Bitmo Privacy Policy

Effective date: November 04, 2026

This Privacy Policy explains how Agile Zone LLC, doing business as M Genio (“we”, “us”, “our”), collects, uses and shares personal information when you use the Bitmo mobile app, the website bitmo.me and related services (the “Service”). By using the Service you accept this Policy. If you do not agree, please do not use the Service.

1. Who we are

Agile Zone LLC is a Michigan limited liability company and the controller of the personal information described here. Contact: Agile Zone LLC (dba M Genio), 2500 Packard, Suite 101, Ann Arbor, MI 48103, USA. Email: contact@bitmo.me.

2. Non-custodial wallet: what we do not have

Bitmo is a non-custodial wallet. Your wallet keys and recovery phrase are created and kept on your device. The current version of the app does not send your recovery phrase or private keys to our servers, and we cannot access or recover them. Transactions are created and signed on your device and sent to the Bitcoin or Lightning networks.

Please note that blockchain transactions are public and permanent. Anyone can see the transactions linked to an address, and we cannot delete or change them.

3. Information we collect

Information you give us:

Account details: your phone number (used to sign in with a one-time code), username and display name, and optionally your email address and profile photo.
Social features: the contacts you pay or request money from within the app (“frequents”), blocked users, payment requests and notes, and notifications between users.
Support and feedback: messages you send us and any information in them.
Sign-up code: an invitation code, if you use one.

Information created when you use the Service:

Wallet information we store: the public receiving address linked to your profile so other users can pay you. We may keep records of in-app payments between users, such as sender, recipient, type, currency and time. We do not store your private keys or recovery phrase.
Device and usage information: device model, operating system, app version, language, approximate region, crash reports, diagnostics, and how you use features, collected with Google Firebase tools (Analytics, Crashlytics, Remote Config).
Push notification token so we can deliver payment and request notifications.
Buy/sell order information: if you use a buy or sell provider, we may receive an order identifier, status and a related timestamp, and failure information so we can support you. We do not receive your card, bank or identity documents.

Information from your device, with your permission:

Camera, to scan QR codes for addresses and invoices.
Photos, if you choose a profile picture.
Biometrics (Face ID, fingerprint), to unlock the app. We do not receive your biometric data; it stays with your device’s operating system.

We do not collect your precise location or access your phone contacts.

4. How we use information

To provide and run the Service: sign you in, show your balance and transactions, let you find and pay other users, send notifications and process support requests.
To keep the Service safe: prevent fraud and abuse, enforce our Terms, apply user blocks and comply with law.
To maintain and improve the Service: fix crashes, measure performance and understand which features are used.
To communicate with you about the Service, including important updates, and in-app messages. You can control push notifications in your device settings.
To meet legal obligations and respond to valid legal requests.

We do not sell your personal information, and we do not use it for third-party advertising.

5. Who we share information with

Other users: your username, display name, profile photo and public receiving address are visible to other users, who can find you through search so they can pay or request payments from you. Information about payments between you and another user is visible to that user.
Service providers that process data for us, including Google Firebase (authentication, database, storage, messaging, analytics, crash reporting, remote configuration) and a search provider (Algolia) used to power user search. They may only use the data to provide services to us.
Payment and network providers: if you buy or sell Bitcoin, the provider (for example Transak) collects and processes your information under its own privacy policy, as a separate controller. Lightning and Bitcoin infrastructure providers receive the technical data needed to carry out your transactions. Public blockchain data is visible to everyone.
Legal and safety: authorities and other parties when we believe disclosure is required by law, legal process or to protect rights, safety and security.
Business transfers: a successor, in a merger, acquisition or sale of assets, subject to this Policy.
With your consent or at your direction.

6. How long we keep information

We keep account information while your account is active. When you delete your account we delete or anonymise your profile data within a reasonable period, except where we must keep information for legal, security or fraud-prevention purposes, or for records of payments you made to or received from other users, which the other user may still see. Backups and logs are deleted on a rolling basis. Blockchain data cannot be deleted.

7. Your choices and rights

You can view and update your profile in the app, manage notification and permission settings in your device, and delete your account from the app. Back up your recovery phrase before deleting the app or account, because we cannot restore it.

Depending on where you live, you may have the right to access, correct, delete, port or restrict the use of your personal information, to object to certain processing, and to withdraw consent. Residents of California and certain other US states may also have the right to know what we collect, to opt out of the sale or sharing of personal information (we do not sell or share it for advertising) and not to be discriminated against for using these rights. Residents of the European Economic Area, the United Kingdom and similar jurisdictions can also complain to their data protection authority. To use a right, contact us at the address above; we may need to verify your identity, and we will respond within the time the law requires.

8. Legal bases (EEA and UK users)

Where GDPR or UK GDPR applies, we process personal information to perform our contract with you (providing the Service), for our legitimate interests (security, fraud prevention, improving the Service, supporting you), to comply with legal obligations, and, where needed, with your consent (for example, camera access or push notifications).

9. International transfers

We are based in the United States, and our providers process data in the United States and other countries. If you are outside the US, your information will be transferred to and processed in countries whose data protection laws may differ from yours. Where required, we use appropriate safeguards such as standard contractual clauses.

10. Security

We use reasonable technical and organisational measures to protect personal information, including access controls and encrypted connections. No system is completely secure, so we cannot guarantee absolute security. You are responsible for securing your device, your phone number and your recovery phrase.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

12. Third-party links and services

The Service may open third-party pages (for example a buy or sell provider’s widget inside the app). Their privacy practices are their own, and we are not responsible for them. Please read their policies.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, notify you in the app or by another suitable method.

14. Contact us

Agile Zone LLC (dba M Genio), 2500 Packard, Suite 101, Ann Arbor, MI 48103, USA. Email: contact@bitmo.me