Data and Privacy

DINORA PRIVACY POLICY

Effective Date: July 24, 2026

Last Updated: July 24, 2026

This Privacy Policy describes how Jahangir Baykhurazov, an individual residing in California and doing business as Dinora, with a mailing address available on request ("Dinora," "Company," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with the website located at www.dinora.ai, Dinora's mobile applications, and all related software, features, and services (collectively, the "Service"). This Privacy Policy is incorporated by reference into, and should be read together with, Dinora's Terms of Service (available at https://www.dinora.ai/legal/terms).

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY CREATING AN ACCOUNT OR OTHERWISE USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.

1. Introduction and Scope

1.1 What Dinora Is. As described in Dinora's Terms of Service, Dinora operates a classified-listing and matchmaking venue that allows Users to post Listings describing a cross-border cash-exchange Corridor, browse Listings posted by other Users, and communicate with one another through in-app messaging. Dinora is a venue only. Dinora never receives, holds, custodies, transmits, converts, or otherwise handles the cash or other value that Users exchange with one another (each, an "Exchange"). This Privacy Policy should be read consistently with that description: because Dinora is not a party to, and has no role in performing, any Exchange, Dinora does not collect Users' financial-account information, bank details, or similar information in connection with Exchanges themselves.

1.2 No Identity Verification or Biometric Collection at Launch. As of the Effective Date of this Privacy Policy, Dinora does not require identity verification to create an Account or use the Service, and Dinora does not collect government-issued identification documents, photographs or videos of your face, fingerprints, or any other biometric identifiers or biometric information. Dinora reserves the right to introduce identity-verification features in the future, as described in Section 2.4 below.

1.3 Scope. This Privacy Policy applies to information Dinora collects through the Service. It does not apply to information collected by third parties, including third-party payment processors, app-store operators, or other services that Users may choose to use in connection with, or independently of, the Service, which are governed by those third parties' own privacy policies, as described in Section 6.

1.4 Who This Policy Covers. This Privacy Policy applies to all visitors, registered Users, and other individuals who access or use the Service ("you").

2. Information We Collect

Dinora collects the categories of information described below. Dinora does not, at this time, collect government-identification documents or biometric information of any kind (see Section 1.2 and Section 2.4).

2.1 Account and Registration Information. When you create an Account, Dinora collects information such as your name or username, email address, and phone number (if you provide one), and a hashed and salted representation of your password (Dinora does not store your password in plain text).

2.2 Profile and Corridor Information. Dinora collects information you choose to include in your profile, and the Corridor information (i.e., the geographic locations, such as country or city pairs) you associate with your Listings, so that other Users can find and evaluate potential matches.

2.3 Listings, Offers, and Messages. Dinora collects the content of Listings and Offers you post, including the indicative amounts, Corridor details, and other non-binding details you choose to include, and the content of in-app chat messages you exchange with other Users through the Service.

2.4 Identity and Verification Information (Not Currently Collected). Dinora does not currently collect identity-verification information, government-issued identification documents, or biometric identifiers or biometric information (such as facial geometry data, fingerprints, or voiceprints) from Users. Dinora reserves the right to introduce identity-verification features in the future. If Dinora does so, and if any such future verification involves the collection of biometric or other sensitive information, Dinora will update this Privacy Policy, provide any additional notices, and obtain any consents required by applicable law (including, where applicable, laws such as the Illinois Biometric Information Privacy Act and analogous state laws) before collecting that information, and will describe the associated collection, use, retention, and destruction practices at that time.

2.5 Device, Usage, and Log Information. Dinora automatically collects certain technical and usage information when you access the Service, including your IP address, device identifiers, device type and operating system, browser type, app version, general usage and interaction data (such as pages or screens viewed, features used, and timestamps), crash and diagnostic data, and referring/exit pages.

2.6 Approximate Location Information. Where applicable, Dinora may collect approximate, city-level location information (for example, derived from your IP address or, if you enable it, your device's coarse location services) to support Corridor matching and to display relevant Listings. Dinora does not, in connection with this feature, collect or require your precise GPS location.

2.7 Cookies, SDKs, and Analytics Information. Dinora and its service providers use cookies, mobile SDKs, and similar technologies to collect information about your use of the Service, as described in Section 5.

