Legal

Privacy Policy

Last updated: 6 September 2026

Who we are

ValidWallet (“ValidWallet”, “we”, “us”) provides a self-custody, multichain crypto wallet application for Android, iOS and the web. This Privacy Policy explains what information is and is not processed when you use the app.

Self-custody & your keys

ValidWallet is non-custodial. Your recovery phrase and private keys are generated and encrypted on your own device. We never receive, store, transmit or have any way to access your seed phrase, private keys or funds. If you lose your recovery phrase, no one — including us — can recover your wallet.

What we process

The app is designed to be local-first. Depending on the features you use, the following may be processed:

• On-device data — your encrypted keys, wallet settings, address book and preferences stay on your device.
• Public blockchain data — to show balances and history, the app reads public data associated with your wallet addresses from public blockchains and third-party node/indexer services. Blockchain transactions are public and permanent by nature.
• Technical & usage data — anonymous, aggregated diagnostics and crash reports (for example via Firebase) that help us keep the app stable. This does not identify you personally.
• Support communications — if you contact us, we process the information you choose to send.

Third-party providers

Some features are powered by independent third parties who operate under their own privacy policies and terms:

• Buy & sell (on/off-ramp) — providers such as Transak, MoonPay, Ramp, Capa and Eversend process payments and may require identity verification (KYC). Any personal or payment data you enter is collected and controlled by them, not by ValidWallet.
• Market data — price and chart data is retrieved from providers such as CoinGecko.
• Trading — perpetuals and tokenized-stock trading is executed on-chain via the Hyperliquid protocol.
• Advertising — where ads are shown, they may be served by Google AdMob subject to Google’s policies.
• Infrastructure — Google Firebase may be used for app configuration, hosting and diagnostics.

We encourage you to review the privacy policies of any provider you interact with.

How we use data

Any data processed is used only to operate and improve the app: to display your wallet, complete the actions you request, keep the service secure and stable, and comply with law.

What we never do

• We never take custody of your keys or funds.
• We do not sell your personal information.
• We do not use your recovery phrase for any purpose — we cannot, because it never leaves your device.

Retention

On-device data remains until you delete the app or clear it yourself. Aggregate diagnostics are retained only as long as needed for the purposes above.

Your rights

Depending on where you live, you may have rights to access, correct or delete personal data we hold about you, or to object to certain processing. Because the wallet itself is self-custodial and local-first, most of your data is already under your direct control. To make a request about anything we hold, contact us below.

Children

ValidWallet is not directed to children under the age required to enter into a binding contract in your jurisdiction, and is not intended for their use.

Changes & contact

We may update this policy from time to time; material changes will be reflected by the “last updated” date above. Questions? Contact hello@superwallet.app.