Privacy Policy
The short version: we never see your recovery phrase. We run no analytics and no advertising, and we ask for no identity documents. We do keep the minimum a wallet needs to work, and this page lists it item by item rather than in a category.
What we never have
Your recovery phrase and the signing share that lives on your device. They are generated there and never leave it, so they are not ours to lose or to hand over.
Your name, address, date of birth, documents or selfies. We do not run identity verification and do not ask for any of it.
Analytics, telemetry, advertising or third-party trackers. There is no such code in the app or on this site, so there is no profile of you to sell and none is sold.
What we do store
Your Telegram account id, your Telegram username if you have one, and your interface language. This is how you sign in and how the wallet greets you in the right language.
Your wallet’s public data: public keys, account identifiers and the labels you give your vaults.
One share of your signing key. It cannot sign anything on its own; it exists so that a transfer needs both your device and the service.
Your operation history: what was sent, in which asset and network, to which address, when, and the resulting transaction identifier. A wallet that could not show you your own history would not be a wallet.
The deposit addresses issued to you, invitation codes and who joined through them, and, if you created one, API keys for the machine interface.
Why we store it
To operate the wallet: to sign you in, show balances and history, prepare transfers and credit deposits.
To keep the service honest and safe: to detect abuse, to keep an audit trail of operations, and to answer you when something goes wrong.
We do not use any of it to profile you, to advertise, or to sell to anyone. There is no third party we share it with for their own purposes.
Who else is involved
Telegram, because the wallet runs inside it. Telegram tells us your account id, username and language when you open the app, under Telegram’s own privacy policy.
A third-party routing provider, which executes transfers between assets and networks. It receives what an exchange needs (the assets, the amount and the destination address) and not your Telegram identity.
Public price sources, for the rates shown next to your balances. They are asked about assets, never about you.
Our infrastructure provider, which delivers the site and the app.
The blockchains themselves. Anything settled on a public network is public and permanent, and no privacy policy can change that, ours included.
Cookies
One cookie, which keeps you signed in after Telegram has authenticated you. There are no advertising or analytics cookies, so there is no consent banner to click away.
How long we keep it
Account and operation records are kept while your account exists, and afterwards only as long as we must to meet legal obligations or to resolve a dispute.
Server logs are short-lived and technical: they record that a request happened and whether it failed, not what your keys are.
Your choices
You can ask what we hold about you, ask for it to be corrected, or ask for your account and its records to be deleted. Write to us and we will do it.
Two limits are honest to state. Deleting your account does not delete anything already settled on a public blockchain, because we cannot edit a public ledger. And it does not delete your funds. Those are yours, on chain, and they stay yours; reaching them needs your recovery phrase together with this wallet, because the keys are derived from the phrase and the salt your account was created with.
Changes and contact
We may update this policy. The date above changes when we do.
Privacy questions, access and deletion requests: [email protected].