Privacy Policy
The short version
- Espresso Cash is a self-custodial wallet. Your recovery phrase and keys stay on your phone. We never see them and cannot move your money.
- We don't ask for your phone number, email address or contacts to use the wallet.
- Photos you send in conversations are encrypted on our servers and deleted automatically, after 7 days at most. You can choose a shorter time.
- We don't sell your data and we don't use advertising trackers. Our app analytics are our own and are kept for 30 days.
- Identity checks (KYC) for buying or selling crypto are done by the partner you choose, not by us.
1. Who we are
Espresso Cash (the mobile app and espressocash.com) is operated by BRIJ Digital Inc., a Delaware corporation, USA ("BRIJ", "Espresso Cash", "we", "us"). For the personal data described in this policy, we are the data controller.
This policy explains what information we process when you use the Espresso Cash app and website (the "Service"), why we process it, and the choices you have.
2. What we collect and why
We collect as little as we can. You can create a wallet without giving us your name, phone number or email address.
| Information | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Wallet addresses: your public owner and smart-wallet addresses, plus the label you give a wallet | To identify your account, pay the network fees for you (we sponsor them), show your balances and history, and alert you when you receive money | Performance of our contract with you |
| Passkey public data: credential ID, public key, signature counter and a device label | To let you approve payments with Face ID, fingerprint or your screen lock. Your private passkey never leaves your device. | Contract |
| Profile: the display name and profile photo you choose (optional) | To show who a payment or message is from. Your photo is shown only to people you have a conversation with. | Contract |
| Conversations: payments, payment requests, notes and photos you exchange with other users, the amounts, transaction references and read status | To provide the conversation and payment features | Contract |
| Payment links: amount, status, and an encrypted note or photo attached to the link | So that you can send money to someone who isn't on Espresso Cash yet | Contract |
| Push notification token, platform and language | To send you notifications you can turn off at any time | Contract / consent (system permission) |
| App diagnostics: a random install ID, app version, platform, device model and OS version, the screens and features you use, errors and crash reports, an approximate country derived from your IP address, and your USDC balance in broad ranges (never the exact amount) | To keep the app working, fix bugs and crashes, and understand which features are useful | Legitimate interest in running a reliable service |
| Referral data: who invited whom, and the referral rewards earned | To run the referral program and pay rewards | Contract |
| Partner connections: which partner apps you connect, a pseudonymous ID unique to each partner, subscriptions, rewards and the limits you set | To run the integrations you approve, and nothing more | Contract |
| AI agent data: see section 6 | To provide the agent features you choose to use | Contract |
| Support messages: what you send us and your contact details | To answer you | Legitimate interest |
| Server logs: IP address, request data and errors | Security, abuse prevention and debugging | Legitimate interest |
What we never collect: your recovery phrase or private keys, your contacts, your precise location, or microphone audio.
3. Public blockchain data
Payments made with Espresso Cash are recorded on the Solana blockchain. That ledger is public and permanent: anyone can see the wallet addresses, amounts and times of transactions. Neither we nor anyone else can change or delete it. Think about this before you link your identity to a wallet address in public.
4. Device permissions
- Camera: to take photos for conversations and to scan QR codes. Used only when you open the camera.
- Photo library: to pick a profile photo or a photo to send. Only the photo you pick is used.
- Microphone: some phones ask for it before the camera can open. Espresso Cash never records or sends audio.
- Face ID, fingerprint or screen lock: to protect your recovery phrase and approve payments. Biometric data stays in your phone's secure hardware. We never receive it.
- Notifications: to tell you about payments and messages. You can turn them off in your phone's settings.
5. Who we share data with
We do not sell personal data, and we do not share it for advertising. We share it only with:
- Other users, as needed for the features you use. For example, the person you pay sees your display name, profile photo, the amount and your note or photo.
- Infrastructure providers that run the Service for us, under contract and only for that purpose: hosting and network security (Cloudflare and our hosting provider), Solana network access and wallet monitoring (Helius), push delivery (Google Firebase Cloud Messaging and Apple Push Notification service; notification text, such as a sender's name and an amount, passes through them), and server error monitoring (Sentry).
