Kira Privacy Policy
Last Updated: March 19, 2026

Mayan Jaguar Operations LLC d/b/a Kira (“Kira”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, and share personal information when you access or use the Kira API or related services (collectively, the “Services”).

1. Overview of Services

Kira is an Application Programming Interface (“API”) that connects you to mobile applications offered by licensed money transmitters (“Partner Applications”). Through Kira, you can fund your Partner Application account by purchasing USDC—a U.S. dollar-pegged digital asset issued by Circle—and use a self-custodied blockchain wallet that you control (your “Account”) to send funds to other approved users.

In the future, we may support additional stablecoins to expand our Services.

2. Who We Are

Kira is offered by Mayan Jaguar Operations LLC, a Delaware limited liability company. Kira provides technology and operational services in connection with payment, account, and related financial functionality made available through regulated financial institutions, Sponsor Banks, and other Partner Institutions. Kira is not a bank and does not itself provide regulated banking services. We may work with one or more financial institution partners and service providers in connection with the Services, and those relationships may change from time to time. We partner with regulated financial institutions that hold money transmitter licenses in various U.S. jurisdictions to facilitate international money transfers.

As of the effective date of this policy, our MSB partners include:

  • CFX Labs Inc. (“MoveMoney”): A Delaware company and registered Money Services Business (FinCEN ID #31000234678229)

  • Bridge Ventures LLC (“Bridge”): A Delaware company and registered Money Services Business (NMLS ID: 2450917)

  • Austin Capital Trust Company (“Austin Capital Trust”): A financial institution that may provide sponsor banking or settlement services in connection with the Services. 

We only offer Services in U.S. states where our partners are licensed. Residents of unsupported states will not be able to use the Services. You can find the list of supported jurisdictions at:

We reserve the right to approve or discontinue your access to the Services at our sole discretion.

3. Scope of this Privacy Policy

This Privacy Policy applies to your use of the Services provided by Kira and outlines:

  • The types of personal data we collect

  • How we use and protect your information

  • Your rights and choices regarding personal data

By using the Services, you agree to the collection, use, and sharing of your information in accordance with this Privacy Policy.

Some users may be subject to broader privacy rights or protections under applicable law. Please refer to the Applicability section for more information.

You may print this policy using the print command in your browser settings.

Data Controller

Mayan Jaguar Operations LLC d/b/a Kira
7901 4th St N #19273
St. Petersburg, FL 33702
Email: info@kira.ai


Types of Data Collected

Data Provided by a User

Users may provide certain Data as part of their access to and use of the Services, including during Account registration, payment processing, and direct communications.

Account Registration:
To create an Account and use the Services, Users must provide Personal Data required for KYC Verification (as defined in our Terms of Use) and to comply with laws related to anti-money laundering (AML), anti-corruption, and counter-terrorism. This may include, but is not limited to:

  • Full name

  • Date of birth

  • Age

  • Nationality

  • Residential address

  • Email address

  • Phone number

  • Country of residence

  • Gender

  • Social Security Number or equivalent

  • Government-issued ID details

KYC Verification is conducted by AiPrise. Kira is not responsible for third-party usage of User data. Please refer to AiPrise’s Privacy Policy for more information.

Financial Data:
To enable transactions via the Services, we may collect financial data such as:

  • Bank account numbers

  • Digital wallet addresses

  • Credit/debit card details

  • Bank statements

We may also collect transaction metadata, including:

  • Source of funds

  • Sender and recipient identifiers

  • Transaction amounts

Direct Communications:
If you contact us (e.g., for support or service inquiries), we may collect information such as:

  • Name

  • Email address

  • Phone number

  • Mailing address

  • Content of communications

Other Voluntary Data:
We may also collect additional Data you choose to provide, including:

  • Feedback or survey responses

  • Newsletter sign-ups

  • Employment inquiries

  • Information submitted through promotions

If you access the Services via a mobile device, we may collect technical and usage-related data, including:

  • Operating system and hardware type

  • Device identifiers

  • Language settings

  • Approximate device location

  • App usage patterns

Data Collected Automatically

Usage Data & Trackers:
We may automatically collect data related to your use of the Services through cookies and similar technologies. This includes log data, device type, browser type, pages visited, and timestamps. If location services are enabled, we may collect geolocation data to confirm jurisdiction eligibility.

Data Collected from Other Sources

We may also obtain Personal Data from external sources, such as:

  • ID verification vendors

  • Credit bureaus

  • Blockchain data

  • Third-party service providers

Unless stated otherwise, all requested data is mandatory for us to provide Services. Failure to provide such data may limit or prevent access. Optional data will be clearly indicated.

Users are responsible for any third-party Personal Data they share with us and must confirm they have appropriate consent to do so.


Mode and Place of Processing the Data

Methods of Processing

We use commercially reasonable safeguards to protect your Personal Data. However, no transmission over the internet or storage system can be guaranteed 100% secure. You provide your data at your own risk.

