← Palma

Privacy Policy

Effective July 17, 2026

Palma is a service for holding and sending digital dollars (USDC), currently available as a mobile app and a web app to invited beta testers. This policy explains what information we collect, why we collect it, and the choices you have. We keep it short because we collect little.

What we collect

• Phone number. Your phone number is your account identity. We use it to sign you in (via one-time codes sent by SMS) and so other Palma users can send to you.
• Transaction information. Balances, transfers you send and receive, and related records. This is the core of the service and is retained as required for financial recordkeeping.
• Identity verification. Where required by law, we verify your identity through our verification partner (Persona). Documents and details you submit are processed under their privacy policy as well as ours.
• Crash reports and product events. If the app encounters a problem, we receive a crash report (via Sentry). We also record product events such as step names, error codes, and timings so we can find what is broken. These events never include phone numbers, transfer amounts, or account addresses.
• Feedback. If you use the in-app feedback button, we receive the text you write.

What we don't do

• We do not sell your information.
• We do not use your information for advertising, and we do not track you across other apps or websites.
• We do not collect your contacts, location, photos, or messages.

Your money

Palma is built so that only you control your funds. We keep records of your account and transactions to operate the service and to meet legal obligations that apply to money transfer.

Who we share with

We share information only with the service providers needed to run Palma — SMS delivery, identity verification, error monitoring, and payment infrastructure — and only what each needs to do its job. We may disclose information where the law requires it.

Retention

Account and transaction records are kept as long as your account is open and afterwards for as long as financial regulations require. Crash reports and product events are kept for at most 90 days.

Security

Session credentials are stored securely on your device. Traffic between the app and our servers is encrypted. Access to production systems is restricted and logged.

Children

Palma is not directed at children and may not be used by anyone under 18.

Changes

If we change this policy, we will update this page and the effective date above. Meaningful changes will be announced in the app.

Contact

Questions or requests about your data: wtiwana@gmail.com.