- Swap and price services (Jupiter, CoinGecko, CoinMarketCap). These receive token and amount data needed to quote and execute a swap or show a price, along with your public wallet address when a transaction is built.
- On- and off-ramp partners (for example BRIJ and the providers it connects to, such as MoonPay or Mercuryo, and MoneyGram). When you choose to add or withdraw cash, you deal with the partner directly. It collects your identity documents and payment details under its own privacy policy. We pass it only what is needed to start your order (such as the amount and your wallet address) and receive the order's status. We do not store your identity documents.
- Partner apps you connect, which receive a pseudonymous ID and only the information needed for the action you approved.
- Authorities, when we are legally required to share data, or to protect the rights, safety or property of our users or ourselves.
- A successor, if Espresso Cash is merged, acquired or reorganized. This policy will keep applying to your data.
6. AI agents
Agents are optional.
- Agents you connect (for example an AI assistant connected with a pairing code): the agent can see and use only the separate "pocket" balance you give it, up to the daily limit you set. You can disconnect it at any time.
- Agents we host (for example the travel agent): your messages, your trip details and the travel preferences saved on your phone are processed by our AI model provider, Anthropic, to generate replies. Anthropic does not use this data to train its models. We keep the conversation so the agent can continue it. Traveller details needed for a booking (name, date of birth, nationality, passport details, email and phone number) are stored on your phone. They are sent to us only when you confirm a booking. We keep them encrypted until we pass them to the booking provider, then we delete them. They are never sent to the AI model.
7. How long we keep data
- Conversation photos: deleted automatically after the time you choose: 5 minutes, 1 hour, 24 hours or 7 days, and never more than 7 days. When two people chose different times, the shorter one applies.
- Payment-link photos: deleted 7 days after the link is claimed or cancelled.
- App diagnostics: 30 days.
- Profile photo: until you change or remove it.
- Account, conversation and referral records: for as long as you use the Service. If you ask us to delete your data, we delete it within 30 days, except what we must keep to comply with the law, prevent fraud or settle disputes.
- Server logs: no longer than needed for security and debugging, normally a few weeks.
8. Security
Photos, notes and agent credentials are encrypted at rest. All traffic is encrypted in transit (HTTPS/TLS). Access to production systems is restricted. Your wallet itself is protected by keys only you hold. No system is perfectly secure, so keep your recovery phrase offline and never share it. Espresso Cash will never ask you for it.
9. International transfers
We and our providers may process data in the United States and in other countries. Where data protection law requires it (for example for users in the EU, EEA or UK), we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.
10. Your rights and choices
Depending on where you live (for example under the GDPR, the UK GDPR or US state laws such as the CCPA), you may have the right to:
- access the personal data we hold about you and get a copy of it;
- correct it;
- delete it;
- object to or restrict some processing;
- withdraw consent, where we rely on consent;
- lodge a complaint with your data protection authority.
To make a request, email support@brij.fi from the app's support page or include your wallet address. We may ask you to prove that you control that wallet, for example by signing a message. We reply within one month.
In the app you can also remove your profile photo, shorten photo retention, delete payment links, disconnect agents and partners, and turn off notifications. Deleting the app or signing out removes the wallet from your phone. It does not delete the funds on the blockchain, which you can recover with your recovery phrase.
We don't sell or "share" personal information for cross-context behavioral advertising, as those terms are defined by California law.
11. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has used the Service, contact us and we will delete their data.
12. This website
espressocash.com is a static site hosted on GitHub Pages. It sets no cookies and uses no analytics or advertising trackers. Our hosting providers (GitHub and Cloudflare) may process your IP address and technical request data to serve and protect the site.
13. Changes
We may update this policy as the Service changes. We'll post the new version here with a new date. If the changes are significant, we'll also tell you in the app.
14. Contact
BRIJ Digital Inc., 8 The Green #21697, Dover, DE 19901, USA · support@brij.fi