If you suspect unauthorized access or a security breach, please contact us immediately at help@kira.ai. We will notify Users of any breach if required under applicable law.

Data processing is conducted using secure IT systems and tools, following internal policies and procedures aligned with the purposes outlined in this Policy. In addition to Kira staff, certain third parties (e.g., hosting providers, IT service providers, legal and compliance consultants) may access Data where necessary and are bound by appropriate confidentiality and data protection obligations.

An up-to-date list of authorized third-party processors can be requested by contacting us.

Legal Basis of Processing

We process Personal Data under one or more of the following legal bases:

  • Consent: You have explicitly given us permission to do so.

  • Contractual Necessity: The processing is required to perform our agreement with you.

  • Legal Obligation: We are required to process the data to comply with the law.

  • Legitimate Interest: We have a legitimate business interest that does not override your rights.

  • Public Interest or Official Authority: Where applicable, for public or regulatory tasks.

We are happy to clarify the legal basis that applies to your specific case. Please contact us if you need more information about how we process your data.


Place of Processing


Kira processes Personal Data at its operational offices and in any other locations where the parties involved in the processing are located. This may include data transfers across national borders, including to jurisdictions outside the User’s country of residence.

If Personal Data is transferred to a country outside the European Union or to an international organization governed by public international law (such as the United Nations), and broader protection standards are applicable, Users have the right to be informed of:

  • The legal basis for such transfers

  • The safeguards implemented to protect their data

These safeguards may include contractual clauses, adequacy decisions, or other legally recognized mechanisms. For further information about international transfers and the related protections, please contact us at info@kira.ai.


Retention of Personal Data


We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

Specifically:

  • Data collected to fulfill a contract between Kira and the User will be retained until the contract has been fully performed.

  • Data collected under Kira’s legitimate interests will be retained for as long as those interests remain valid and lawful.

  • If you have given consent for specific processing, we will retain the Data until you withdraw that consent, unless a longer period is required by law.

  • In some cases, we may be required to retain certain data for extended periods in order to comply with legal obligations, resolve disputes, or enforce our agreements.

Once the applicable retention period has expired, we will delete or anonymize the data. After deletion, your right to access, correct, delete, or port the data can no longer be exercised.


Purposes of Processing


We process Personal Data to:

  • Provide the Services and maintain your Account

  • Fulfill our legal and regulatory obligations

  • Respond to enforcement or regulatory requests

  • Prevent, detect, and respond to malicious or fraudulent activity

  • Improve and customize the Services

  • Contact you regarding your Account or the Services

  • Enable payments and transaction processing

  • Manage our user database

  • Display external content (e.g., maps, videos)

  • Conduct marketing and remarketing campaigns

  • Support platform functionality and hosting infrastructure

For more details about how specific Personal Data is used for each purpose, please refer to the next section.


Detailed Information on the Processing of Personal Data


We may process your Personal Data using the following categories of services:

  • Contacting the User: Including responses to inquiries, support requests, and service updates.

  • Displaying Content from External Platforms: To embed or display maps, videos, or other services hosted externally.

  • Handling Payments: To support transactions through financial institutions, payment networks, and blockchain networks.

  • Platform Services and Hosting: To provide the technical infrastructure for operating the Services.

  • Remarketing and Behavioral Targeting: To send targeted marketing communications.

  • User Database Management: To maintain and manage user profiles and account details.

You can opt out of interest-based advertising by using the opt-out tools provided by participating ad networks.


Sharing of Personal Data


We may share your Personal Data under the following circumstances:

With other Users: To complete transactions and verify identity, such as when sending or receiving funds.

With Affiliates: To fulfill, operate, support, or enhance the Services and improve our operations.

With Service Providers: Including financial institutions, payment processors, technology providers, and third-party vendors necessary to deliver, support, secure, and improve our Services.

With Sponsor Banks and Partner Institutions: We may share Customer Data, personal information, and transaction-related data with Sponsor Banks and other Partner Institutions as reasonably necessary to facilitate onboarding, payment processing, compliance screening, fraud prevention, settlement, reconciliation, operational support, recordkeeping, and regulatory reporting related to the Services.

With Marketing and Technology Partners: To manage campaigns, improve outreach, and provide updates about our Services.

With Law Enforcement, Regulators, and Other Authorities: If required by law or legal process, or if we believe such disclosure is necessary to protect our rights, prevent fraud, or comply with applicable law.

With Data Analytics or Research Partners: In de-identified or aggregated form that does not reasonably identify you.

We do not share text messaging originator opt-in data or consent with any third parties. Kira does not sell your Personal Data to third parties.

Other Disclosures

In the event Kira is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or a transition of service to another provider, personal data may be sold or transferred as part of such transaction, as permitted by law and/or contract.

Parts of the Services may be hosted on or interact with the blockchain. Data relating to user transactions will be provided to the applicable blockchain network and may be accessible by third parties due to the nature of blockchain technology.

