I just installed it to try, and this is what I see. They pretend that uploading sensitive personal information is normal. They have this KYC wallet as a default option, even though more reasonable options are in the settings.
I can only assume they sell data to Brazilian governemt.
