Kas Wallet

Legal

Privacy Policy

Last updated: November 12, 2025

Kas Wallet (the "App") is a self-custodial cryptocurrency wallet for the Kaspa network. This Privacy Policy explains what information the App handles and, more importantly, what it does not. It is written to comply with the Apple App Store Review Guidelines, Apple's App Privacy requirements, the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

Summary

  • We do not collect, store, or transmit personal data.
  • We do not use analytics, advertising, or tracking SDKs.
  • Your recovery phrase and private keys never leave your device.
  • The App connects only to a public Kaspa node and a public price API.
  • We have no user accounts and cannot access your funds.

1. Data Collected by Kas Wallet

Kas Wallet does not collect any personal data as defined by Apple's App Privacy framework. We do not ask you for a name, email address, phone number, or any other identifier. There is no sign-up, no account, and no user profile.

Data stored on your device only

  • Recovery phrase and private keys. Generated on-device using BIP-39, encrypted with AES-GCM, and stored in the iOS Keychain. They are bound to this device and never transmitted.
  • Wallet metadata. Account names, address labels, derivation paths, saved contacts, and app preferences (appearance, currency, network) are stored locally on your device.
  • Transaction cache. A local copy of on-chain data relevant to your wallet is cached for offline viewing.

2. Information Sent to Third Parties

To function as a Kaspa wallet, the App must communicate with the Kaspa network and reference market prices. These are the only outbound connections it makes.

Public Kaspa node

To display balances and broadcast the transactions you sign, the App queries a public Kaspa node. This exchange includes your public Kaspa addresses and signed, publicly-visible transactions. It never includes your recovery phrase, private keys, IP-linked identifiers, or any personal data collected by the App. The node operator may independently log request metadata such as your IP address; this is inherent to any internet request and is outside our control.

Public price API

To show the KAS price and market stats, the App requests aggregate market data from a public price API. These requests do not include any wallet data, address, or identifier.

3. What We Do Not Do

  • No analytics, telemetry, crash reporting, or usage tracking.
  • No advertising identifiers and no AppTrackingTransparency prompts — because there is nothing to track.
  • No third-party SDKs that collect data.
  • No accounts, no email lists, no marketing communications.
  • No sale or sharing of personal information.

4. Apple App Privacy ("Nutrition Label")

In the App Store, Kas Wallet is declared as "Data Not Collected". This means we do not collect any of the data types listed in Apple's Privacy Questionnaire from the App itself.

5. Children's Privacy

Kas Wallet is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children — and in fact do not collect data from anyone.

6. Security

Keys are encrypted using AES-GCM and stored in the iOS Keychain with protection class equivalent tokSecAttrAccessibleWhenUnlockedThisDeviceOnly. Transactions are signed with BIP-340 Schnorr signatures on your device. Biometric authentication (Face ID or Touch ID) is required to unlock the App and to authorize every send. An optional PBKDF2-derived spend password can be enabled for an additional layer of protection.

You are responsible for safeguarding your recovery phrase. If you lose it, we cannot recover it for you — this is the nature of a truly self-custodial wallet.

7. Your Rights (GDPR / CCPA)

Because we do not collect or process personal data, we have no personal data to access, correct, export, or delete on your behalf. Data stored on your device can be removed at any time by deleting the App, which erases the associated Keychain entries.

8. International Users

The App operates entirely on your device. Any network traffic goes directly from your device to the public Kaspa node and price API. We do not operate servers that receive or store your data.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes to the App or to legal requirements. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after a change indicates acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy? Reach us at privacy@kaswallet.app.