Privacy Policy

The short version

• There are no accounts. We never ask for your name, email, or phone number.
• Your seed phrase and private keys are generated and stored only on your device. We never see them.
• We do not use analytics SDKs, advertising identifiers, or third-party trackers.
• We do not sell, rent, or share personal data with anyone.

1. Data stored on your device

The App stores the following locally, encrypted with iOS Data Protection and, where supported, the Secure Enclave: your recovery phrase, spending and viewing keys, wallet birthday height, transaction history and memos decrypted with your keys, address book entries, and your settings. This data never leaves your device unless you explicitly export it (for example, by revealing your seed phrase or creating an encrypted iCloud backup that you enable yourself).

2. Network connections

To sync your balance the App connects to a lightwalletd server. That server can observe your IP address, the time of connection, and the block ranges you download. It cannotsee your balance, your addresses, or which transactions belong to you — shielded transaction contents are decrypted only on your device. To reduce metadata exposure you can enable Tor routing or point the App at a server you run yourself.

When you broadcast a transaction, the App submits it to the lightwalletd server, which relays it to the Zcash peer-to-peer network. Broadcasting a transaction is inherently public to the network; the shielded protocol protects its contents.

3. Optional features that contact third parties

• Exchange rates. If you turn on fiat conversion, the App fetches ZEC price data from a public price API. Only a generic price request is sent — no wallet data.
• Encrypted iCloud backup. If you enable it, an encrypted copy of your recovery phrase is stored in your personal iCloud Keychain, governed by Apple's privacy policy. We cannot access it.
• Links. Tapping a transaction ID may open a third-party block explorer in your browser. Those sites have their own policies.

4. Crash and diagnostic reports

The App does not include a crash-reporting SDK. If you have opted into sharing analytics with app developers in iOS Settings, Apple may provide us with anonymized crash logs through App Store Connect. These logs never contain keys, addresses, or memos.

5. Permissions

• Camera — only to scan QR codes. Images are processed on-device and never stored.
• Face ID / Touch ID — to unlock the App. Biometric data stays inside iOS; the App receives only a yes/no.
• Notifications — optional, local-only alerts when a background sync detects incoming funds. No push server is involved.

6. Children

The App is not directed at children under 18 and we do not knowingly collect information from them.

7. Your rights

Because we hold no personal data about you, there is nothing for us to access, correct, export, or delete. All of your data lives on your device and can be erased by deleting the App. Where local law (such as GDPR or CCPA) grants you specific rights, you may still contact us and we will respond within the statutory period.

8. Security

We follow industry best practices: keys sealed by iOS Data Protection class “Complete”, optional Secure Enclave-backed biometric gating, screenshot and screen-recording blocking on sensitive screens, reproducible open-source builds, and independent security audits of the shielded transaction library. No system is perfectly secure; keep your device updated and your recovery phrase offline.

9. Changes to this policy

If our practices change, we will update this page and the “Last updated” date, and note the change in the App's release notes. We will never retroactively begin collecting data without an explicit opt-in.

10. Contact

Privacy questions or requests: privacy@zcashwallet.app