Cropty
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
Custodial crypto wallet: they hold your coins, can freeze them without notice, and share KYC and transaction data for compliance.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, device and IP data, wallet transactions, crash logs, and sometimes ID photos and selfies.
Read the exact line
Privacy policy
“Technical information — device type, operating system, app version, IP address, and language preferences.”
Training
They use it to run the wallet, process crypto loans and yield, fight fraud, and meet AML rules.
Read the exact line
Privacy policy
“Processing transactions and enabling crypto loans or yield programs;”
Sharing
They say they do not sell data, but partners, analytics tools, and law enforcement can get it.
Read the exact line
Privacy policy
“We do not sell, rent, or trade your personal information. However, we may share certain data with:”
Kept
They keep data as long as they need it or the law requires; blockchain records stay public forever.
Read the exact line
Privacy policy
“Transaction data related to blockchain operations may remain permanently recorded on public ledgers, beyond Cropty’s control.”
Controls
To see, fix, or delete your data you must email support; they may check your identity first.
Read the exact line
Privacy policy
“To exercise these rights, contact us at support@cropty.io. We may verify your identity before processing such requests.”
Fine print
They can freeze or close you without notice; Sri Lanka courts; continued use means you accept new rules.
Read the exact line
Terms of service
“Cropty may suspend, restrict, place on hold, freeze, deactivate or terminate your account, access to the Service, or access to any assets or transactions, immediately and without prior notice”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Request access, correction, or deletion of your data
Email support@cropty.io (Privacy Policy section 5)
Turn off cookies in your browser
Browser settings (Privacy Policy section 6); some features may break
Report a security issue
Bug Bounty via support@cropty.io (Terms section 10)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can lock your account and your crypto right away without warning if they think there is a compliance or risk issue.
Read the exact line
Terms of service
“Cropty may suspend, restrict, place on hold, freeze, deactivate or terminate your account, access to the Service, or access to any assets or transactions, immediately and without prior notice”
For example, a large withdrawal could be frozen while they review you, and you might not get a reason.
While they review you, they do not have to send your money out even if you ask.
Read the exact line
Terms of service
“Cropty shall have no obligation to process any withdrawal, transfer, refund, release, conversion or disposal of assets that are subject to an AML/KYC, sanctions, fraud or legal review.”
For example, you could wait indefinitely for a withdrawal while they wait for more ID documents.
They can demand government ID and a live photo or video of your face as a condition of using the wallet.
Read the exact line
Terms of service
“passport, national ID card or driver’s licence; proof of address; selfie, liveness check or video verification;”
For example, they may ask you to take a selfie holding your passport before you can withdraw.
Your personal and transaction data can be sent to many companies and governments in other countries.
Read the exact line
Terms of service
“Such data may be transferred to and processed by service providers, compliance vendors, analytics providers, payment partners, banking partners, liquidity providers, exchange partners, regulators and public authorities”
For example, a swap might send your wallet address and ID details to an exchange partner abroad.
They promise almost nothing if the app fails or you lose money through their service.
Read the exact line
Terms of service
“To the fullest extent permitted by law, Cropty Wallet and its affiliates provide all services on an “as-is” and “as-available” basis, of any kind, whether express or implied.”
For example, if a third-party swap partner delays a trade, they say they are not .
If they change the privacy rules and you keep using the app, they treat that as you agreeing.
Read the exact line
Privacy policy
“Continued use of the Service after such updates constitutes acceptance of the revised Policy.”
For example, they could add new sharing and you would be bound just by opening the wallet again.
Sends and receives on the blockchain cannot be erased even if you delete your account.
Read the exact line
Privacy policy
“Transaction data related to blockchain operations may remain permanently recorded on public ledgers, beyond Cropty’s control.”
For example, a past transfer of coins would still be visible on the public chain after you leave.
They say they will not sell your personal data as a product.
Read the exact line
Privacy policy
“We do not sell, rent, or trade your personal information.”
For example, they claim they will not put your email on a list sold to marketers.
They say their systems have several ISO security and privacy certifications.
Read the exact line
Privacy policy
“ISO/IEC 27001, 27017, 27018, and 27701 certified infrastructure.”
For example, they point to certified infrastructure rather than only vague “we take security seriously.”
If you sue, you must do it in Sri Lanka courts, not in your home country.
Read the exact line
Terms of service
“You agree to submit to the exclusive of the competent courts of Sri Lanka for all disputes arising out of or relating to these Terms or your use of Cropty Wallet.”
For example, a user in Europe would have to bring a case in Sri Lanka.
Words to know
Legal words from the lines above, in plain English.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
- venue
- The specific court or city where any lawsuit must be filed, which may be far from where you live. For example, a user in Florida may have to travel to a court in San Francisco to sue.
- governing law
- Which country's or state's laws are used to settle any dispute, no matter where you live. For example, a user in Ohio may find the terms are judged under California law.
How we got here · grade F · score 32/100 · 15 of 15 policy answers backed by a verified quote · 6 not stated
What does the app collect beyond what it needs to work?
Besides account and wallet data they collect IP, device details, diagnostics, and can require ID, selfies, and geolocation indicators for KYC.
Does it record your voice, face or body, and what happens to that?
They can require a selfie, liveness check, or video of your face for KYC and share that with compliance vendors and partners.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use cookies and may share data with analytics tools; they do not describe an ads opt-out.
Do they sell or share your data, and can you opt out?
They say they do not sell personal information, but they share it with service providers, partners, and authorities to run transactions and compliance.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Deletion is by emailing support. They keep data as long as needed or required by law; blockchain records stay public.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe encryption, 2FA, cold storage, ISO certifications, and a bug bounty program.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
Neither document shows a last-updated date. Privacy changes are posted online and continued use counts as acceptance.
Can they close your account without warning, and can you get your data out first?
They may freeze or terminate your account and assets immediately without prior notice for compliance or risk reasons.
If something goes wrong, who pays?
Services are “as-is.” They disclaim most damages and cap liability at proven gross negligence or willful misconduct.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 619 words at a college graduate level (Flesch reading ease 33); the terms are 3,468 words at a professional or legal expert level.