Messaging and Promotional Communications

By using the Services, you agree to receive text messages, including recurring automated promotional and personalized marketing messages (e.g., SMS and MMS), to the phone number you provided during account creation. Consent to receive such messages is not a condition of any purchase. Standard message and data rates may apply.

We may use the information you provide to send marketing and service-related communications via email or text. You may opt out of marketing messages at any time, but we may still send you non-marketing communications, such as transaction receipts or service notices.

Third-Party Service Providers

We may share your personal data with third-party service providers to complete transactions or process payments. If you are directed to a third-party’s site or app to complete a transaction, your interaction will be governed by that provider’s privacy policy. Kira is not responsible for any personal data you share with such third parties.

Children’s Data

The Services are not directed to children under the age of 13 (or other age as required by applicable law), and we do not knowingly collect personal data from children. If you believe a child under 13 has provided data, please contact us at help@kira.ai to request deletion.

Your Rights

Depending on your location and applicable law, you may have the following rights:

  • To withdraw your consent at any time.

  • To object to processing of your data on grounds related to your particular situation.

  • To access and review personal data held about you.

  • To correct inaccurate or incomplete data.

  • To restrict processing of your data in certain circumstances.

  • To request erasure of your personal data.

  • To request data portability, where technically feasible.

  • To lodge a complaint with a data protection authority.

To exercise these rights, contact us at help@kira.ai. Requests will be addressed within one month.

Data Subject Rights Under the GDPR

If you reside in the European Economic Area, Switzerland, or the UK, you have specific rights under the General Data Protection Regulation (GDPR), including:

  • The right to access, update, or delete your data.

  • The right to data portability.

  • The right to object or restrict processing.

  • The right to withdraw consent.

To exercise these rights, contact help@kira.ai. We may need additional information to verify your identity.

Transfer of Information

If you are located outside the United States, please note your data may be transferred to, and processed in, the United States. By using our services, you consent to this transfer. We implement appropriate safeguards to ensure data is treated securely.

State Privacy Rights

If you are a resident of California or another U.S. state with applicable data protection laws, you may have additional rights, including:

  • The right to know what personal data we collect, use, and disclose.

  • The right to delete your data.

  • The right to opt out of data sales.

  • The right to correct inaccurate data.

  • The right to limit the use of sensitive personal information.

To exercise these rights, contact help@kira.ai. We may request identity verification before responding.

California’s “Shine the Light” Law

California residents may request a list of personal data disclosed to third parties for direct marketing purposes in the prior calendar year. To request this list, email help@kira.ai.

U.S. Consumer Privacy Notice

This notice applies to U.S. residents using the Services for personal, family, or household purposes.

Why?


Federal law gives consumers the right to limit some personal information sharing and requires us to explain our practices.

What We Collect:

  • Name, contact details, government ID

  • Bank account and transaction information

  • Wallet addresses and blockchain activity

How We Share:
We may share information:

  • For our business purposes (e.g., processing transactions)

  • With affiliates (for business purposes)

  • For marketing (unless you opt out)

We do not share:

  • For joint marketing with others

  • With non-affiliates for their marketing

  • With affiliates for their own marketing

How We Protect Your Data
We use safeguards to protect your data, including secure files, systems, and access controls.

Why You Can't Limit All Sharing
Federal law only allows limiting of certain sharing categories. State laws may grant additional rights.

We help any business launch embedded fintech products

Info@kirafin.ai

Get our newsletter

© Kira Financial AI 2025
Kira Financial AI is registered with the Financial Crimes Enforcement Network (FinCEN), a bureau within the United States Department of the Treasury.
Kira Financial AI is not a bank. Payment services may be provided by licensed financial institutions. Fees vary based on payment method and destination. Transfer speed may vary depending on recipient bank processing times and payment network conditions. Service availability and transaction limits may vary by region and partner institution.

We help any business launch embedded fintech products

Info@kirafin.ai

Get our newsletter

© Kira Financial AI 2025
Kira Financial AI is registered with the Financial Crimes Enforcement Network (FinCEN), a bureau within the United States Department of the Treasury.
Kira Financial AI is not a bank. Payment services may be provided by licensed financial institutions. Fees vary based on payment method and destination. Transfer speed may vary depending on recipient bank processing times and payment network conditions. Service availability and transaction limits may vary by region and partner institution.

We help any business launch embedded fintech products

Info@kirafin.ai

Get our newsletter

© Kira Financial AI 2025
Kira Financial AI is registered with the Financial Crimes Enforcement Network (FinCEN), a bureau within the United States Department of the Treasury.
Kira Financial AI is not a bank. Payment services may be provided by licensed financial institutions. Fees vary based on payment method and destination. Transfer speed may vary depending on recipient bank processing times and payment network conditions. Service availability and transaction limits may vary by region and partner institution.