2.8 Customer Support Communications. When you contact Dinora for customer support, Dinora collects the information you provide in connection with your inquiry, including your contact information and the content of your communications.

2.9 Billing Information (Only If Fees Apply). If and to the extent Dinora charges Fees for platform access or features (as described in the Terms of Service), Fees are processed through third-party payment processors, such as Apple, Google, Stripe, or similar providers. Dinora does not collect or store your full payment-card number, bank account number, or other full financial-account credentials. Dinora may receive limited billing-related information from its payment processors, such as confirmation of payment, a transaction identifier, the last four digits of a payment card, and billing status, for recordkeeping, customer-support, and fraud-prevention purposes. This billing information relates solely to Fees for use of the Service and is unrelated to, and separate from, the cash Exchanges that Users arrange with one another, which Dinora never receives, holds, or processes.

3. How We Collect Information; Sources

Dinora collects the information described in Section 2 (a) directly from you, when you create an Account, complete your profile, post a Listing or Offer, send a message, contact customer support, or otherwise interact with the Service; (b) automatically, through your use of the Service, including via cookies, SDKs, and similar technologies, as described in Section 5; and (c) from third parties, including payment processors (limited billing information, as described in Section 2.9), analytics providers, and, where applicable, other Users (for example, if another User reports a concern about your conduct).

4. How We Use Information

Dinora uses the information described in Section 2 to:

4.1 create, maintain, and secure your Account;

4.2 operate, provide, and display the Service's core functionality, including enabling Listings, search and matching within Corridors, and in-app messaging between Users;

4.3 provide customer support and respond to your inquiries;

4.4 maintain the safety, security, and integrity of the Service, including detecting, investigating, and preventing fraud, abuse, prohibited conduct, and violations of the Terms of Service;

4.5 send you Account, security, and transactional communications, and, where you have opted in, marketing communications;

4.6 analyze, measure, and improve the Service, including through aggregated or de-identified analytics;

4.7 process Fees, if any, through third-party payment processors, as described in Section 2.9;

4.8 comply with applicable law, legal process, and regulatory requests, and enforce Dinora's Terms of Service and other policies; and

4.9 for any other purpose disclosed to you at the time information is collected, or with your consent.

Dinora does not use information collected through the Service to process, facilitate, or take any action with respect to the cash Exchanges that Users arrange with one another; that activity occurs entirely outside the Service, as described in the Terms of Service.

5. Cookies and Tracking Technologies

5.1 Technologies Used. Dinora and its service providers use cookies, web beacons, mobile SDKs, local storage, and similar technologies ("Cookies") to operate the Service, remember your preferences, keep you signed in, measure usage, and support analytics and, where applicable, advertising.

5.2 Categories of Cookies. Dinora uses (a) strictly necessary Cookies required for the Service to function (e.g., authentication and security); (b) functional Cookies that remember your settings and preferences; and (c) analytics Cookies that help Dinora understand how the Service is used, in each case as further described at https://www.dinora.ai/legal/privacy, if applicable.

5.3 Your Choices. Most browsers and mobile operating systems allow you to control Cookies through their settings, including by blocking or deleting Cookies, and mobile operating systems provide controls to limit ad tracking and reset advertising identifiers. Disabling certain Cookies may limit your ability to use some features of the Service. Where required by applicable law, Dinora will provide a cookie-consent banner or similar mechanism to obtain your consent before placing non-essential Cookies, and a means to withdraw that consent. For information about exercising rights regarding the sale or sharing of information via Cookies for cross-context behavioral advertising, see Section 9.4.

6. How We Share Information

Dinora does not sell your personal information for money. Dinora does not "sell" or "share" personal information, as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"). Dinora shares information only as described below.

6.1 Other Users. Your Listings, Offers, profile information, Corridor information, and in-app messages are, by the nature of the Service, visible to or shared with other Users you interact with, so that Users can find one another and communicate regarding potential Exchanges.

6.2 Service Providers and Subprocessors. Dinora shares information with third-party service providers and subprocessors that perform services on Dinora's behalf, such as cloud hosting, data storage, customer support tooling, communications delivery (email/SMS/push), analytics, and security services. These service providers are contractually restricted from using your information for any purpose other than providing services to Dinora.

