Provisional version: this text is being reviewed and is not final. Highlighted items are still to be completed by the company.
Privacy policy
Last updated : October 19, 2026
This policy explains which personal data Matunda collects, why, how long it is kept and what rights you have. It covers the Matunda mobile app, the back-office and this website.
Who is responsible for your data
The data controller is [TO COMPLETE: company name, legal form and registered office].
Contact for any privacy question or request: [TO COMPLETE: privacy contact email]. Data protection officer, if appointed: [TO COMPLETE: name or "none"].
Data we collect
- Account: first name, last name, email address, country, language and preferred currency. Your password is stored only in hashed form.
- Sign-in security: one-time codes sent by email, and the devices you sign in from (device description, IP address, browser or app identifier, notification token).
- Activity: orders, transactions, fund movements, portfolio positions, watchlists, price alerts and notification preferences.
- Identity verification: the information required to verify your identity, handled by [TO COMPLETE: identity verification provider].
- Messages you send us through the contact form or the app, and your email address if you sign up to be told when the app launches.
- Technical logs needed to run and secure the service.
Why we use it and on what legal basis
- To create and run your account and execute your orders: performance of the contract.
- To secure your account and prevent fraud: legitimate interest.
- To meet accounting, anti-money-laundering and other legal duties: legal obligation.
- To send price alerts and notifications you asked for: your consent, which you can withdraw at any time in the app settings.
- To answer your messages: legitimate interest or pre-contractual steps.
Who receives your data
Only the providers needed to run the service, bound by contract: hosting, email delivery, push notifications, identity verification, market data and error monitoring.
[TO COMPLETE: confirmed list of providers, the country where each processes data, and the safeguards used for transfers outside the European Economic Area.]
Where orders are executed by a regulated partner, we share the data that partner needs to carry them out: [TO COMPLETE: partner name and role].
How long we keep it
- Account data: for as long as your account is open.
- When you delete your account in the app, your name and email are replaced by anonymous values, and your watchlists, alerts, notifications and sign-in sessions are erased.
- Order, transaction and fund-movement history is kept in anonymised form for the period required by law: [TO COMPLETE: retention period and legal reference].
- Contact messages: [TO COMPLETE: retention period].
Your rights
You can ask to access, correct, delete, restrict or obtain a copy of your data, to object to some uses, and to withdraw your consent. You can delete your account yourself in the app: Settings › Account › Delete my account (this requires a zero balance, no open position and no pending order).
To exercise your other rights, write to [TO COMPLETE: privacy contact email]. If you are not satisfied with our answer, you may complain to your data protection authority: [TO COMPLETE: competent authority].
Security
Passwords are hashed, sign-in uses one-time codes, sessions can be revoked and communications are encrypted in transit. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires.
Changes to this policy
We will post any change on this page and, if it is significant, tell you in the app.