最后更新日期：2026 年 9 月 27 日
1. 概述
本隐私政策说明 MindOrigin Pte. Ltd.（"Mojo"、"我们"），一家在新加坡注册成立的公司，在您使用 Mojo 移动应用、网站及相关服务（"服务"）时如何收集、使用、披露和保护个人信息。本政策应与我们的服务条款一同阅读。
我们的角色。对于下述个人信息，Mojo 作为"数据控制者"（GDPR）、"企业"（CCPA/CPRA）或"组织"（新加坡 PDPA）处理您的个人信息。
儿童。本服务并非面向 18 岁以下个人，我们不会有意收集其个人信息。若您发现有儿童向我们提供了个人信息，请联系 support@mindorigin.co，我们将予以删除。
2. 我们收集的信息
您提供的信息
- 电子邮箱、用户名、身份验证凭证、个人偏好
- 您选择关联的社交账户信息（如选择连接的平台帐号）
- 订阅计费数据（由 Apple、Google Play 或我们的支付处理商处理 — Mojo 不存储完整的支付卡号）
- 服务条款定义的用户内容（消息、分享的截图、评论、交易想法、个人资料信息）
- 支持沟通内容
自动收集的信息
- 您创建或连接的公开钱包地址、交易历史、代币持仓、盈亏及其他链上活动（因其性质为公开数据）
- 多方计算（"MPC"）钱包的加密服务器端分片（"服务器分片"），用于提供非托管钱包服务 — 我们不以明文形式存储您的完整私钥，亦不在任何单一位置存储，且仅凭服务器分片在数学上不足以访问您的钱包
- 设备和技术数据（IP 地址、设备型号、操作系统、应用版本、语言、时区、崩溃日志）
- 使用数据（功能访问、点击、会话时长，以及用于个性化信息性输出的行为指标）
- 网站上用于身份验证、安全和分析的 Cookie 及本地存储
来自第三方的信息
- 钱包筛查信号（制裁、欺诈、非法活动风险）
- 聚合产品分析
- 公开区块链数据
- 若您的 Mojo 账户关联了 X 账号（例如您使用 X 登录，或在账户设置中绑定 X）：您的 X 用户名、显示名、公开简介，以及您本人近 30 天发布的公开推文（原创、回复与引用，不含转推），由我们从 X 获取
- 若您绑定了币安等交易所账户：您在该交易所的历史成交记录，通过您提供的 API 密钥获取
3. 我们如何使用信息
我们出于以下目的使用个人信息，相应的 GDPR 法律依据如下（如适用）：
| 目的 | 法律依据 |
|---|---|
| 提供服务 — 创建账户、广播预授权交易、展示分析、处理订阅 | 履行合同 |
| 个性化信息性输出 — 基于您的历史输入调整展示内容 | 履行合同；合法利益 |
| 个性化画像 — 若您的账户关联了 X 或交易所账户，生成一份关于您的关注方向与交易习惯的简短画像，用于调整 AI 的建议与追问（见第 3.2 节） | 合法利益（您可随时反对，见第 3.2 节） |
| 安全与欺诈防范 — 钱包筛查、检测账户盗用、限流防止滥用 | 合法利益；法律义务 |
| 合规 — 制裁筛查、响应合法请求、按要求报税 | 法律义务 |
| 产品改进 — 使用聚合或去标识化数据修复缺陷和改进质量 | 合法利益 |
| 沟通 — 服务公告、安全提醒、客户支持 | 履行合同；合法利益 |
| 营销（在允许情况下）— 通过电子邮件发送产品更新、功能发布与活动 | 同意：您在创建账户时接受服务条款，或在我们官网订阅。您可随时通过任一营销邮件中的退订链接退订。 |
3.1 AI 处理
当您使用 Mojo 的 AI 辅助功能时，您的输入及相关上下文将通过第三方大型语言模型提供商的 API 端点发送。我们也会在后台通过这些提供商生成第 3.2 节所述的个性化画像。主流 API 提供商的默认条款不将客户的 API 输入或输出用于训练其通用模型，且我们不会将您的数据提交给消费级 AI 聊天产品。请勿在 AI 聊天中输入密码、种子短语、私钥或其他敏感材料。我们可能使用聚合或去标识化的交互数据，用于改进 Mojo 自有的提示词和评估。我们不会使用您的个人交互数据训练与其他用户共享的任何模型。