6.3 Analytics Providers. Dinora shares device, usage, and log information (described in Section 2.5) with analytics providers to help Dinora understand and improve use of the Service, as described in Section 5.

6.4 Payment Processors (Fees Only). If Fees apply, Dinora shares limited billing information with third-party payment processors (such as Apple, Google, or Stripe) solely to process payment for platform access, as described in Section 2.9. These processors act as independent controllers of the payment information they collect directly from you, and their use of that information is governed by their own privacy policies.

6.5 Legal, Safety, and Law Enforcement. Dinora may disclose information where Dinora believes in good faith that disclosure is necessary to (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce Dinora's Terms of Service or investigate potential violations; (c) detect, prevent, or address fraud, security, or technical issues; (d) protect the rights, property, or safety of Dinora, its Users, or the public, including in connection with reports of suspicious or fraudulent User conduct as described in the Terms of Service; or (e) respond to an emergency involving a risk of death or serious physical harm.

6.6 Business Transfers. Dinora may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or substantially all of its assets, subject to standard confidentiality arrangements, and, where required by applicable law, notice to affected Users.

6.7 With Your Consent. Dinora may share information for other purposes with your consent or at your direction.

7. Data Retention

Dinora retains information for as long as reasonably necessary to provide the Service, fulfill the purposes described in Section 4, comply with Dinora's legal obligations, resolve disputes, enforce Dinora's agreements, and support trust-and-safety and fraud-prevention efforts. Retention periods vary by data type; for example, Account information is generally retained for as long as your Account remains active and for a reasonable period thereafter, and certain records may be retained longer where required by law, tax, accounting, or dispute-resolution needs. When information is no longer needed for these purposes, Dinora will delete, de-identify, or anonymize it in accordance with its internal data-retention practices.

8. Data Security

Dinora implements administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, alteration, or disclosure, including encryption of data in transit, access controls, and routine security review of its systems. No method of transmission or storage is completely secure, however, and Dinora cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials, as described in the Terms of Service. If Dinora becomes aware of a security incident affecting your information, Dinora will notify you and take other steps as required by applicable law.

9. Your Privacy Choices and Rights

9.1 Account Information. You may review and update certain Account and profile information directly through the Service's account-settings features. You may delete your Account as described in the Terms of Service; upon deletion, Dinora will handle your information as described in Section 7 and Section 17.4 of the Terms of Service.

9.2 Marketing Communications. You may opt out of marketing communications at any time by following the unsubscribe instructions included in those communications or by adjusting your notification settings in the Service. You may not opt out of Account, security, legal, or transactional communications necessary for the operation of the Service.

9.3 Cookie Choices. See Section 5.3 above.

9.4 California Privacy Rights (CCPA/CPRA). If you are a California resident, you have the following rights under the CCPA, subject to certain exceptions:

(a) Right to Know. You may request that Dinora disclose the categories and specific pieces of personal information Dinora has collected about you, the categories of sources, the business or commercial purpose for collecting the information, and the categories of third parties with whom Dinora has disclosed the information.

(b) Right to Delete. You may request that Dinora delete personal information Dinora has collected from you, subject to certain exceptions (for example, where retention is necessary to complete a transaction, detect security incidents, or comply with a legal obligation).

(c) Right to Correct. You may request that Dinora correct inaccurate personal information Dinora maintains about you.

(d) Right to Opt Out of Sale or Sharing. As described in Section 6 above, Dinora does not sell or share (as those terms are defined under the CCPA) your personal information, so there is no need to submit an opt-out request for this purpose; if Dinora's practices change, Dinora will update this Privacy Policy and provide a "Do Not Sell or Share My Personal Information" mechanism as required by law.

(e) Right to Limit Use of Sensitive Personal Information. Dinora does not use or disclose sensitive personal information (as defined under the CCPA) for purposes other than those permitted without opt-out rights under the CCPA's implementing regulations, and, in any event, does not collect government-identification documents or biometric information at this time, as described in Section 2.4.

