This Privacy Policy explains how WeCanna ("we", "us", "our") handles information when you use our website and app (the "Service"). By using the Service, you agree to this policy. If you don't agree, please don't use the Service.
1. Information we collect
Information you give us
- Account details — the username and email address you sign up with, and a securely hashed version of your password (we never store your password in plain text).
- Verification information — every account completes at least Basic verification: your name, date of birth, and country. Applying for higher levels asks for more, as shown on the Verification page — for "Verified", details about your ID document (type, the last four characters of its number, and expiry). We never ask for or keep copies or photographs of your ID.
We keep these records after your application is decided. We used to clear them, and we stopped: this Service moves money and holds value on your behalf, and a verification whose evidence has been deleted cannot answer a disputed transaction, a fraud report, or a request from you to prove that a check happened. Keeping them is how we can show who was verified, when, and on what basis.
If you were verified before this change, some of those details were already cleared and cannot be recovered. We may ask you for them again — at a counter, from the document itself — so your account stays inside the rules that apply to it. - Support messages — anything you send us through the Help center or support tickets.
- Payment information — when you buy a pass, booster, or POL top-up by card, payments are processed by our payment provider (PayPal). We receive a confirmation and a transaction reference, but we do not see or store your full card number. Card handling stays with the payment provider.
Information created by using the Service
- Your CxC balance and ledger activity — earnings, sends, purchases, savings locks, Stake Shares orders, and redemptions on our internal ledger. This is the record of the Service working.
- Mining activity — your sessions (type, timing, completion) and the passes and boosters on your account, used to credit rewards correctly and enforce fair play.
- Wallet address — the address the Service creates or you connect for on-chain activity.
- Sign-in and device history — a record of the devices and browsers that have signed into your account, kept so we can alert you when a new one appears. This powers the security notifications, not advertising.
- Marketplace orders — what you ordered from a merchant shop and its status.
- Social activity — content you post, reactions, and blocks/reports, where those features are used.
- Notifications — the in-app notices we've sent you (security alerts, verification decisions, platform news).
- Technical data — IP address, basic device/browser information, and logs that keep the Service running and secure.
2. How we use information
- To run the Service: accounts, mining and rewards, payments, savings, the market, redemptions, and bridging.
- To review verification applications and apply the limits that come with each level.
- To protect you and the platform: new-device sign-in alerts, money-leaving notifications, fraud and abuse prevention, and reserve-coverage safety checks.
- To respond when you contact support.
- To improve the Service using aggregate, non-identifying usage patterns.
We don't sell your personal information.
3. Public and shared information
- Your username is visible to other users in social features, rankings, and anywhere the app shows activity.
- Content you post socially is visible to its audience.
- Your verification level label (like "Verified") may be shown where badges appear; the underlying details never are.
4. On-chain information is public and permanent
⚠ Blockchain transactions can't be deleted
If you bridge CxC on-chain, those transactions live on the public Polygon network: the addresses, amounts, and timing are visible to anyone, forever, and no one — including us — can remove them. Keep this in mind before bridging.
5. Who we share information with
- Payment providers (currently PayPal) — to process card purchases and, where applicable, refunds.
- Merchants you order from — a merchant shop receives your order details and your username as the shopper reference so it can fulfill your order. Merchants don't receive your email, balance, or verification details.
- Google — advertising in the designated ad slots (the miner player and the miner banner) is served by Google AdSense, which may use cookies and device signals under Google's own policies. Radio content that plays through YouTube embeds also involves Google receiving the standard technical data any embedded player receives.
- Infrastructure providers — hosting and related services that store data on our behalf under our instructions.
- The public Polygon network — when you bridge (see Section 4).
- Authorities — if the law genuinely requires it, and only what's required.
6. Security
Passwords are stored hashed, payments stay with the payment provider, verification records are kept but never shown in full — your ID number is never sent to a counter display or shown to another member — and money-out and new-device events notify you as they happen. No system is perfectly secure, so use a strong unique password and keep your login to yourself — and if you see a sign-in alert you don't recognize, change your password immediately and contact us.
7. Your choices and rights
- Access and correction — you can see and update your account details in the app, and ask us through Help about information we hold.
- Notifications — some notification types can be switched on or off in settings; security-critical notices may stay on.
- Deletion — you can ask us to close your account and delete personal information. Some records survive deletion where the law or the system's integrity requires it: ledger entries (they're how everyone's balances stay true), on-chain transactions (Section 4), and records we must keep for legal or accounting reasons.
8. Children
The Service is for adults 18 and over. We don't knowingly collect information from anyone under 18; if we learn we have, we'll delete it and close the account.
9. Changes to this policy
We may update this policy as the Service evolves. When we make material changes, we'll update the effective date at the top, and where appropriate we'll let you know in the app. Continuing to use the Service after changes means you accept the updated policy.
10. Contact us
Questions about privacy? Reach us through the in-app Help center.