WhatPay Wallet — Privacy Policy

WhatPay Wallet (the "App") is a self-custody, non-custodial multi-chain cryptocurrency wallet. Your private key material is generated and stored on your device using secure multi-party computation (MPC); it never leaves your device in plaintext, and we cannot access, freeze, or move your funds. This policy explains what limited data we process and why.

1. Information We Collect

• Email address — used to create and sign in to your account via one-time passcode (OTP). Linked to your account.
• Device push token / identifier — only if you enable notifications, used to deliver transaction and security alerts.
• Public blockchain data — your public wallet addresses and on-chain balances/transactions, which are inherently public on the blockchain. We read them via RPC providers to display your portfolio.
• Diagnostic & technical data — basic, aggregated logs (e.g., error reports, request timing) to keep the service reliable.

2. What We Do NOT Collect

• We never receive your private keys, recovery material, or seed-equivalent secrets in plaintext. Key shares are protected on-device (iOS Keychain / Secure Enclave) and via MPC.
• We do not collect payment card or bank details. Fiat purchases ("Buy") are handled by third-party providers under their own terms.
• We do not sell your personal data, and we do not use third-party advertising or cross-app tracking.

3. Third-Party Services

To provide wallet functionality, the App connects to third-party infrastructure that may process your public addresses or transaction requests under their own privacy policies, including: blockchain RPC providers (e.g., Alchemy, QuickNode, TronGrid), market/price data providers, swap and bridge aggregators (e.g., Jupiter, LiFi), fiat on-ramp partners, and email delivery providers. When you connect to a third-party dApp through the in-app browser, your interaction with that dApp is governed by the dApp's own policies.

4. How We Use Information

• To authenticate you and operate your account.
• To display balances, prices, and transaction history.
• To send transaction and security notifications you opt into.
• To maintain security, prevent abuse, and improve reliability.

5. Data Security

Private key material is generated and held on your device using MPC and hardware-backed storage. Account login uses passkeys and device biometrics (Face ID / Touch ID). Network traffic is encrypted in transit (HTTPS).

6. Data Retention

We retain account data (such as your email) for as long as your account is active. You may request deletion of your account and associated personal data by contacting us.

7. Children

The App is not directed to children and is intended for users aged 17 and older.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. Contact us to exercise these rights.

9. Changes

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

10. Contact

Questions about this policy: support@whatpay.com

---

WhatPay Wallet — 隐私政策

WhatPay Wallet(下称"本应用")是一款自托管、非托管的多链加密货币钱包。你的私钥材料通过安全多方计算(MPC)在你的设备上生成与保管,绝不以明文离开设备,我们无法访问、冻结或转移你的资产。本政策说明我们处理哪些有限数据及其用途。

1. 我们收集的信息

• 邮箱地址 —— 用于通过一次性验证码(OTP)创建与登录账户,关联到你的账户。
• 设备推送令牌 / 标识 —— 仅在你开启通知时使用,用于发送交易与安全提醒。
• 公链数据 —— 你的公开钱包地址、链上余额与交易,这些在区块链上本就是公开的;我们通过 RPC 读取以展示你的资产。
• 诊断与技术数据 —— 基础的聚合日志(如错误报告、请求耗时),用于保障服务稳定。

2. 我们不会收集

• 我们绝不以明文获取你的私钥、恢复材料或助记词等同物。密钥分片在设备端(iOS Keychain / Secure Enclave)与 MPC 下受保护。
• 不收集银行卡或银行账户信息。法币购买("购买")由第三方服务商按其条款处理。
• 不出售你的个人数据,不使用第三方广告或跨应用追踪。

3. 第三方服务

为实现钱包功能,本应用会连接第三方基础设施,它们可能依据各自隐私政策处理你的公开地址或交易请求,包括:区块链 RPC 提供商(如 Alchemy、QuickNode、TronGrid)、行情/价格数据商、兑换与跨链聚合器(如 Jupiter、LiFi)、法币入金合作方、邮件发送服务商。当你通过内置浏览器连接第三方 DApp 时,你与该 DApp 的交互受其自身政策约束。

4. 信息用途

• 验证你的身份并运行你的账户。
• 展示余额、价格与交易历史。
• 发送你已开启的交易与安全通知。
• 维护安全、防止滥用并提升稳定性。

5. 数据安全

私钥材料通过 MPC 与硬件级存储在你的设备上生成与保管。账户登录使用 passkey 与设备生物识别(Face ID / Touch ID)。网络传输全程加密(HTTPS)。

6. 数据留存

在你的账户处于活跃状态期间,我们会保留账户数据(如邮箱)。你可联系我们请求删除账户及相关个人数据。

7. 儿童

本应用不面向儿童,适用于 17 岁及以上用户。

8. 你的权利

视你所在司法辖区,你可能有权访问、更正或删除你的个人数据。可联系我们行使这些权利。

9. 变更

我们可能不时更新本政策,重大变更将通过更新上方生效日期体现。

10. 联系我们

关于本政策的疑问:support@whatpay.com