3.2 自动化决策与画像
Mojo 的预签名自动交易功能（详见服务条款）严格按照您事先配置并批准的参数执行。这些执行是确定性的，不构成 GDPR 第 22 条意义上"产生法律或类似重大影响的自动化决策"。基于您的行为对信息性输出的任何个性化亦属于信息性调整，不构成个人推荐或受监管的投资建议。
个性化画像。若您的 Mojo 账户关联了 X 账号或币安等交易所账户，我们会自动生成一份关于您的简短个性化画像并定期更新；本功能推出前已关联的账户同样适用。对于 X，我们用自有程序分析您近 30 天的公开推文，得出统计信息，例如您反复提及的代币、话题标签和话题，以及您发帖的时段与频率。生成画像时，我们不保存推文正文，也不会将其发送给 AI 提供商；为此，对每条推文我们只保留推文 ID、发布时间、类型及其中提及的代币、话题标签与话题等有限信息。对于交易所账户，我们用自有程序汇总您的历史成交，例如您交易的标的、交易频率、常见单笔规模和交易时段。随后，我们将这些统计信息，连同您的 X 账号标识（如用户名、显示名、账号 ID）与简介，Mojo 从您的对话中保存的其他信息与偏好，以及您做过的更正，发送给第三方大型语言模型提供商生成画像。画像随您的账户保存，并在您与 Mojo AI 对话时提供给 AI，用于调整建议与追问；它不作为资金转移、额度、下单或交易校验系统的输入。
您的反对权。您可随时发送邮件至 support@mindorigin.co，反对个性化画像。我们将为您关闭画像：停止为画像读取您的 X 信息和汇总您的成交记录，停止向 Mojo AI 提供画像，并删除画像以及为其收集的 X 简介与推文信息。我们只保留维持关闭的少量记录，例如关联账户信息。此前对话的记录和我们的服务日志不会因此改动，其中可能仍保留当时的画像或用于生成画像的信息，这些内容也可能继续在原对话中作为上下文使用。关闭画像不影响 Mojo 从您的对话中保存的其他信息与偏好；如需反对其使用或要求删除，请按第 6 节所述方式联系我们。
4. 共享与国际传输
我们不会将您的个人信息出售给广告商或数据经纪商。
我们仅在下列情形共享信息，每一接收方均受合同保密及数据保护义务约束：
- 基础设施提供商：包括 MPC 钱包基础设施合作伙伴、云托管提供商、通过 API 访问的大型语言模型提供商（包括用于生成第 3.2 节所述的个性化画像）、分析工具、支付处理商、钱包筛查提供商及电子邮件服务提供商（用于服务类与营销邮件）
- 第三方交易场所：您选择互动的第三方交易场所，其数据使用受其自身隐私政策约束
- 法律及安全披露：为响应合法法律程序、执行本条款或保护 Mojo、我们用户或他人的权利、财产或安全
- 公司交易：合并、收购、重组、融资
- 经您同意
国际传输。Mojo 在全球运营。您的信息可能被传输至您所在国家以外的国家处理，包括新加坡、美国和欧盟。当传输受 GDPR 或英国 GDPR 约束时，我们依赖的适当保障措施可能包括欧盟委员会的标准合同条款、英国国际数据传输协议或附录、充分性决定或其他同等机制。您可通过联系 support@mindorigin.co 申请获取适用保障措施的副本。
5. 数据保留
我们仅在为提供服务、履行法律义务、解决争议和执行协议所必需的期限内保留个人信息。具体保留期限：
| 类别 | 保留期限 |
|---|---|
| 账户信息（邮箱、用户名、资料） | 账户存续期间 + 删除请求后 12 个月 |
| 交易及钱包记录 | 5 年（反洗钱记录保存） |
| 聊天及 AI 交互日志 | 24 个月滚动；较早数据删除或去标识化 |
| 行为个性化（个性化画像、用于生成画像的信息，以及从您的对话中保存的信息与偏好） | 无固定保留期限。关闭画像时（见第 3.2 节），我们会删除画像以及为其收集的 X 简介与推文信息；您也可以要求我们删除从您的对话中保存的信息与偏好（见第 6 节）。注销账户的删除范围不包括这些记录，也不包括随对话保存的副本，因此账户删除后，其中部分或全部可能仍被保留。 |