(f) Right to Non-Discrimination. Dinora will not discriminate against you for exercising any of your CCPA rights, including by denying goods or services, charging different prices, or providing a different level or quality of service, except as permitted by the CCPA (for example, offering a different price or service level that is reasonably related to the value provided by your data).

Categories of Personal Information Collected and Disclosed in the Preceding 12 Months. In the preceding twelve (12) months, Dinora has collected the categories of personal information described in Section 2 of this Privacy Policy, which correspond to the following CCPA categories: identifiers (e.g., name, email, phone number, device identifiers, IP address); customer records information (e.g., name, contact information); commercial information (e.g., Fee transaction records, if applicable); internet or other electronic network activity information (e.g., usage and log data, Cookie data); geolocation data (approximate, city-level only, as described in Section 2.6); and, if you contact customer support, professional or other information you choose to provide. Dinora has disclosed each of these categories to the categories of recipients described in Section 6 (service providers and subprocessors, analytics providers, payment processors for Fees, and, where applicable, other Users, legal/safety recipients, and parties to a business transfer). Dinora has not sold or shared any of these categories of personal information, and has not collected or disclosed sensitive personal information such as government identification or biometric information, in the preceding twelve (12) months.

How to Submit a Request. You may submit a request to know, delete, or correct by emailing privacy@dinora.ai or by contacting Dinora as described in Section 13. Dinora will verify your request using information associated with your Account (such as your email address) before responding, consistent with applicable law.

Authorized Agents. You may designate an authorized agent to submit a request on your behalf by providing Dinora with written proof of the agent's authority to act on your behalf (for example, a signed permission) and by verifying your own identity directly with Dinora, or, where permitted, a power of attorney.

9.5 Other US State Privacy Laws. If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, or another state with a comprehensive consumer privacy law, you may have similar rights to those described in Section 9.4, including rights to know, access, delete, correct, and opt out of certain processing, subject to the specific terms and exceptions of the applicable state law. You may submit a request under an applicable state law using the contact information in Section 13, and Dinora will respond as required by the law applicable to you. As described in Section 6, Dinora does not sell personal information or engage in targeted advertising that would require an opt-out under these laws as of the Effective Date of this Privacy Policy.

9.6 Do Not Track. The Service does not currently respond to "Do Not Track" browser signals, except as otherwise required by applicable law (for example, in connection with the opt-out preference signals recognized under the CCPA, where applicable).

10. Children's Privacy

The Service is intended for use only by individuals who are at least eighteen (18) years old, as described in the Terms of Service, and is not directed to children under the age of eighteen (18), or, for purposes of applicable law (including the Children's Online Privacy Protection Act), children under the age of thirteen (13). Dinora does not knowingly collect personal information from children under 13, and does not knowingly permit anyone under 18 to create an Account. If Dinora becomes aware that it has collected personal information from a child under 13 without verified parental consent, Dinora will take steps to delete that information. If you believe a child has provided Dinora with personal information, please contact Dinora at privacy@dinora.ai.

11. International Users and Data Transfers

The Service is operated from, and Dinora's servers and service providers are primarily located in, the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those of your jurisdiction. The Service is currently offered in U.S.-dollar-referenced Corridors and is not directed to, and Dinora does not knowingly target the Service to, residents of the European Economic Area, the United Kingdom, or Switzerland. If Dinora's operations expand to directly target users in those regions, Dinora will update this Privacy Policy to describe the additional rights and safeguards that would apply, consistent with the General Data Protection Regulation and analogous laws.

12. Changes to This Policy

Dinora may update this Privacy Policy from time to time. If Dinora makes material changes, Dinora will provide notice by posting an updated version on the Service, updating the "Last Updated" date above, and, where required by applicable law or where the change is material (including, for example, if Dinora begins collecting biometric information as described in Section 2.4), providing additional notice (such as an in-app notice or email) before the change takes effect. Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated Privacy Policy.

13. How to Contact Us

Questions, requests, and correspondence regarding this Privacy Policy or Dinora's privacy practices should be directed to:

Jahangir Baykhurazov, doing business as Dinora

available on request

Attn: privacy@dinora.ai

Email: privacy@dinora.ai

For customer support, contact support@dinora.ai.

For notices under the Terms of Service, contact legal@dinora.ai.