Trust

Privacy Policy

Last Updated: May 3, 2026

This Privacy Policy explains how Six Days LLC ("we," "our," or "us") collects, uses, shares, and protects your personal information when you use the Trust Wallet Card and related services (the "Services"), offered in authorized partnership with Trust Wallet. It should be read together with our Terms of Service and AML Policy.

By using the Services, you agree to the collection and use of your information as described in this Policy.

1. Who We Are

The Trust Wallet Card is operated by Six Days LLC and issued by StraitsX pursuant to a license from Visa. For the purposes of applicable data protection law, Six Days LLC is the controller of the personal information described in this Policy, except where the card issuer or another partner acts as controller for their own regulatory purposes (for example, identity records they are legally required to hold).

2. Information We Collect

a. Information you provide to us

  • Identity information (KYC): your full name, date of birth, nationality, residential address, and government-issued identity documents (such as a passport, national ID, or driver's license).
  • Biometric/verification data: a selfie or live "liveness" capture used to confirm that you match your identity document.
  • Contact information: email address and, where provided, phone number.
  • Shipping information: delivery address for physical cards (Silver, Gold, and Black tiers).
  • Account information: the credentials you create to access your account.

b. Information generated through your use of the Services

  • Wallet and blockchain information: your connected public wallet address and the on-chain transactions associated with your use of the Card. Note that public blockchain data is inherently public and outside our control.
  • Transaction information: card purchases, amounts, merchants, dates, currency conversions, and rewards earned.
  • Technical and device information: IP address, device identifiers, browser type, operating system, and similar data collected automatically when you use our website or app.
  • Usage information: how you interact with the Services, for security, fraud-prevention, and product-improvement purposes.

c. What we do NOT collect

We do not collect, access, store, or transmit your private keys, Secret Phrase, or wallet password. These remain solely on your device. Because the Card operates on a self-custody model, we never hold your digital assets.

3. How We Use Your Information

We use your personal information to:

  • Verify your identity and eligibility (KYC) and comply with anti-money-laundering, sanctions, and other legal obligations (see AML Policy);
  • Issue, deliver, and service your Card, and process your transactions;
  • Provide customer support and communicate with you about your account;
  • Detect, prevent, and investigate fraud, security incidents, and prohibited use;
  • Calculate and deliver rewards;
  • Improve and develop the Services;
  • Comply with applicable laws, regulations, court orders, and lawful requests from authorities.

We rely on the following legal bases (where applicable): performance of our contract with you, compliance with legal obligations, your consent (which you may withdraw), and our legitimate interests in operating and securing the Services.

4. How We Share Your Information

We share personal information only as necessary to operate the Services, and with appropriate safeguards. We may share it with:

  • The card issuer (StraitsX) and payment networks (Visa), for card issuance, transaction processing, and their own regulatory compliance;
  • Identity-verification and compliance providers who perform KYC, sanctions screening, and fraud checks on our behalf;
  • Liquidity and conversion providers who facilitate the conversion of digital assets to fiat at the time of a transaction;
  • Service providers who support our infrastructure, hosting, analytics, and customer support, under contractual confidentiality and data-protection obligations;
  • Trust Wallet, our authorized partner, to the extent necessary to provide the Services;
  • Authorities and regulators, where required by law, regulation, legal process, or to protect our rights, users, or the public.

We do not sell your personal information. We do not display third-party advertising in the Services, and we do not share your information with advertisers.

5. International Transfers

Because we and our partners operate across multiple jurisdictions, your information may be transferred to and processed in countries other than your own. Where we transfer personal information internationally, we take steps to ensure it is protected in accordance with applicable data protection law, using appropriate safeguards such as standard contractual clauses where required.

6. Data Retention

We retain your personal information for as long as necessary to provide the Services and to meet our legal and regulatory obligations. Identity and transaction records collected for KYC and anti-money-laundering purposes are retained for the minimum period required by applicable law — typically at least five (5) years after the end of our relationship with you — even after you close your account. When information is no longer required, we delete it or anonymize it securely.

7. Security

We implement technical and organizational measures designed to protect your personal information, consistent with recognized industry standards (including PCI DSS, SOC 2, ISO 27001, and applicable data-protection frameworks). These include encryption in transit and at rest, access controls, and monitoring. No system is completely secure, however, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and your wallet.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you;
  • Request correction of inaccurate or incomplete information;
  • Request deletion of your information (subject to our legal obligation to retain certain records);
  • Object to or restrict certain processing;
  • Request a portable copy of information you provided;
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at info@trustwallet-card.io. We will respond within the timeframe required by applicable law. Note that we cannot delete identity or transaction records we are legally required to retain, even at your request.

9. Cookies and Tracking

Our website and app use cookies and similar technologies for essential functionality, security, and analytics. You can control non-essential cookies through your browser or the cookie settings we provide.

10. Children

The Services are not directed to, and may not be used by, anyone under eighteen (18) years of age. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you through reasonable means and update the "Last Updated" date. Your continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

12. Contact

For questions about this Policy or your personal information, contact:

Six Days LLC info@trustwallet-card.io

If you are in a jurisdiction with a data protection authority, you also have the right to lodge a complaint with that authority.