Trust & security
Trust & Security Center
Kura is a non-custodial super financial app built around Zero-Access privacy, so sensitive user data remains unreadable to operators by default. Last updated: June 2026
Corporate Entity
Legal Name: Kura Finance LLC
Jurisdiction: Registered in the State of Wyoming, USA
Mailing Address: 1007 N Orange St. 4th Floor 5629
Wilmington, DE 19801
D-U-N-S® Number: 14-499-3126
Cryptographic Privacy & Infrastructure
Non-Custodial by Design:
We are a software provider, not a custodian. Your Kura Wallet is secured by Multi-Party Computation through our authentication partner, so no single party holds your full key. Our systems cannot move your funds, and only you can authorize transactions.
Zero-Access Architecture:
Financial data you connect in TrackFi uses zero access encryption with a key unlocked by your device passkey. Our servers store only ciphertext, so we intentionally limit operator visibility into sensitive financial content. Biometric unlock data remains on your device.
Data Computation Posture:
Data in transit is encrypted via TLS 1.2/1.3, and sensitive data handling follows strict access minimization with strong computation boundaries. We do not operate broad plaintext access pipelines for user financial records.
Disclosure Boundary by Design:
Because we do not hold universal plaintext capability for sensitive user data, we may be technically unable to provide readable data beyond what our architecture actually stores in accessible form, including if systems are breached or under lawful government request processes. We do not sell user data.
Regulated Partners
Regulated financial functions are delivered through established third-party providers, each operating under its own licenses, compliance programs, and terms:
- Privy — wallet authentication, OAuth sign-in, and MPC key management.
- Bridge — fiat on/off ramp and virtual accounts.
- MoonPay — card-based crypto purchases.
- Li.Fi — crypto swaps and cross-chain bridges.
- Morpho — DeFi yield vaults on Base.
- Dinari — tokenized real-world assets and US equities.
- Sumsub — identity verification for card partner onboarding.
- Card partners — non-custodial debit card issuance and processing.
- Stripe — subscription billing.
- Plaid — read-only bank and investment account connectivity.
- CEX partners — read-only exchange API connections for TrackFi balance tracking.
- DeBank — on-chain token and DeFi position data.
- CoinGecko — cryptocurrency market data.
- Pimlico — smart-account transaction infrastructure on Base.
- WalletConnect (Reown) — secure wallet-to-dApp sessions.
Regulatory Framework & Compliance Stance
Identity Verification (KYC/AML):
Where required, identity verification is performed by our regulated partners — not Kura. Separate flows may apply: Bridge for fiat ramps (including business KYB where supported), Sumsub for card partner onboarding, and Dinari for US securities access. KYC data is processed by those partners to meet their anti-money-laundering obligations and is not held by Kura in readable form.
Subscriptions & Referrals:
Paid tiers (Basic, Pro, Ultimate) are processed through Stripe or applicable app-store billing. Referral rewards, when offered, are governed by in-app program rules including eligibility, pending periods, and reversal on refunds or chargebacks.
Global Sanctions (OFAC) Compliance:
We are committed to operating within the legal frameworks of the United States. We and our partners adhere to international sanctions and use screening to block addresses or users associated with illicit activities or comprehensively sanctioned jurisdictions (OFAC) from accessing relevant services.
Regional Availability:
Certain features, including the Kura Card (waitlist), fiat ramps, Dinari securities, and Morpho Earn, are available only in supported regions and to users who meet partner eligibility requirements.