Operator: Global Piggy Inc. Applies to: NodajiFi Ecosystem — globalpiggy.org Effective date: October 14, 2026 · Last updated: October 6, 2026
Introduction
Global Piggy Inc. ("we," "us," or the "Company") respects the privacy of users worldwide. We honor the standards of the GDPR (EU General Data Protection Regulation) and CCPA (California Consumer Privacy Act), as well as the data-protection laws applicable in the user's country of residence. Canada's PIPEDA is the baseline framework for this policy.
Core principle — you own your data. We are a custodian of your data, not its owner.
- We do not record personal data on any blockchain. On-chain records contain only hashes, signatures, issuer IDs, wallet addresses and amounts — never your name, email or phone number.
- The learning-reward points ("GEM") have no cash value, so we do not collect financial or payment-related sensitive data.
- We do not collect sensitive identifiers such as your real name or government-issued ID number.
GlobalPiggy is a separate app (wallet.globalpiggy.org) that uses the same unified NodajiFi account; globalpiggy.org itself provides introductory and legal documents without separate sign-up or login. GEM and NDJI are never converted to cash, so we do not collect bank account or card numbers. Your wallet’s recovery phrase (private key) stays on your device and is never sent to us. We do keep your wallet’s public address and the records of NDJI you mint, redeem, gift or donate (see §1.3).
1. Information We Collect
We collect only the minimum information needed to provide the service.
1.1 Common data
| Category | Items | Purpose |
|---|---|---|
| Account / authentication | Email address, phone number, passwordless login credentials (magic link / OTP) | Identification, authentication, account recovery, security |
| Profile (optional) | Nickname, avatar (no real name required) | Personalization, display |
| Age verification | "Aged 16 or older" result derived from date of birth at sign-up | Eligibility, child protection |
| Activity data | Service-usage records, GEM earn/spend history (no cash-convertible value) | Service delivery, reward calculation |
| Device / access | Device identifier, OS / app version, IP address, access logs, push token | Operation, security, notifications |
| Abuse prevention | Behavioral signals for bot / abuse / age-doubt detection (server-side only) | Reward integrity, child protection |
Age-data minimization (important): at sign-up we take a date of birth, determine only whether the user is 16 or older, store only that result (e.g., "16+ = true") and discard the raw date of birth. The email and phone number used for login are for contact and authentication, not age proof.
1.2 App-specific data
Items that differ by app (location, camera / AR, payments, etc.) are listed in the "Service-specific Terms."
1.3 GlobalPiggy app — wallet and rewards store
| Category | Items | Purpose |
|---|---|---|
| Wallet | Public wallet address (Algorand); records of NDJI minted, redeemed, gifted or donated, including transaction IDs | Operating the wallet, fulfilling redemptions, preventing abuse |
| Redemption delivery | Recipient name, delivery address, phone number | Delivering goods you redeem (shared with the delivery carrier for that purpose only) |
| Gifts | The recipient’s wallet address | Delivering a gift you send in the app |
Public blockchain records. The wallet addresses, amounts and times of NDJI transactions are written to the Algorand public blockchain. They never include your name, email or phone number, but they are public and cannot be deleted by us or anyone else. When you delete your account, we delete the link between those records and your account.
2. How We Use Information
- Account management: identification, authentication, sign-up confirmation, account recovery, abuse prevention
- Service delivery: each app's core features, GEM earn/spend
- Service improvement: quality improvement via usage analysis (statistics are pseudonymized / anonymized first)
- Notices: updates and feature announcements (capped at 1–2 per day; users control frequency, timing, and type)
- Legal compliance and dispute handling
3. Retention
We delete personal data without delay once the purpose of collection is fulfilled. Where applicable law requires retention, we keep the data for the required period (e.g., transaction / payment records, dispute records, access logs). Redemption order records (items, quantities, dates and destination) are kept for six years after the end of the tax year to which they relate, as Canadian tax law requires, and are separated from your account when you delete it.
When a user requests account deletion, deletion is actually possible by design. Because we do not store personal data on-chain, the GDPR right to erasure works fully for the personal data we hold; public blockchain records (§1.3) are unlinked from your account rather than erased. However, unused GEM is forfeited upon withdrawal; since GEM is not redeemable for cash, no separate settlement occurs.
4. Sharing with Third Parties
We do not share personal data with third parties beyond what this policy states, except:
- with the user's prior explicit consent, or
- when a competent authority requests it through lawful process under applicable law.
Data sharing between ecosystem brands does not operate without the user's explicit opt-in.
5. Processing Entrusted to Sub-processors
We use the following service providers to run the service. Each receives only the data its task needs and processes it on our instructions.
| Sub-processor | Entrusted work | Data involved |
|---|---|---|
| Google LLC — Firebase / Google Cloud | Authentication (including one-time codes sent by SMS for phone sign-in), databases, file storage, server functions, push notifications, hosting, app analytics | Account, profile, activity and device data |
| Google LLC — Google Analytics 4 | Visit statistics for globalpiggy.org (see §12) | Pseudonymous identifiers, pages visited, approximate location derived from the IP address |
| Google LLC — Gemini; Anthropic PBC — Claude | AI tutor chat in the GlobalPiggy app and the website help chat (§12). Depending on the feature, one or the other model processes a request. | The text, photos and recent conversation you submit to that feature |
| Resend, Inc. | Sending emails: sign-in links and replies to support requests | Email address, message content |
| Telegram | Alerting our staff when a help chat is passed to a person (§12) | A short excerpt of your last message, with emails, phone numbers, addresses and long numbers masked |
| Algorand network (public blockchain) | Recording GlobalPiggy NDJI transactions and certificate hashes | Wallet addresses, amounts and hashes — never names, emails or phone numbers |
| Delivery carriers | Delivering goods redeemed in the GlobalPiggy app | Recipient name, address, phone number |
5.1 Where your data is stored (cross-border transfers)
Global Piggy Inc. operates from Canada. Your data is stored and processed in the following locations, which may be outside your country:
| Data | Location |
|---|---|
| Accounts, GEM ledger, app data and uploaded files (default for all apps) | Google Cloud europe-west3 — Frankfurt, Germany |
| Website help chat conversations (see §12) | Google Cloud northamerica-northeast2 — Toronto, Canada |
| Data handled by the other sub-processors above (sign-in messages, analytics, AI, email) | The providers’ own facilities, which may include the United States and other countries |
Data-protection law in those countries may differ from yours, and their authorities may have lawful access to data held there. We send each provider only the data its task needs.