| 加密 MPC 服务器分片 | 钱包存续期间；直至您撤销（受下方不可逆警示约束） |
| 支持沟通记录 | 解决后 24 个月 |
| 安全日志 | 12 个月 |
| 计费记录 | 7 年（税务与会计） |
保留期限届满后，我们将删除或不可逆地去标识化该数据。
6. 您的权利
根据您所在地区，您可能享有对个人信息的以下全部或部分权利：
- 访问：申请副本
- 更正：改正不准确数据
- 删除：被遗忘权，受第 5 节不可逆警示约束
- 限制：在某些情况下暂停处理
- 可携带：以结构化、机器可读格式接收数据
- 反对：反对基于合法利益的处理，包括行为个性化
- 撤回同意：对基于同意的处理，如营销
- 投诉：向当地数据保护机构投诉
加州居民（CCPA/CPRA）另享有知情、删除、更正及选择退出"出售"或"共享"个人信息（我们不出售或共享个人信息用于跨情境行为广告）的权利，以及行使权利时不受歧视的权利。
欧盟/英国居民（GDPR/UK GDPR）享有上述权利，可联系当地监管机构。
新加坡居民（PDPA）享有访问和更正个人数据及撤回同意的权利。
如何行使权利。如需删除账户或行使上述任何权利，请发送邮件至 support@mindorigin.co。在 App 支持的情况下，您亦可通过设置 → 账户 → 删除账户删除账户。我们将在适用法律规定的时限内响应（GDPR 一般为一个月内，复杂请求可延长两个月并通知您）。我们可能需先核实您的身份再处理请求。
7. 安全
我们采取技术和组织措施保护个人信息，包括：
- 传输中（TLS）和静态加密
- MPC 服务器分片的加密，其密钥管理与应用服务器隔离
- 基于角色的访问控制和审计日志
- 定期安全审查
- 事件响应程序
8. 变更与联系
我们可能不时更新本隐私政策。重大变更将通过 App 或电子邮件至少提前七 (7) 天通知您。"最后更新日期"显示最近的修订日期。生效日后继续使用即构成您对更新后政策的接受。
联系我们
如对隐私相关问题、请求或投诉，请联系：
若您在欧洲经济区或英国，无法与我们直接解决相关问题，亦可向当地数据保护机构投诉。
Last Updated: September 27, 2026
1. Introduction
This Privacy Policy explains how MindOrigin Pte. Ltd. ("Mojo", "we", "us"), a company incorporated in Singapore, collects, uses, discloses, and protects personal information when you use the Mojo mobile application, website, and related services (the "Services"). It should be read with our Terms of Service.
Our role. For the personal information described below, Mojo acts as a "data controller" (GDPR), "business" (CCPA/CPRA), or "organisation" (Singapore PDPA), as applicable.
Children. The Services are not directed to, and we do not knowingly collect personal information from, individuals under 18. If you become aware that a child has provided personal information to us, contact support@mindorigin.co and we will delete it.
