> For the complete documentation index, see [llms.txt](https://jpydf.gitbook.io/jpy-defi/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://jpydf.gitbook.io/jpy-defi/reference/interface-privacy.md).

# App privacy notice

## Provider and responsibilities

JPYdf Foundation DAO LLC (the “Foundation”) determines the purposes and information-handling policies for its JPY DeFi user app. The Foundation may engage service providers for technical operations and information processing. The Foundation remains the contact for inquiries and is responsible for responding to them.

## Wallet connections and transactions

The app does not ask for private keys or recovery phrases. It uses the connected wallet's public address and contract state to display balances and positions and prepare transactions requested by the user. The user's wallet signs transactions. Depending on the connection used, wallets, connection or relay services, and RPC providers may receive addresses, connection information and IP addresses. Check the information practices of those services as well.

Blockchain addresses and transactions are public. The Foundation cannot delete records on public blockchains.

## Usage analytics

Production and Sepolia test apps use Google Analytics 4, provided by Google LLC, to analyze page visits, traffic sources, transaction steps and errors. Traffic sources are classified into platform names, such as X or Telegram, and traffic types; referrer URLs and arbitrary campaign names are not sent. Production and test analytics are separate. Google receives events and browser/device information and processes IP addresses. The app does not send wallet addresses, transaction hashes, amounts, input values or raw error messages. Analytics is not used for personalized advertising.

In the EEA, the UK and Switzerland, and when the region cannot be determined, measurement starts only after permission. In other regions, it runs by default and can be declined through Analytics settings in the footer. Declining or withdrawing permission does not affect transactions. A Global Privacy Control signal counts as declining unless the user explicitly allows analytics. Region handling uses the country code returned by the delivery infrastructure.

Analytics cookies last up to 180 days; GA4 event and user data are retained for two months. Declining stops future collection but does not itself delete data already received. See [how Google uses data](https://policies.google.com/technologies/partner-sites?hl=en).

## Local browser storage

The app stores analytics choices, referral codes and information needed to resume transaction flows locally on the device. After you accept the terms and confirm your eligibility, the browser stores only the confirmed terms version so that reloading does not require renewed confirmation. This record contains no country, residence, location, sanctions-screening result or wallet address and is not sent to analytics. Confirming the terms and eligibility does not change analytics choices. Clearing browser data may remove these settings and recovery information. Clearing local data does not cancel submitted transactions.

## Referral codes and reports

Registering a referral code involves handling a wallet address, code, signature, nonce, registration time and related information to verify registration, prevent abuse and provide the code. This information is not matched with report-form information for behavioral tracking or advertising.

Bug and issue reports collect reply email addresses, report text and related information. The [report-form privacy notice](/jpy-defi/reference/support-intake-privacy-notice.md) describes processing services, retention, deletion and the use of external AI services for internal review.

## Contact and changes

Send questions about information handling and requests for access, correction or deletion to JPYdf Foundation DAO LLC at <support@jpydf.com>. Requests are handled after identity verification and in accordance with applicable law. Do not send secret information beyond what is needed to establish the request.

If information handling changes, this notice and the app explanation will be updated, with any necessary notice and consent procedures.