It’s 100% disclosed during onboarding (but I can totally understand that no one really reads that) so we also include the privacy policy in the Legal & Regulatory section on the phone so you can read it when you have a free moment.
I’ve also mentioned it here: