Privacy Policy App

The Privacy Policy for the ellexx universe AG App explains which personal data ellexx universe AG collects and otherwise processes about you when you use the ellexx universe AG App.

Personal data refers to all information relating to an identified or identifiable natural person. Such personal data is protected by data protection law and, in certain cases, by banking secrecy.
Your personal data will only be disclosed to third parties if this is necessary for the performance of a contract, if you have provided prior consent, or if statutory provisions permit or require such disclosure.

Please note that data transmission over the internet (e.g., communication by email) may involve security vulnerabilities. Complete protection of data from access by third parties is not possible.

This Privacy Policy may be updated at any time, and we will always inform you of any changes.

1. Controller

The controller responsible for the collection, processing and use of personal data obtained from you through your use of the ellexx universe AG App is:

ellexx universe AG
Dufourstrasse 181
8008 Zurich
Switzerland
(«ellexx universe AG»)
Email:

Further information about ellexx universe AG can be found in the .

2. Scope of Application and Exclusions

This Privacy Policy applies solely to the use of the ellexx universe AG App and to any personal information that may be collected and stored, for example, in connection with announced recordings of telephone calls with our employees in order to comply with legal obligations or for business purposes of ellexx universe AG.

In particular, this Privacy Policy does not apply to:

The visit and use of the ellexx universe AG website. For information on data protection related to the use of the ellexx universe AG website, please refer to the separate ;
Other websites to which you may be redirected via a link.

3. Legal Bases for Data Processing

We collect, process and use your personal data in accordance with applicable legal provisions and the principle of good faith. Depending on the purpose of the specific processing activity, ellexx universe AG processes your personal data on the following legal bases:

As a priority, ellexx universe AG processes personal data in connection with the initiation or performance of contracts with you, in particular to manage, operate, maintain and improve the ellexx universe AG App and the services offered through it.

ellexx universe AG must comply with applicable laws and may be legally required or compelled by regulatory authorities to disclose or report your personal data.

Where necessary, ellexx universe AG processes your personal data beyond the actual performance of a contract to safeguard its own legitimate interests or those of third parties—for example, to monitor and manage money laundering and other operational risks; for planning, product development and statistical purposes; for marketing and market research to adequately inform you about the ellexx universe AG service offering; to protect and enforce the claims of ellexx universe AG in the event of claims against ellexx universe AG or against you; and to safeguard your security and the security of ellexx universe AG employees.

For further processing activities beyond contractual performance (e.g., sending newsletters), the processing of your personal data may be based on your consent, which you may withdraw at any time.

4. What Personal Data Does ellexx universe AG Collect and Process?

ellexx universe AG aims to store only the amount of data necessary to provide you with the full functionality of the App while maintaining the highest possible security. To offer you the contractual features, ellexx universe AG collects and processes personal data. Your personal data will only be disclosed to third parties when required by law, when you have given prior consent, or when these third parties assert a legitimate interest. Additional services requiring further processing of your personal data require your explicit consent. This applies in particular to the use of mobile payment solution providers.

To use the ellexx universe AG App, you must provide your email address and a self-selected password. To use ellexx invest, you additionally need your contract number and a password, which is sent to you by post by our partner, Hypothekarbank Lenzburg AG.

For certain services, specifically ellexx invest, the App allows login via fingerprint or facial recognition if supported by your device. Neither ellexx universe AG nor the App receives your biometric data. For more information about how these authentication features work, please contact your device provider.

To use the ellexx invest services, you open a bank account with our partner, Hypothekarbank Lenzburg AG. During onboarding, the following personal data is processed:

First and last name
Date of birth
Place of birth / place of origin
Gender
Marital status
Email address
Nationality
Residential address
Mobile phone number
Audio and video recordings
Beneficial ownership & purpose of use
Tax domicile and US tax liability
Copy of identification document
Type of identification document
Date of issue
ID number
Identification method

Identification procedure

Hypothekarbank Lenzburg AG is legally required to verify your identity during account opening and to store specific information from your identification document. The identification is conducted digitally in accordance with FINMA Circular 2016/7 "Video and online identification". The Bank uses the services of Intrum AG, Eschenstrasse 12, 8603 Schwerzenbach (“Intrum”). Identification is carried out using an electronic copy of your ID transmitted via encrypted channels.

