Privacy Policy

1. Summary

• No account, no sign-up, no email, no phone number.
• No analytics, no advertising, no tracking across apps or websites.
• No Aptosys server stores your wallet data.
• Your recovery phrase and private keys never leave this iPhone.
• On the App Store, Aptosys declares “Data Not Collected.”

2. Who this policy covers

This policy explains how the developer of Aptosys (“Aptosys”) handles information in the Aptosys Wallet app for iPhone (the “App”) and this website. Aptosys is the party responsible for your information under this policy.

3. Data stored only on this iPhone

• Recovery phrase and private keys, encrypted and protected by the iOS Keychain and Secure Enclave.
• Public wallet addresses, wallet and account names.
• App settings, including your choice of mainnet or testnet and your lock preference.
• A local cache of balances, prices, and transaction history to make the App faster.

This data is never sent to Aptosys and Aptosys cannot access it. It is not included in iCloud backups in a readable form.

4. Data that leaves this iPhone

The only data that leaves the phone is public network and price requests. They never include your name, email, phone number, contacts, or recovery phrase.

• Aptos network requests. To show balances and history and to send transactions, the App contacts public Aptos network nodes and indexers. These requests include your public wallet address and, when you send, your signed transaction.
• Price requests. To show prices and charts, the App requests public market data by token. These requests do not include your wallet address.

Like any internet request, these reveal your IP address and basic device information (such as OS version) to the provider. Aptosys does not receive, store, or combine this information.

5. Public blockchain data

The Aptos blockchain is public. Your wallet addresses, balances, and transactions can be seen by anyone, forever. Aptosys cannot change or delete blockchain data. Avoid linking your address to your identity if you want more privacy.

6. Device permissions

• Face ID, Touch ID, Optic ID. Used only to unlock the App. Biometric data is handled entirely by iOS. Aptosys receives only a success or failure result.
• Camera. Used only when you choose to scan a QR code. Images are processed on device and are never stored or sent.
• Notifications, if offered, are local to this iPhone.

7. Third parties

Aptosys does not sell, rent, or share personal data with anyone, and does not use third-party SDKs that collect personal data. The App connects to these categories of third-party services, which handle requests under their own privacy policies:

• Aptos network node and indexer providers.
• Public token price and market data providers.
• Apple, which distributes the App and may share aggregated, anonymous App Store and crash statistics with developers if you opt in through iOS Settings.

8. Tracking and advertising

Aptosys does not track you as defined by Apple's App Tracking Transparency framework. It does not show ads, does not use advertising identifiers, and does not combine data with third-party data. For this reason, the App never asks for tracking permission.

9. This website

This website sets no cookies, uses no analytics, and has no forms. It never asks for a recovery phrase, email, or wallet address. The hosting provider may keep short-lived server logs, such as IP address and request time, for security and reliability.

10. Security

Keys are encrypted on device using Apple's Keychain and Secure Enclave. The recovery phrase is hidden until you tap to reveal it, and copying it clears from the clipboard shortly after. No system is perfectly secure. Keep your device updated and protected with a passcode.

11. Retention and deletion

Aptosys keeps no personal data on its servers, so there is nothing to retain and no account to delete.

• To delete a wallet: open Settings in the App and erase the wallet.
• To delete everything: delete the App from this iPhone.
• Back up your recovery phrase first. Deleted wallets cannot be recovered by Aptosys.

12. Your rights and choices

Depending on where you live, including under the EU and UK GDPR and California's CCPA/CPRA, you may have rights to access, correct, delete, port, or restrict processing of your personal data, to object to processing, and to withdraw consent. Aptosys does not sell or share personal data as those laws define it.

You can revoke camera or biometric access at any time in iOS Settings. To make a request or ask a question, email support@aptosys.app. You also have the right to complain to your local data protection authority.

13. International transfers

Network and price requests may go to providers in other countries. Aptosys does not itself transfer personal data, because it does not collect any.

14. Children

The Service is for people 18 or older. It is not directed to children, and Aptosys does not knowingly collect information from anyone under 18.

15. Changes to this policy

If this policy changes, the effective date at the top will change and material changes will be noted in the App before they take effect. Any change that adds data collection will be reflected in the App Store privacy label first.

16. Contact

Privacy questions or requests: support@aptosys.app. Aptosys aims to reply within 30 days.

See also the Terms of Service. Never send your recovery phrase.