help you recover your wallet or funds.
6. Data Security
We implement industry-standard security measures to protect your personal information, including encryption in transit and at rest, secure authentication mechanisms, regular security assessments, and access controls limiting who can view your data.
However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain information as required by applicable laws and regulations (including KYC/AML record-keeping requirements), to resolve disputes, and to enforce our agreements. When your information is no longer needed, we will securely delete or anonymize it.
8. Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to access and receive a copy of your personal data, to correct inaccurate or incomplete information, to request deletion of your data (subject to legal retention requirements), to object to or restrict certain processing activities, and to data portability.
To exercise any of these rights, please contact us at the email address provided in Section 12. We will respond to your request within the timeframe required by applicable law.
9. Age Restriction
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will take steps to promptly delete that information.
10. Cookies and Tracking
Our website and application may use cookies and similar technologies for essential functionality (keeping you logged in, remembering preferences), analytics (understanding how users interact with the Service), and security (detecting suspicious activity). You can manage cookie preferences through your browser or device settings.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Service or via email. Your continued use of the Service after such notification constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: