Privacy Policy

KreditKarma.us · Effective January 1, 2025 · Last updated June 15, 2026

We collect information you provide directly: name (optional), email address, phone number, XRPL wallet address, grant application details, and SSN last-4 digits only when required for credit bureau identity verification (never stored in full). We also collect public on-chain data from the XRP Ledger to calculate your LedgerScore — this data is publicly visible on the blockchain by design. Standard web analytics (page views, device type, country) are collected to improve the platform.

We never collect: full Social Security Numbers · private keys or seed phrases · plain-text passwords · payment card numbers · bank account credentials. We will NEVER ask for your private key or seed phrase. Any message requesting this information is fraudulent and should be reported to support@kreditkarma.us immediately.

We use your information solely to: deliver the services you purchase, calculate and display your LedgerScore, process grant applications, send transaction receipts and service confirmations, furnish credit data to bureaus (only with your explicit FCRA consent), comply with legal obligations, and investigate fraud or abuse.

Credit Builder bureau reporting requires your explicit written consent before any data is furnished. You have the right to opt out at any time. If you believe information furnished to a bureau is inaccurate, you may dispute it by contacting us at disputes@kreditkarma.us with subject line "FCRA Dispute." We respond within 30 days as required by law.

We do not sell, rent, or trade your personal information. We share data only with: credit bureaus (only with your explicit consent), service providers operating under strict confidentiality agreements (database hosting, email delivery, analytics), and law enforcement or regulatory authorities when required by valid legal process.

All data is encrypted in transit using TLS 1.3. Data at rest is encrypted using AES-256. SSN last-4 digits are stored only as a one-way cryptographic hash. Access to personal data is restricted to authorized personnel on a need-to-know basis with role-based access controls. We conduct regular security reviews.

We retain your data for as long as your account is active or as needed to provide services. Transaction records are retained for 7 years as required by financial regulations. You may request deletion of your personal data subject to legal retention requirements by contacting us at privacy@kreditkarma.us.

You have the right to: access the personal data we hold about you, correct inaccurate information, request deletion (subject to legal retention obligations), opt out of credit bureau furnishing at any time, and receive a copy of your data in a portable format. To exercise any of these rights, email privacy@kreditkarma.us with subject line "Data Request." We respond within 30 days.

California residents have the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@kreditkarma.us.

KreditKarma.us is intended for users 18 years of age and older. We do not knowingly collect personal information from minors. If we learn we have collected information from a minor, we will delete it immediately.

We use minimal cookies essential to platform function (session management, wallet state persistence in localStorage). We do not use third-party advertising trackers or sell behavioral data to advertisers. Claude products are ad-free.

We may update this Privacy Policy periodically. Material changes will be communicated via email to registered users. Continued use of the platform after changes constitutes acceptance of the updated policy.

Privacy inquiries: privacy@kreditkarma.us
Data disputes: disputes@kreditkarma.us
General: support@kreditkarma.us