Acorns Privacy Notice & Policy

Acorns Privacy Policy

This Privacy Policy describes the privacy practices of Acorns Grow Incorporated, Acorns Advisers, LLC, Acorns Securities, LLC, Acorns Pay, LLC, Offers Media, and their respective affiliates (collectively, "Acorns," "we", “us” or "our") and how we handle personal information that we collect through our digital properties that link to this Privacy Policy, including our website, mobile application, APIs, and browser extensions (collectively, the “Service”).

For purposes of this Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include aggregate or deidentified information, or publicly available information lawfully available from governmental records.

1. Personal Information We Collect

Personal information you may provide to us through the Service or otherwise includes:

• Contact data: First and last name, email address, billing and mailing addresses, and a verified 10-digit US phone number.
• Government identifiers: Social Security Number (SSN), tax identification number, and an image of the relevant identification card. (Note: We strictly enforce an 18+ age requirement based on DOB provided).
• Profile data: Username, account number and password, date of birth, gender, education, employment details, US residency/citizenship status, income, and net worth.
• Financial data: Information about your investment history, bank account numbers, and funding sources used to make transfers through the Service.

Automatic Data Collection & Security Metrics

We, our service providers, and our security partners automatically log information about you, your computer or mobile device, and your interaction over time with the Service:

• Device & Network data: Operating system type, IP address, unique device identifiers, and radio/network information.
• Fraud Prevention Data: To enforce our Bank-Level security, we utilize third-party APIs to strictly monitor Virtual Private Network (VPN), Proxy, or Tor network usage. Risk scores, connection types, and precise region codes are logged automatically to verify that your provided state matches your physical IP location and phone area code.
• Session Data: The Service employs strict session cookies that expire the moment you close your browser. We do not use persistent cookies for authentication.

2. How We Use Your Personal Information

We may use your personal information for the following purposes:

Service Delivery & Authentication

• Provide, operate, and improve the Service and our financial products.
• Facilitate strict identity verification, including sending One-Time Passwords (OTPs) to your verified mobile number.
• Communicate with you about the Service, including security alerts, money alerts, and support messages.

Compliance, Protection & Fraud Prevention

• Comply with applicable anti-money laundering (AML) and know your customer (KYC) requirements.
• Prevent, identify, investigate, and deter fraudulent activity, including the systematic blocking of users attempting to use VPNs, underage users, or individuals submitting duplicate SSNs/Phone numbers.
• Enforce the terms and conditions that govern the Service, including manual review of accounts placed in a "Pending" status.

3. How We Share Your Personal Information

We may share your personal information with the following parties:

• Affiliates: Our corporate parent (Acorns), subsidiaries, and affiliates (including Offers Media), for purposes consistent with this Privacy Policy.
• Service Providers & Security Partners: Companies that provide services on our behalf (such as SMS/OTP gateways, hosting, and API-based risk assessment services like ProxyCheck to determine IP safety).
• Financial Institutions: Acorns uses third-party institutions (such as Plaid Inc., Lincoln Savings Bank, or nbkc bank) to gather data and process your ACH funds transfers.
• Authorities and Law Enforcement: Government authorities and private parties as we believe necessary for compliance and protection purposes.

4. Your Privacy Rights and Choices

Privacy laws, such as the California Consumer Privacy Act (CCPA), apply to much of the personal information that we collect, use, and disclose. However, information subject to certain federal privacy laws (like the Gramm-Leach-Bliley Act) may be exempt from CCPA rights requests.

California Residents

If you’re a California resident, you have the right to know, access, delete, and correct your personal information. You also have the right to opt-out of the "selling" or "sharing" of your personal information. We do not sell your personal information. You may submit requests by emailing support@acorns.com.

Identity Verification: We need to verify your identity to process your requests. We reserve the right to confirm your entitlement to exercise these rights under the laws in your jurisdiction.

5. Security, Children & International Transfers

Security

We employ, test, and regularly re-evaluate appropriate technical and physical safeguards to protect the confidentiality and security of the personal information we collect. Our platform strictly utilizes Session Cookies and 15-minute idle timeouts to prevent unauthorized access.

Children

The Service is strictly not intended for use by children under 18 years of age. Our registration process actively blocks any applications indicating an age under 18. If we learn that we have collected personal information from a child under 18 by fraudulent means, we will delete it immediately.

International Data Transfer

Our Services are strictly designed for United States residents. However, we may use service providers that operate in other countries. Your personal information may be transferred to locations where privacy laws may not be as protective.