Privacy Policy

Yieldfund operates an online platform for financial services. This platform is accessible via our website: yieldfund.com and will be referred to as our “services.”

This is our Privacy Statement, explaining the types of personal data we collect and process through our services. Personal data includes all information that can directly or indirectly identify a person, as defined under the General Data Protection Regulation (GDPR). This statement also outlines our role in processing personal data, how long we retain such data, and your rights as a data subject.

We kindly ask you to read this Privacy Statement carefully. For further questions about the processing of your personal data, please contact us using the details at the end of this statement.

Yieldfund is responsible for processing your personal data, as described in this Privacy Statement, and acts as the ‘data controller’ within the meaning of the GDPR.

For questions about processing your personal data, please contact us using the details provided at the end of this statement.

Yieldfund may process your personal data if you:

3.1 Information we collect automatically

When you visit our website or use our services, we automatically collect certain information, such as:

3.2 Automated decision-making

Yieldfund makes decisions based on automated processes that may have significant effects on individuals.

These decisions are made by computer programs or systems without human involvement (e.g., a Yieldfund employee). Yieldfund uses the following programs or systems:

3.3 Information you provide to us

To use our services, we may request certain information, such as:

3.4 Information generated by us or received from third parties

To use our services, we may request certain information, such as:

3.5 Use by third parties

Third parties include:

Yieldfund may share data with suppliers, audit bodies, government authorities, and companies or individuals hired by Yieldfund to perform specific tasks (including processors).

Data may also be shared with third parties to support the provision of our services.

Yieldfund may provide data to third parties if required by applicable laws, court orders, or other legal obligations or with the data subject’s explicit consent.

We process your personal data for the following purposes:

We do not retain your personal data longer than necessary for the purposes for which it was collected unless we are legally obligated to retain it longer.

If Yieldfund has asked for and received your (explicit) consent to process your personal data, Yieldfund will retain it until you withdraw that (explicit) consent or it is deemed to have expired without your renewed (explicit) consent.

Under the GDPR, you have certain rights regarding your personal data, including the right to access, correct, delete, and restrict processing. You can exercise these rights at any time by contacting us.

Yieldfund reserves the right to amend this privacy statement. We recommend reviewing this statement regularly for updates.

Yieldfund handles personal data with care and aims for continuous improvement. If you have tips or complaints about our handling of personal data, please contact Yieldfund’s Data Protection Officer. You may also file a complaint with the Dutch Data Protection Authority.

Yieldfund has implemented appropriate technical and organizational measures to protect personal data against loss or unlawful use. If data is processed by third parties on behalf of Yieldfund, a data processing agreement ensures that data is handled securely and adequately.

Personal data may be transferred outside the European Economic Area (EEA) to countries deemed to provide an adequate level of data protection under GDPR. This includes Canada (commercial organizations), Japan, Switzerland, and New Zealand. For transfers outside these countries, standard contractual clauses will apply.

For questions, comments, or complaints about this Privacy Statement or the processing of your personal data, please contact us at:

Hanzeweg 5, 7418 AW Deventer, the Netherlands

The app does not ask for your name, your email address or an identity document. There is no registration and no login. You open the app, create a wallet, and that wallet is yours.

That is a deliberate choice. The less we know about you, the less can go wrong.

The app supports USDC only. You can use it to receive and send USDC, check your balance and look back through your transaction history. That is all the app does.

The following data sits on your own device and never reaches us:

We cannot access any of it. That has a consequence for you as well: if you lose both your device and your recovery phrase, we cannot restore your wallet. So keep that phrase safe, on paper or in a password manager, and share it with no one.

A wallet app cannot work without an internet connection. Here is exactly what becomes visible in the process, and to whom.

4.1 Connection to the blockchain network

To display your balance and transactions, and to send a transaction, the app connects to a node on the blockchain network through Alchemy.

During that connection, your IP address and the wallet address you are querying are visible to the party operating that node. This is technically unavoidable: without that query there is no balance to display. We do not use this data to build profiles or to track your behaviour.

4.2 Amounts in euros

The app shows amounts in euros. To do so it retrieves a current exchange rate from exchangerate-api. Your IP address is visible to that service as well. No information about you or your balance is sent along.

4.3 Notifications

If you turn notifications on, we receive a push token through Apple. That is a unique code for your installation of the app. Nothing more: no name is attached to it and no email address. We use it only to send you a notification, for example when a payout arrives. We use Firebase to deliver those notifications.

If you turn notifications off again in your phone settings, or delete the app, we delete the token.

4.4 Apple

When you download the app, Apple processes data about that download. If you choose to share crash data with developers, we receive anonymised crash reports through App Store Connect. We cannot identify you from those. Apple’s own privacy policy applies to what Apple does with your data.

4.5 What is not in the app

No analytics. No tracking pixels. No advertising identifiers. No access to your contacts, photos, camera or location. No sale of data to anyone.

This is the most important limitation in this statement, so we will put it plainly.

Every transaction to or from your wallet address is recorded on a public blockchain network. Anyone in the world can look those transactions up, including amounts and timestamps. So anyone who knows your wallet address can see what comes in and goes out.

That data does not sit on our servers and belongs to no one. It cannot be changed or erased by anyone — not by us, and not even if you ask us to delete your data.

Your right to erasure and rectification therefore applies to the data in our own records, but not to what is already on the blockchain. Please bear that in mind when deciding who to share your wallet address with.

The app itself does not know who you are. But the wallet address on which you receive your interest is one you give us through the investor portal.

In our records, that address is therefore linked to you as an investor. We need this to pay your interest to the correct address and to demonstrate that this happened correctly and on time. Our general privacy policy applies to those records.

In other words: in the app you are anonymous, in our records you are not. That distinction matters too much to be vague about.

Because the wallet is non-custodial, there are things we cannot do. Not even if you ask us to.

Where a party processes personal data on our behalf, we enter into a data processing agreement. Where a party processes data outside the European Economic Area, this takes place on the basis of an adequacy decision by the European Commission or on the basis of Standard Contractual Clauses.

We also disclose data where the law requires it, for example to a regulator or a law enforcement agency.

Data on the blockchain falls outside these periods. See section 5.

The app connects over encrypted connections only. Your keys are stored in your device’s secure storage. The app and the environment around it are tested periodically by an external party.

On your side: enable a screen lock on your phone, keep your operating system up to date, store your recovery phrase offline, and always check the first and last characters of the receiving address before you send.

You can ask us for access to the data we hold about you, for correction or erasure of it, for restriction of processing, and for transfer of your data. You can object to processing and withdraw consent you have given.

For the app this comes down to your push token in practice, because we hold nothing else. If your question concerns your investment or your payouts, our general privacy policy applies.

The Yieldfund Wallet is not intended for people under 18. We do not target minors and do not knowingly collect data from minors.

We update this statement when the app changes or when the applicable rules require it. The date at the top shows when that last happened. We announce significant changes inside the app.