6. Protection of Children (Ages 16+ only)
To protect children, we provide the service only to users aged 16 or older. Sixteen exceeds the major global digital-consent ages (US COPPA 13, EU GDPR 13–16 by member state).
How we protect — age-verification process
- Direct date-of-birth entry (neutral age gate): we do not ask a simple yes/no "are you 16+?"; we take a date of birth so the gate cannot be easily bypassed by changing the answer on the same device.
- Immediate block: if the result is under 16, sign-up does not proceed.
- Store only the result: we keep the 16+ flag and discard the raw date of birth.
- Ongoing monitoring: if post-signup signals suggest a user is under 16, we delete the account and collected data without delay.
We do not knowingly collect personal data from children under 16, and we delete such data as soon as we become aware of it. We provide age-appropriate content, ads, and UI to all users, and v1 is designed so that "there is no money flow at all," removing financial risk.
GlobalPiggy is available only to users aged 18 or older. When you first open it we take a date of birth, keep only the "18+" result, and discard the raw date. If you are under 18, GlobalPiggy stays closed to you and you are signed out of it; your NodajiFi account and its data in other apps are not affected.
7. Your Rights
Regardless of location, users may exercise the following rights (including under GDPR/CCPA):
- Access: request a copy of activity records and account data
- Rectification: correct email, nickname, etc.
- Deletion: request permanent account deletion (unused GEM is forfeited)
- Portability: download your data
- Restriction of processing and withdrawal of consent
Exercise rights via in-app "Global Piggy Inc. > Privacy" or the email together@globalpiggy.org; we respond without undue delay within the period set by applicable law.
8. Security Measures
- Technical: TLS encryption in transit, encrypted storage of sensitive data, access controls, abuse-prevention systems (server-authoritative checks)
- Administrative: minimized data handlers, periodic review, external compliance review
- Structural: no on-chain personal data by design, separated accounting of company funds and user funds
We do not sell users' personal data to third parties for marketing.
9. External Links and Third-party Services
The service may contain links to third-party sites/apps. We are not responsible for their privacy practices; each is governed by its own policy.
10. Contact and Data Protection Officer
| Item | Detail |
|---|---|
| Operator | Global Piggy Inc. |
| Data Protection Officer | Myongsu Choe (CEO) |
| Primary channel | In-app "Global Piggy Inc. > Contact us" (login-based, no impersonation risk) |
| General inquiries | together@globalpiggy.org |
| Privacy-rights requests | together@globalpiggy.org |
Preventing secondary harm We never ask users to buy other tokens, make external payments, or pay "recovery fees." Do not respond to outside contacts impersonating us or claiming to be our "agent"; use only the official channels above (in-app and the official emails). Unofficial messengers or personal contacts are not official channels.
You also have the right to lodge a complaint with the data-protection authority in your country.
11. Changes to This Policy
If this policy changes, we give notice in-app at least 7 days before the effective date (at least 30 days for material changes adverse to users). All notices are made only through our official in-app channels.
12. Website and AI help chat
globalpiggy.org uses Google Analytics 4 in Consent Mode for visit statistics. In the EU/EEA, the UK and Switzerland analytics storage is denied by default and, because this site currently has no cookie banner, it stays off there; elsewhere analytics cookies are set by default. Advertising storage is denied everywhere. You can block or delete cookies in your browser settings. If you open the help chat, an anonymous session identifier is kept in your browser’s local storage.
AI help chat (NodajiChat)
The “Ask us” chat on this website is answered first by an AI assistant; you can ask to talk to a person at any time. Using the chat is optional.
| Item | Detail |
|---|---|
| What we collect | The messages you type; an anonymous session ID created when you open the chat (no name, email or sign-up needed); the site and language; timestamps; and your email address only if you choose to leave it so we can reply. To limit abuse we keep a one-way hash of your IP address for 2 days. |
| AI processing | Your message and the recent conversation are sent to Anthropic (Claude) or Google (Gemini) to generate the reply. Please do not enter sensitive information such as card numbers or health details. |
| Passing to a person | Our support mailbox receives an email and our staff Telegram group receives a short alert, both showing your last message with emails, phone numbers, addresses and long numbers masked. If you left an email address, our reply may be emailed to you. |
| Where it is stored | Toronto, Canada (Google Cloud northamerica-northeast2). |
| Retention | Conversations and messages are deleted automatically 365 days after they are created. Questions the AI could not answer are kept for 180 days, with personal details masked and without your session ID, to improve answers. |
| Deleting | Use “Delete chat” in the chat window to erase the conversation immediately, or write to us at together@globalpiggy.org. |
v3.0 — October 14, 2026: the GlobalPiggy app, its wallet public address, NDJI records, redemption delivery data and gifts are described (§1.3); redemption record retention (§3); sub-processors updated (§5); operator stated as Global Piggy Inc. Previous: v2.0 (October 5, 2026), v1 (September 14, 2026). Also in v3.0: data storage locations (§5.1) and the website and AI help chat (§12).