Chime Privacy Policy

This document is Chime's consumer-facing privacy policy governing the collection, use, and sharing of personal information in connection with its financial technology products and services, operating under a stated framework that includes the federal Gramm-Leach-Bliley Act (GLBA) and applicable state privacy laws. The policy states that Chime collects a broad range of personal data including financial account information, government-issued identification, transaction history, device identifiers, location data, and behavioral data derived from app and website usage; the terms authorize sharing this information with service providers, bank partners (The Bancorp Bank and Stride Bank), marketing partners, and in certain cases third-party advertisers. Notably, the policy discloses use of an extensive array of third-party tracking technologies on its website (including Facebook Pixel, TikTok Pixel, Google Tag Manager, Taboola, Reddit Ads, and LiveRamp identity resolution), which represents a materially broad advertising data ecosystem for a financial services provider; the intersection of financial data and behavioral advertising tracking may warrant evaluation under GLBA's limits on information sharing and FTC Act standards for unfair or deceptive practices. The policy references California Consumer Privacy Act (CCPA) rights for California residents, including the right to know, delete, and opt out of the sale or sharing of personal information; the GLBA's notice and opt-out framework applies to nonpublic personal information shared with nonaffiliated third parties, and the breadth of third-party integrations observed in the page source creates compliance surface area requiring careful mapping of data flows against these frameworks. Material compliance considerations include whether behavioral and device-level data collected through advertising pixels constitutes nonpublic personal information subject to GLBA opt-out requirements, and whether the extent of cross-context behavioral advertising disclosures satisfies CCPA's opt-out of sale or sharing obligations.