For online identification, Hypothekarbank Lenzburg AG sends you a TAN via SMS. After entering the TAN into the designated field in the App, you confirm the accuracy of the data you entered and your identity, and accept the terms and conditions of Hypothekarbank Lenzburg AG, ellexx universe AG and Intrum.

For this process, the ellexx App transmits your personal data (first and last name, date and place of birth, nationality, email address, gender, mobile number, residence, preferred language) to Intrum. To verify the identification, Intrum must access your device’s camera and capture photos of you as well as the front and back of your ID or passport. These photos are transmitted to Hypothekarbank Lenzburg AG.

Any discrepancies between your personal data and the data in your ID/passport, along with the photos, are transmitted by Intrum to the Bank. Intrum verifies the authenticity of your identification document by checking optical and electronic security features. If features are unclear or anomalies are detected, a manual review may follow. After successful onboarding, the data collected by Intrum is deleted from Intrum’s servers no later than 90 days afterward.

Account management

The ellexx universe AG App displays your personal data, such as account details, IBAN, name, email address, mobile number and residential address.
The App provides an overview of all transactions conducted with ellexx invest and the associated bank account at Hypothekarbank Lenzburg AG. All transaction data is stored in encrypted form.

Termination

If you terminate your customer relationship relating to ellexx invest with Hypothekarbank Lenzburg AG, customer data remains stored with ellexx universe AG for five years to prevent misuse.
Uninstalling the App deletes all data stored locally on your device. Upon request, we delete all personal data (name, address, transactions etc.) from productive systems to the extent legally permitted.
For unstructured stored data, such as support tickets or backup data, complete deletion cannot be guaranteed.

Notifications

If you activate the notifications function, you will receive push notifications about new documents in your inbox. Inbox messages may include tax documents or bank statements. To use this function, ellexx universe AG requires your login code, stored securely in a data centre. Notifications are sent using Apple Push Notification Service or Google Cloud Messaging Service.

5. What Data Does the ellexx universe AG App Generate?

Based on the above data, ellexx universe AG may offer you additional features. Currently, within ellexx invest, this includes automatic categorisation of your transactions and statistics on your account activity.

6. Does ellexx universe AG Use Non-Personal (Anonymous) Data?

Non-personal (anonymous) data, such as device statistics or transaction data, cannot be used to identify you. We use such data to continuously optimise the performance and offering of the ellexx universe AG App.

7. How Does ellexx universe AG Protect Your Personal Data?

Communication between ellexx universe AG and Hypothekarbank Lenzburg AG is fully encrypted using standard TLS/SSL protocols.

Data security

All transactions are processed via a secure Application Programming Interface (“Open API”) of Hypothekarbank Lenzburg AG or ellexx universe AG. All banking transaction data is stored in ISO27001-certified Swiss data centres of the Bank.
We are subject to Swiss data protection law and implement appropriate technical and organisational measures to protect your personal data against unauthorised access and misuse.

8. How Are Third-Party Services Used?

Like banks, we rely on carefully selected third-party service providers such as our data centre. Your personal data is always protected.

Third-party providers

To use technical or organisational services required for the purposes described in this Privacy Policy or for our business operations, your personal data may be stored in systems of such service providers. For instance, your encrypted transaction data may be stored in an ISO27001-certified data centre in Switzerland.
Our service providers are subject to applicable data protection laws and are contractually obliged to process personal data solely on our behalf and in accordance with our instructions.
We require our service providers to implement appropriate technical and organisational measures to ensure the protection of personal data.

Last updated: 01.11.2025