Privacy

The server stores, per wallet address: wallet names, pocket names, icons, colours and balances, the moves between pockets with their optional notes, and a list of devices (a device name such as "iPhone", or the name of a connected AI agent) with the time each was created and last seen. It stores no names, e-mail addresses, phone numbers or private keys.

Device tokens are stored only as SHA-256 hashes. On-chain balances are read from public RPC endpoints when a move out of General needs checking and are not stored.

Removing a key in the app releases its addresses on the server; resetting the app revokes the device. Pockets and moves of a wallet stay on the server so that other devices with the same key keep working.

Bank accounts (Revolut) are connected only when the owner gives consent in the bank, through Enable Banking Oy, a licensed account information service provider supervised by the Finnish Financial Supervisory Authority. Access is read only and ends after at most 180 days. The server then stores the account names, IBANs, balances and transactions (date, amount, description, counterparty) so that the owner's phones and connected AI agents can read them. Disconnecting the bank in the app deletes the session at Enable Banking and all of this data from the server.

The server runs on Cloudflare Workers with a Cloudflare D1 database. There are no analytics, cookies or third-party trackers on these pages.

Home