Privacy Policy for the Moro - Mobile Banking App

Last Updated: March 9, 2026

Morosystems ("we", "us", or "our") takes your privacy very seriously. This Privacy Policy explains how we handle data in our mobile application Moro - Mobile Banking (the "App").

1. Important Disclaimer: The App is a Demo Only

The "Moro - Mobile Banking" App is a UI/UX showcase created to demonstrate modern mobile banking design and technical integrations.

• It is not a real banking application.
• It does not connect to real bank accounts.
• It does not process any real financial transactions.

All balances, transactions, and financial data displayed in the App are fictitious and generated solely for demonstration purposes.

2. Server Communication and Data Processing

The App is not just an offline prototype; it actively communicates with our test backend (server).

• Fictitious data: The App downloads fictitious data (sample transactions, balances, card lists) from our server to simulate a realistic user experience.
• Analytics and personal data: During this communication, we do not collect, store, or transmit any of your real personal or financial data. The communication serves exclusively to ensure the proper functioning of the demo.

3. Security and Authentication (Wultra)

To demonstrate a secure login process, the App utilizes authentication technologies from Wultra, whose backend portion runs within our infrastructure on Google Cloud.

• Local PIN code: The access PIN code you create within the App is securely stored locally only on your mobile device. This PIN is not sent to our servers in a readable format.
• The exchange of technical keys occurs in a standard, secure manner solely for the purpose of demonstrating a functional authentication (auth) flow.

4. Device Permissions and Third-Party SDKs (SumSub)

The App includes a demonstration of the activation and identity verification process (KYC flow). For this purpose, we use a third-party software development kit (SDK) – the SumSub SDK.

Due to the technical integration of this SDK, the App may request the following permissions:

• Camera: To demonstrate the visual interface of the identity verification process.
• Microphone (Foreground Service): A technical requirement of the SumSub SDK for its internal video-identification modules.

IMPORTANT: Within this demo scenario:

• We do not record any audio or video.
• We do not take any photos of your face or ID documents.
• The permissions serve purely to allow the showcase user interface to function correctly without crashing. The actual process of verifying and transmitting biometric data is inactive in this demo version.

5. Data Sharing with Third Parties

Apart from the technical exchange of necessary data with our own backend and the aforementioned libraries (Wultra, SumSub), we do not share, sell, or provide any data to third parties for marketing or other commercial purposes.

6. User Rights and Data Deletion

Since we do not process any of your real personal data in the App, it is not necessary to submit an account deletion request to us under the GDPR.

If you wish to delete all local demo data (including your locally stored PIN code and Wultra token pairings), simply remove (uninstall) the App from your device. This will irreversibly delete this data.

7. Contact Us

If you have any questions regarding this Privacy Policy or the operation of our demo app, please contact us at:

• Email: googleplaydev@morosystems.cz
• Website: www.morosystems.cz