How we protect your family's money

Funds in your Spend and Save wallets are held in USDC — a regulated stablecoin issued by Circle under supervision of the New York State Department of Financial Services (NYDFS), the strictest crypto regulator in the United States.

For every 1 USDC in existence, Circle holds exactly $1.00 in US Treasury securities or cash in bankruptcy-remote accounts. This means that if Circle were ever to fail, your funds are protected by the underlying reserves and cannot be touched by creditors.

All retirement and custodial investment accounts (Roth IRA, UTMA) are held in custody by our brokerage partner — a registered SEC broker-dealer and member of SIPC (Securities Investor Protection Corporation).

SIPC protects your securities and cash up to $500,000 per account (including $250,000 in cash) in the event of broker insolvency. This is the same protection that applies to accounts at Fidelity, Schwab, and Vanguard.

Our payment routing contracts are built on OpenZeppelin — the industry-standard audited library used by every major blockchain financial protocol. We do not write core financial logic from scratch.

Before any real family funds touch our contracts, they undergo an independent security audit through Sherlock, a leading smart contract security platform. Sherlock's network of specialized researchers reviews every line of our routing and vault logic for vulnerabilities before we deploy to mainnet.

The audit report will be publicly linked here once complete.

Every Gentrove payment contract includes an emergency pause mechanism. If our monitoring systems detect unusual activity — abnormal transaction volume, unexpected patterns, or any sign of a vulnerability being exploited — all transfers can be frozen across the entire platform within seconds.

During a freeze, no money moves in or out. Your funds remain safe in place while our engineering team investigates and deploys a fix. You would be notified immediately via push notification and email with a status update.

Gentrove operates under the Children's Online Privacy Protection Act (COPPA) and the 2026 FTC amendments. This means:

• Parents complete verified identity checks before any child data is collected
• We collect only the data required to provide the financial service — nothing more
• Children's data is automatically deleted when an account is closed
• We never sell or share children's personal information with advertisers

Every parent account undergoes a Know Your Customer (KYC) identity verification before any funds can be moved. This is a legal requirement under US Bank Secrecy Act (BSA) regulations and protects the platform from fraud, money laundering, and identity theft.

All transactions are monitored for suspicious activity in accordance with Anti-Money Laundering (AML) requirements. Gift portal transactions have per-transaction and daily limits designed to prevent misuse.