Effective as of April 27th, 2026

1. INTRODUCTION

This Privacy Policy (the “Policy”) describes how Moneco Canada Inc. and other entities of the Moneco group (collectively “Moneco,” “we,” or “us”) collect, use, retain, and share personal information in connection with the use of the Moneco mobile application and all related services (the “Services”).

This Policy forms an integral part of our General Terms of Use (GTU). By accessing or using our Services, you accept the practices described in this Policy.

Moneco relies on regulated financial and technology partners (Bridge, Noah, Privy, Rain, YellowCard, RevoluPay) to provide its Services. Each of these partners is responsible for its own data practices in accordance with its respective privacy policies. This Policy covers exclusively the data processing carried out by Moneco as data controller. It does not apply to third-party sites or services not owned or controlled by Moneco.

Moneco Canada Inc. is registered with FINTRAC as a Money Services Business (MSB, registration number C100000618) and with the Bank of Canada as a Payment Service Provider (PSP, registration number RPS0014580). As such, Moneco is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), the Act respecting the protection of personal information in the private sector (Law 25, Québec) where applicable, and all regulatory obligations applicable to MSBs and PSPs.

2. PERSONAL DATA WE COLLECT

2.1 Data You Provide Directly

When you create your account and use our Services, we collect information you communicate directly to us, including:

• Identity data: full name, date of birth, government-issued identity document number (passport, national identity card, etc.), photograph (selfie);
• Contact data: postal address, email address, phone number;
• Financial data: account number, bank details, transaction history, payment preferences;
• Compliance data (AML/CFT): KYC verification results, due diligence information, sanctions screening data;
• Wallet-related data: public wallet addresses, account identifiers, recovery information, authentication data associated with wallet features;
• Communications: exchanges with our customer service and support teams.

In certain cases — including high-value or high-volume transactions, or where required by our AML/CFT obligations — we may request additional documents such as bank statements or other supporting materials required for compliance purposes.

2.2 Data Collected Automatically

When you access our Services, we automatically collect certain technical and usage data, including:

• Technical data: IP address, device type and operating system, unique device identifiers, browser type;
• Session data: activity logs, login data, security events, visit duration, pages viewed;