Dave: Credit, Cash & Money App

"Device Motion: Includes details on the device's movement, captured through sensors like accelerometers and gyroscopes, to track acceleration and orientation. Accelerometer: Detects the device's acceleration and direction, indicating how fast and in what direction the device is moving. Magnetometer: Used to measure magnetic fields, aiding in navigation applications to determine directional heading like where "North" is. Communication Data: Information gathered from SMS and Short Code Messaging services, focusing on how these communication tools are utilized."

Dave collects accelerometer, gyroscope, and magnetometer sensor data, plus SMS/messaging data — well beyond what a banking app needs for core functionality.

"Location information Internet or other network activity information, for example, how individuals interact with the Site, emails, or marketing materials. Network Details: Includes information about the internet connection, such as the IP address, and whether the device is connected to a Wi-Fi or cellular network."

Dave collects location information and network details including IP address and Wi-Fi/cellular connection status, which can be used to track user location.

"We may share any of the categories of information set out in Section 2, except Communication Data, with third parties when it is permitted by law. We work with third parties to provide, maintain, service and improve our Services; to improve app functionality, fraud prevention, security and compliance. Our mobile application may also include third-party software development kits ("SDKs") that allow us and our service providers to collect information about your use of these applications."

Dave shares nearly all collected personal information categories with third parties and embeds third-party SDKs that collect data directly from users' devices.

"Our mobile application may also include third-party software development kits ("SDKs") that allow us and our service providers to collect information about your use of these applications. In addition, some mobile devices come with a resettable identifier that allows us and our service providers to identify your device over time for marketing purposes."

Dave uses resettable device identifiers and third-party SDKs to track users across time and contexts for marketing purposes.

"You may also email us if you wish to deactivate your Services, but even after you deactivate your Services, we may retain archived copies of information about you for a period of time that is consistent with applicable law. Personal data will be retained by Dave for at least the time period required by applicable laws, depending on the type of products and services you are engaged in."

Dave retains archived copies of your data after account deactivation with no specific deletion timeline, only a vague reference to 'applicable law.'

"We reserve the right, at our discretion, to make changes to this Policy from time to time, so please review it frequently. By using our Services, you agree to accept electronic communications and/or postings of revised versions of this Policy on www.dave.com/privacy and agree that such electronic communications or postings constitute notice to you of the revised version of this Policy. Changes take effect immediately upon posting."

Dave can change its privacy policy at any time with changes effective immediately upon posting, treating continued use as acceptance without requiring explicit consent.

"You may also email us if you wish to deactivate your Services, but even after you deactivate your Services, we may retain archived copies of information about you for a period of time that is consistent with applicable law."

Account deactivation requires emailing support rather than offering a clear self-service deletion option, and Dave explicitly states it retains data even after deactivation.