2. Information We Collect
You Provide
- Email, username, authentication credentials, profile preferences
- Linked social account information (e.g., handles from platforms you choose to connect)
- Subscription billing data (processed by Apple, Google Play, or our payment processor — Mojo does not store full payment card numbers)
- User Content as defined in the Terms of Service (messages, shared screenshots, comments, trade ideas, profile information)
- Support communications
Collected Automatically
- Public wallet addresses you create or connect, transaction history, token holdings, PnL, and other on-chain activity (which is public by nature)
- Encrypted server-side shards of the Multi-Party Computation ("MPC") wallet (the "Server Shards"), used to provide the non-custodial wallet service — we do not store your complete private key in plaintext or in any single location, and the Server Shards alone are mathematically insufficient to access your wallet
- Device and technical data (IP address, device model, OS, app version, language, time zone, crash logs)
- Usage data (features accessed, clicks, session duration, and derived behavioral metrics used to personalize informational outputs)
- Cookies and local storage on our website for authentication, security, and analytics
From Third Parties
- Wallet screening signals (sanctions, fraud, illicit-activity risk)
- Aggregated product analytics
- Public blockchain data
- If your Mojo account is linked to an X account (for example, you sign in with X or connect X in your account settings): your X username, display name, and public bio, and your own public posts from the last 30 days (original posts, replies, and quotes; reposts excluded), which we retrieve from X
- If you connect an exchange account such as Binance: your trade history on that exchange, collected through the API key you provide
3. How We Use Information
We use personal information for the following purposes, with the corresponding GDPR legal basis where applicable:
| Purpose | Legal Basis |
|---|---|
| Provide the Services — create your account, broadcast pre-authorized transactions, display analytics, process subscriptions | Performance of contract |
| Personalize informational outputs — adjust displayed content based on your historical inputs | Performance of contract; legitimate interests |
| Personalization profile — if your account is linked to X or an exchange account, generate a short profile of your interests and trading habits to tailor AI suggestions and follow-up questions (see Section 3.2) | Legitimate interests (you may object at any time; see Section 3.2) |
| Security and fraud prevention — wallet screening, detect account takeover, rate-limit abuse | Legitimate interests; legal obligation |
| Compliance — sanctions screening, respond to lawful requests, tax reporting where required | Legal obligation |
| Product improvement — fix bugs and improve quality using aggregated or de-identified data | Legitimate interests |
| Communications — service announcements, security alerts, support | Performance of contract; legitimate interests |
| Marketing (where allowed) — product updates, feature launches, and promotions by email | Consent, given by accepting the Terms of Service when you create an account or by subscribing on our website. You may unsubscribe at any time via the link in any marketing email. |
3.1 AI Processing
When you use Mojo's AI-assisted features, your inputs and relevant context are sent to third-party large language model providers via their API endpoints. We also use these providers in the background to generate the personalization profile described in Section 3.2. Leading API providers' default terms do not use customer API inputs or outputs to train their general models, and we do not submit your data to consumer-grade AI chat products. Please do not include passwords, seed phrases, private keys, or other sensitive material in AI chats. We may use aggregated or de-identified interaction data to improve Mojo's own prompts and evaluations. We do not use your individual interaction data to train any model that is shared with other users.
3.2 Automated Decision-Making and Profiling
Mojo's pre-signed automated transaction features (as described in the Terms of Service) execute strictly according to parameters you have configured and approved in advance. These executions are deterministic and are not "automated decision-making producing legal or similarly significant effects" under Article 22 GDPR. Any personalization of informational outputs based on your behavior is likewise informational in nature and does not constitute a personal recommendation or regulated advice.
Personalization profile. If your Mojo account is linked to an X account or an exchange account such as Binance, we automatically generate a short personalization profile about you and update it regularly. This also applies to accounts linked before this feature was introduced. For X, our own code analyzes your public posts from the last 30 days to derive statistics, such as the tokens, hashtags, and topics you mention repeatedly and when and how often you post. When generating the profile, we do not store the text of your posts or send it to AI providers; for this purpose, we keep only limited details of each post, such as its ID, when it was posted, its type, and the tokens, hashtags, and topics it mentions. For exchange accounts, our code summarizes your trade history, such as the assets you trade, how often you trade, your typical trade sizes, and when you trade. We then send these statistics, together with your X account identifiers (such as your username, display name, and account ID) and bio, other information and preferences Mojo has saved from your conversations, and any corrections you have made, to third-party large language model providers, which write the profile. The profile is stored with your account and provided to Mojo's AI in your conversations to tailor its suggestions and follow-up questions. It is not an input to the systems that move funds, apply limits, place orders, or run trade checks.
