Privacy Policy

Last updated: March 2026

1. Introduction

Ondex Labs LLC (“Ondex,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Ondex mobile application and website (collectively, the “Service”).

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

Information You Provide

  • Profile information: Display name, avatar, bio, and Ondex Name (if registered)
  • Support communications: Messages and information you provide when contacting our support team
  • Social content: Posts, comments, and messages you create through the social features

Information Collected Automatically

  • Device information: Device type, operating system version, app version, and device identifiers for compatibility and crash reporting
  • Usage analytics: Anonymous usage patterns, feature interactions, and app performance metrics to improve the experience
  • Push notification tokens: If you opt in to notifications, we store a device token to deliver push notifications
  • Crash reports: Diagnostic information to identify and fix bugs
  • Log data: IP address, access times, and referring URLs when you visit our website

3. Information We Do NOT Collect

We do not collect or store:

  • Private keys or recovery phrases
  • Wallet PINs or biometric data
  • Transaction history (this is on the public XRP Ledger)
  • Personal identification documents (KYC is handled by third-party providers for on-ramp/off-ramp services)
  • Precise location data

4. How We Use Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Deliver push notifications (if opted in)
  • Respond to support inquiries
  • Detect and prevent fraud, abuse, and security incidents
  • Analyze usage patterns to improve the user experience
  • Comply with legal obligations
  • Communicate important updates about the Service

5. Data Sharing & Third-Party Services

We do not sell your personal data. We may share information with the following categories of third parties:

  • Analytics providers: Anonymous, aggregated usage data to understand app performance
  • Crash reporting services: Diagnostic data to identify and fix issues
  • Fiat on-ramp/off-ramp providers (e.g., Meld): When you use these services, you interact directly with the third-party provider under their own privacy policy
  • Cross-chain bridge providers: Transaction data necessary to facilitate cross-chain transfers
  • Push notification services: Device tokens to deliver notifications (Apple APNs, Google FCM)
  • Law enforcement: When required by law, subpoena, or court order

Each third-party service operates under its own privacy policy. We encourage you to review their policies before using their services.

6. Blockchain Transparency

The XRP Ledger is a public, decentralized blockchain. Transactions conducted through the App are recorded on the public ledger and are visible to anyone. This includes wallet addresses, transaction amounts, and any data included in transaction memos.

Ondex Names are public identifiers linked to your wallet address and are visible on-chain. Profile information associated with Ondex Names is stored on-chain and is publicly accessible.

Ondex has no ability to delete, modify, or hide blockchain data. You should not include sensitive personal information in transaction memos, public profile fields, or on-chain social posts.

7. Data Retention

We retain your information for the following periods:

  • Account and profile data: Retained until you delete your account or request deletion
  • Analytics data: 24 months, then anonymized or deleted
  • Support communications: 36 months from the date of resolution
  • Crash reports: 12 months
  • Push notification tokens: Until you opt out or uninstall the App
  • Legal holds: As required by applicable law (typically up to 5 years)

On-chain data (transactions, Ondex Names, social posts) cannot be deleted as it is stored on the public XRP Ledger.

8. Data Security

We implement industry-standard security measures to protect your information. All sensitive data is encrypted at rest and in transit. We use secure protocols (TLS/SSL) for all data transmissions and follow security best practices for our infrastructure.

However, no method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

General Rights

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data (subject to legal obligations and blockchain limitations)
  • Opt-out: Opt out of analytics collection and push notifications at any time through the App settings
  • Portability: Request your data in a portable format

For EEA/UK Residents (GDPR)

  • Right to restrict processing of your personal data
  • Right to object to processing based on legitimate interests
  • Right to withdraw consent at any time
  • Right to lodge a complaint with your local data protection authority

For California Residents (CCPA/CPRA)

  • Right to know what personal information is collected, used, and shared
  • Right to delete personal information
  • Right to opt out of the sale of personal information (we do not sell personal data)
  • Right to non-discrimination for exercising your rights

Blockchain exception: Please note that data recorded on the XRP Ledger (transactions, Ondex Names, social posts) cannot be modified or deleted due to the immutable nature of blockchain technology.

To exercise any of these rights, contact us at privacy@ondex.money.

10. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly. If you believe a child under 18 has provided us with personal data, please contact us at privacy@ondex.money.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from the laws of your country.

When we transfer data internationally, we implement appropriate safeguards, including standard contractual clauses approved by relevant data protection authorities, to ensure that your information receives an adequate level of protection.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App or via our website. The “Last updated” date at the top of this page indicates when the policy was last revised. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact

For privacy inquiries, data requests, or questions about this policy, contact us at privacy@ondex.money.

Ondex Labs LLC
Wyoming, USA