Privacy Policy

Who we are

This Privacy Policy explains how Affirm Payments LLC ("Affirm Wallet & Exchange", "we", "us") handles information in the Affirm Wallet & Exchange Android application (package com.affirmwalletexchange.markets) and on the website at affirmcrypto.exchange.

Affirm Wallet & Exchange is a California limited liability company, Entity ID 2735, with its principal office at 221 Main St., 6th Floor, San Francisco, United States.

For any question about this policy, or to exercise any right described in it, contact us at [email protected] or 304-402-3489.

Information you give us

Account information. If you create an Affirm Wallet & Exchange account, we process the name and email address you enter, and a one-way cryptographic hash of the password you choose. Your password itself is never stored, is never transmitted or held in readable form, and cannot be recovered from what is stored. Passwords are hashed with PBKDF2 using a random per-account salt.

Messages you send us. If you email or telephone support, we process what you choose to tell us so that we can answer.

Nothing else. We do not ask for, and the application does not collect, identity documents, payment details, bank details, wallet addresses, private keys, recovery phrases, contacts, photographs, location, microphone or camera data, or biometric data.

Information the application handles on its own

Market data requests. While the application is open it requests public cryptocurrency market prices over HTTPS from a third-party market-data provider, approximately once per minute, and when you press refresh. These requests contain no information about you, no account details and no identifier of you or your device.

A local copy of the last prices. The application keeps the most recent set of prices it received on your device so that it can still show you something when your connection drops. This copy never leaves your device.

Your own settings. Any preference you set in the application is stored on your device only.

What we do not do

We do not sell personal information, and we do not share it for cross-context behavioural advertising or targeted advertising.

The application contains no advertising software development kit, no analytics software development kit, no crash-reporting service and no social-media tracking software.

We do not build advertising profiles, and we do not carry out profiling that produces legal or similarly significant effects.

The website does not use advertising cookies or third-party analytics. See our Cookie Policy.

Why we process information, and on what basis

To provide an account you asked for. Processing your name, email address and password hash is necessary to create and operate the account you requested.

To verify your email address. We send a verification message to the address you give us. An account cannot be used until that address is verified.

To answer you. We use what you send to support in order to reply.

To meet legal obligations. As a registered money services business, Affirm Wallet & Exchange is subject to the Bank Secrecy Act and its implementing regulations, and to applicable state law. Where those laws require us to collect, verify or retain information, we will tell you at the point we ask for it and explain why.

Who we share information with

We do not sell, rent or trade personal information.

We share information only where one of the following applies: with a service provider acting on our instructions and bound to protect it; where we are required to by law, regulation, subpoena or other lawful request; where it is necessary to investigate suspected fraud or a threat to the safety of a person; or with your direction or consent.

The third-party market-data provider that supplies prices receives no information about you, because the request the application makes contains none.

How long we keep information

Account information is kept for as long as the account exists, and afterwards only for as long as we are required to keep it by law. Records that the Bank Secrecy Act requires a money services business to retain are kept for the period that law prescribes, which is generally five years.

Support correspondence is kept for as long as needed to resolve the matter and to meet our record-keeping obligations.

Information held only on your device is removed when you uninstall the application or clear its storage.

Your rights

Wherever you live, you may ask us to confirm what personal information we hold about you, to provide a copy of it, to correct it if it is wrong, or to delete it. Email [email protected] and we will respond within the time the applicable law allows.

Depending on where you live, you may have additional rights under your local law, including the California Consumer Privacy Act and the privacy laws of other US states, and you may have the right to complain to your local data-protection or consumer authority.

We do not discriminate against you for exercising any of these rights.

Security

All traffic between the application and any server travels over HTTPS. Passwords are stored only as a salted one-way hash. No system is perfectly secure, but we take reasonable measures appropriate to the limited information the application handles.

Children

The application is not directed to children under 13 and we do not knowingly collect personal information from a child under 13. If you believe a child has given us personal information, contact [email protected] and we will delete it.

Changes

This policy takes effect on 22 September 2026. If we change it, we will post the updated policy at this address with a new effective date, and where the change is significant we will say so in the application.

Contact

Affirm Payments LLC, 221 Main St., 6th Floor, San Francisco, United States. Phone 304-402-3489. Email [email protected].