Your right to object. You may object to the personalization profile at any time by emailing support@mindorigin.co. We will then turn off your profile: we stop reading your X information and summarizing your trade history for it, stop providing it to Mojo's AI, and delete the profile together with the X bio and post details we collected for it. We keep only a small record, such as your linked account details, so that the profile stays off. Records of your earlier conversations and our service logs are not changed by this; they may still contain the profile, or the information used to create it, from that time, and such content may continue to be used as context in those conversations. Turning off the profile does not affect other information and preferences Mojo has saved from your conversations; to object to their use or to have them deleted, contact us as described in Section 6.
4. Sharing and International Transfers
We do not sell your personal information to advertisers or data brokers.
We share information only as follows, each bound by contractual confidentiality and data protection obligations:
- Infrastructure providers: including MPC wallet infrastructure partner(s), cloud hosting providers, large language model providers accessed via API (including for generating the personalization profile described in Section 3.2), analytics tools, payment processors, wallet screening providers, and email service providers (for service and marketing emails)
- Third-party venues: you choose to interact with, whose use of data is governed by their own privacy policies
- Legal and safety disclosures: in response to valid legal process, to enforce our Terms, or to protect the rights, property, or safety of Mojo, our users, or others
- Corporate transactions: merger, acquisition, reorganization, financing
- With your consent
International transfers. Mojo operates globally. Your information may be transferred to and processed in countries other than your country of residence, including Singapore, the United States, and the European Union. Where transfers are subject to GDPR or UK GDPR, we rely on appropriate safeguards which may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, adequacy decisions, or other equivalent mechanisms. You may request a copy of the applicable safeguard by contacting support@mindorigin.co.
5. Data Retention
We retain personal information only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:
| Category | Retention |
|---|---|
| Account information (email, username, profile) | Life of your account + 12 months after deletion request |
| Transaction and wallet records | 5 years (anti-money-laundering recordkeeping) |
| Chat and AI interaction logs | 24 months rolling; older data deleted or de-identified |
| Behavioral personalization (personalization profile, the information used to create it, and information and preferences saved from your conversations) | No fixed retention period. When the profile is turned off (see Section 3.2), we delete the profile together with the X bio and post details we collected for it. You can also ask us to delete information and preferences saved from your conversations (see Section 6). Account deletion does not include these records or the copies of them saved with your conversations, so some or all of them may be retained after your account is deleted. |
| Encrypted MPC Server Shards | Life of your wallet; retained until you revoke (subject to irreversibility warning below) |
| Support communications | 24 months after resolution |
| Security logs | 12 months |
| Billing records | 7 years (tax and accounting) |
When the retention period ends, we delete or irreversibly de-identify the data.
6. Your Rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access: request a copy
- Rectification: correct inaccurate data
- Deletion: right to be forgotten, subject to the irreversibility warning in Section 5
- Restriction: pause processing in certain cases
- Portability: receive data in a structured, machine-readable format
- Objection: to processing based on legitimate interests, including behavioral personalization
- Withdraw consent: for processing based on consent, such as marketing
- Complaint: lodge a complaint with your local data protection authority
California residents (CCPA/CPRA) additionally have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information (we do not sell or share personal information for cross-context behavioral advertising), and to non-discrimination for exercising these rights.
EU/UK residents (GDPR/UK GDPR) have the rights listed above and may contact their local supervisory authority.
Singapore residents (PDPA) have the right to access and correct personal data and to withdraw consent.
How to exercise your rights. To delete your account or exercise any of the rights above, email support@mindorigin.co. Where supported in the App, account deletion is also available via Settings → Account → Delete Account. We will respond within the time limits required by applicable law (for GDPR, generally within one month, extendable by two further months for complex requests, with notice). We may need to verify your identity before acting on requests.
7. Security
We implement technical and organizational measures designed to protect personal information, including:
- Encryption in transit (TLS) and at rest
- Encryption of MPC Server Shards with key management segregated from application servers
- Role-based access controls and audit logging
- Regular security reviews
- Incident response procedures
8. Changes and Contact
We may update this Privacy Policy from time to time. Material changes will be notified through the App or by email at least seven (7) days before they take effect. The "Last Updated" date shows the most recent revision. Your continued use after the effective date constitutes acceptance.
Contact Us
For privacy questions, requests, or complaints:
If you are in the EEA or the UK and cannot resolve a concern with us directly, you may also lodge a complaint with your local data protection authority.