Chime shares your financial and personal information with its partner banks (The Bancorp Bank and Stride Bank) and service providers as part of operating its financial services.
This analysis describes what Chime's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Because Chime is a financial technology company and not a bank itself, your account and financial data flows to Chime's bank partners, which means your information is governed by multiple entities' privacy practices and regulatory obligations simultaneously.
The updated privacy notice now explicitly discloses that Chime shares customer information with other financial companies for joint marketing purposes, whereas the prior 2017 version stated Chime did not engage in this sharing. This represents a material change in the stated data handling practice. Under the updated terms, customers can limit this sharing by logging into their Chime account at chime.com or through the Chime Mobile application and updating their Privacy Settings.
View change record →The updated policy no longer explicitly discloses whether Chime or its banking partner The Bancorp shares personal information for specific purposes such as marketing, joint marketing, or affiliate use. Previously, each sharing scenario included a 'Yes' or 'No' answer and stated whether customers could limit sharing. The revised policy directs users to login to chime.com or the Chime Mobile application and update their Privacy Settings to control sharing. You can adjust sharing preferences through your account settings, but the policy no longer itemizes which sharing practices are subject to customer limits.
View change record →The updated notice states Chime no longer shares your personal information (such as transaction history and creditworthiness) with other financial companies for joint marketing purposes. This is a narrowing of third-party data sharing compared to the prior language. The notice also clarifies that Chime does not share certain affiliate information, which may further limit how your data is used by related companies. These changes reduce the scope of data sharing disclosed in the privacy notice.
View change record →Your financial account data, including account balances, transaction history, and personal identifying information, is shared with Chime's bank partners and potentially their affiliates, expanding the set of institutions that hold and process your financial information.
How other platforms handle this
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
Monitoring
Chime has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may share your personal information with our bank partners, The Bancorp Bank, N.A. and Stride Bank, N.A., and their affiliates, as well as with service providers who perform services on our behalf, in accordance with applicable law, including the Gramm-Leach-Bliley Act.— Excerpt from Chime's Chime Privacy Policy
REGULATORY LANDSCAPE: The GLBA Privacy Rule requires financial institutions to provide consumers with notice of their information sharing practices and an opportunity to opt out of sharing with nonaffiliated third parties in most circumstances. Both The Bancorp Bank and Stride Bank are federally chartered institutions subject to OCC supervision and their own GLBA obligations. The CFPB has supervisory authority over Chime's consumer financial product offerings. Coordination of GLBA privacy notices across Chime and its bank partners is a compliance requirement. GOVERNANCE EXPOSURE: Medium. The tri-party structure of Chime, The Bancorp Bank, and Stride Bank creates a complex data governance environment where each entity's GLBA obligations must be independently satisfied while the consumer-facing experience is managed through Chime. Compliance teams must ensure that the GLBA privacy notice provided to consumers accurately reflects all sharing that occurs across all three entities. JURISDICTION FLAGS: Federal GLBA requirements apply uniformly across all US users. California residents may have additional rights under CCPA with respect to data held by Chime as a technology company. The interplay between Chime's CCPA obligations and the bank partners' GLBA obligations requires careful analysis, as CCPA provides a carve-out for data subject to GLBA but only to the extent it actually is subject to GLBA. CONTRACT AND VENDOR IMPLICATIONS: The bank partner relationships should be reviewed to confirm data sharing agreements address GLBA-required safeguards, permitted uses of shared data, and obligations in the event of a data breach. The policy's reference to sharing with bank partner affiliates, in addition to the banks themselves, expands the data sharing scope and should be documented in vendor and partner agreements. COMPLIANCE CONSIDERATIONS: Legal teams should map all categories of personal data shared with each bank partner and confirm the GLBA annual privacy notice accurately reflects these flows. Consumer-facing opt-out mechanisms for GLBA-covered sharing should be tested to confirm they are operationally effective. Data breach notification obligations across all three entities should be coordinated.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Because Chime is a financial technology company and not a bank itself, your account and financial data flows to Chime's bank partners, which means your information is governed by multiple entities' privacy practices and regulatory obligations simultaneously.
Your financial account data, including account balances, transaction history, and personal identifying information, is shared with Chime's bank partners and potentially their affiliates, expanding the set of institutions that hold and process your financial information.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Chime.