1. Who we are
Mobiwallet (“we”, “us”, “our”) provides a non-custodial cryptocurrency wallet and related services. You can contact us about privacy at support@mobiwallet.org or via in-app Support.
2. Important: non-custodial wallet
Mobiwallet is non-custodial. Recovery phrases, private keys, and device encryption keys are generated and stored on your device (for example in the platform secure store). We do not receive, store, or have access to your seed phrase or private keys, and we cannot recover funds if you lose them.
3. Information we collect
Depending on how you use the service, we may process:
- Account data — name, email address, password (hashed), preferred currency, avatar image or preset, two-factor authentication settings.
- Wallet metadata — public wallet addresses, chain identifiers, balances and transaction history we sync or receive from blockchains / indexing partners (not private keys).
- Device & security data — device identifiers used for session security, trusted-device checks, login / security activity logs, IP address and approximate network metadata when you authenticate.
- Push notification tokens — Expo / Firebase Cloud Messaging tokens so we can send transaction alerts if you allow notifications.
- Support content — messages and attachments you send through Support tickets.
- Card / KYC data — if you apply for a Mobiwallet card, identity and application documents you submit for review.
- Diagnostics — limited error / performance telemetry (for example via Sentry) to keep the service reliable. We aim to avoid collecting seed phrases or raw secrets in logs.
4. How we use information
- Provide, secure, and improve the wallet, account, and related features.
- Authenticate you, detect abuse, and protect accounts (including 2FA and device checks).
- Show balances, activity, and send push or in-app updates about transactions.
- Process support requests and card applications where applicable.
- Comply with law and enforce our terms.
We do not sell your personal information.
5. Legal bases (where applicable)
If you are in the EEA/UK, we process data where needed to perform our contract with you, where we have a legitimate interest in securing and operating the service, where you consent (for example notifications or optional photos), or where required by law.
6. Sharing with service providers
We use processors / partners only as needed to run the product, including:
- Hosting & infrastructure for the API and website.
- Expo / Apple / Google (FCM) for mobile push delivery.
- Blockchain data providers (for example Alchemy, Helius, and similar explorers/indexers) to sync on-chain activity.
- MoonPay (or similar) when you choose to buy crypto — their privacy policy applies to that checkout.
- Error monitoring (for example Sentry) for crash and performance diagnostics.
Public blockchain networks are inherently public. Transactions you broadcast are visible on-chain and may be copied by third parties outside our control.
7. Retention
We keep account and related data while your account is active and for a limited period afterward as needed for security, dispute resolution, backups, and legal obligations. When you close your account we deactivate it, revoke sessions, remove push tokens, and anonymize identifying account fields as described in product flows.
8. Your choices & rights
- Notifications — you can deny or revoke OS notification permission; we will not deliver pushes without a registered token.
- Avatar / profile — you can update or remove profile photo settings in the app.
- Account deletion — see Delete your Mobiwallet account (in-app Close Account or email support@mobiwallet.org).
- Access / correction — contact us to request access to or correction of personal data we hold, subject to applicable law.
9. Children
Mobiwallet is not directed to children under 18 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal data from children.
10. Security
We use industry-standard measures such as TLS in transit, hashed passwords, optional 2FA, and device-bound secure storage for keys on your device. No method of transmission or storage is 100% secure.
11. International transfers
We may process data in countries other than your own through our service providers. Where required, we use appropriate safeguards for cross-border transfers.
12. Changes
We may update this policy from time to time. We will revise the “Last updated” date above and, when changes are material, provide additional notice where appropriate.
13. Contact
Privacy questions: support@mobiwallet.org
Website: https://mobiwallet.org