In short: Malwa Brothers Limited (“Maharaja Coin”) collects only what we need to operate the app and website. We do not sell personal information. We never ask for private keys or seed phrases. When you later use an on-ramp partner such as MoonPay or another approved provider, that partner collects payment and KYC data under its own privacy policy — not ours.
1. Scope & data controller
This Privacy Policy explains how Malwa Brothers Limited, trading as Maharaja Coin (“we,” “us”), processes information when you use our iOS app, Android app, and website (the “Services”).
Contact:
manager@maharajacoin.app
Location: Auckland, New Zealand
This Policy works together with our Terms & Conditions.
2. Information we collect
2.1 Information you provide
- Support communications — email address and message content when you contact us
- App preferences — settings you choose (e.g. currency display, notification opt-in)
- Disclaimer acceptance — a local flag indicating you accepted in-app disclosures
2.2 Wallet & authentication data
- Public wallet addresses — to display balances and transaction history from public blockchains
- Privy identifiers — when you use embedded wallet features, Privy may process authentication data under its own policy
- Local nicknames — optional labels stored on your device for addresses you save
2.3 Automatically collected information
- Device type, operating system, app version, and language
- Feature usage necessary to operate and improve the Services
- Push notification tokens if you opt in (Apple APNs / Firebase Cloud Messaging)
- Cached configuration, prices, and rates on device or via Firebase
- Anonymous Firebase authentication on the website for live stats and social links
- Diagnostic and crash information where enabled by platform policies
2.4 On-ramp partner data (MoonPay & others)
When you purchase crypto through Apple Pay, debit card, or other enabled methods, the transaction is processed by a regulated third party such as MoonPay or Stripe. Those providers may collect:
- identity verification (KYC) documents and verification results;
- payment card or bank details (processed directly by the provider);
- billing address, phone number, and transaction history; and
- wallet address, asset, amount, and currency for order fulfilment.
Maharaja Coin may receive limited transaction metadata (e.g. status callbacks, wallet address, order references) to update the app UI. We do not receive or store your full payment card number on our servers.
2.5 AI assistant interactions
If you use the in-app assistant, your questions and responses may be processed through configured backend services. Do not share seed phrases, passwords, government IDs, or payment details in chat.
3. What we do not collect
- Private keys, seed phrases, or recovery words
- Full payment card numbers or CVV codes (handled by on-ramp partners)
- Precise GPS location (unless a future feature explicitly requests it with consent)
4. How we use information
- Provide wallet display, market data, and app functionality
- Route on-ramp checkout to licensed partners with pre-filled order details
- Deliver community content, notifications, and admin-published configuration
- Maintain security, prevent abuse, diagnose errors, and improve performance
- Respond to support requests and enforce our Terms & Conditions
- Comply with legal obligations and lawful requests from authorities or partners
5. Legal bases (where applicable)
Depending on your region, we process data based on: (a) your consent (e.g. notifications), (b) performance of the service you request, (c) our legitimate interests in operating and securing the Services, balanced against your rights, and (d) compliance with legal obligations.
6. Third-party service providers
We use established providers to operate the Services, including:
- Google Firebase — Firestore, Realtime Database, Authentication, Cloud Messaging, Cloud Functions
- Privy — embedded wallet authentication and wallet infrastructure
- MoonPay / Stripe — fiat on-ramp, KYC, and payment processing when enabled
- Apple & Google — app distribution and platform services
- Solana RPC & price APIs — balances, transactions, and market data
- AI / cloud functions — assistant and server-side integrations where enabled
Each provider processes data under its own privacy policy and only as needed for the relevant feature. We encourage you to review: MoonPay Privacy Policy, Privy Privacy Policy, and Google Privacy Policy.
7. Sharing of information
We do not sell your personal information. We may share limited data:
- With service providers who help us operate the Services (under confidentiality obligations)
- With on-ramp partners to initiate and fulfil transactions you request
- When required by law, regulation, court order, or to protect rights, safety, and security
- In connection with a merger, reorganisation, or asset transfer — with notice where required
8. International transfers
Our providers may process data in countries other than New Zealand (including the United States and European Economic Area). Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by those providers.
9. Data retention
- On your device: preferences and caches remain until you clear app data or uninstall
- Firebase / server config: retained as long as needed to operate the Services
- Support emails: retained as long as needed to resolve requests and for legitimate records
- Push tokens: retained while notifications are enabled
- On-ramp records: primarily retained by the payment provider under its policies
10. Security
We use industry-standard measures including HTTPS/TLS for data in transit and access controls on our backend. No method of storage or transmission is 100% secure. You are responsible for securing your device and not sharing wallet credentials.
11. Your choices & rights
Depending on your location, you may have the right to:
- access, correct, or delete personal data we hold about you;
- object to or restrict certain processing;
- withdraw consent (e.g. disable push notifications in device settings);
- clear locally stored data from app settings; and
- request a portable copy of your data where applicable.
To exercise these rights, email manager@maharajacoin.app. We may need to verify your request. You may also lodge a complaint with the Office of the Privacy Commissioner (New Zealand) or your local authority.
For MoonPay-specific data requests, contact MoonPay directly as the payment processor.
12. Cookies & local storage (website)
This website does not use advertising cookies. It uses browser localStorage for non-sensitive cached values (such as last known token price) and Firebase anonymous authentication to read public configuration. You can clear site data through your browser settings.
13. Children’s privacy
The Services are not directed at children under 13. Wallet and on-ramp features are intended for adults 18+. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.
14. Changes to this policy
We may update this Privacy Policy from time to time. The effective date and version at the top will change when we do. Continued use after updates means you accept the revised policy.
15. Contact
Privacy questions or data requests:
manager@maharajacoin.app
Malwa Brothers Limited · Auckland, New Zealand