Privacy Policy

Last Updated: January 2025

1. Introduction

Valeo ("we," "our," or "us") is a self-custody cryptocurrency wallet application built on the Solana blockchain. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Valeo mobile application (the "App").By using Valeo, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

• Email Address: Collected when you create an account using email authentication

• Authentication Data: When you sign in with Google Sign-In or Sign in with Apple, we receive basic profile information (name, email) as provided by these services

• Username: If you choose to create a custom username for payments (e.g., @username), this is stored and publicly searchable

2.2 Wallet Information

• Public Wallet Addresses: Your Solana wallet public addresses are stored to enable transactions and balance queries

• Private Keys and Seed Phrases: Stored locally on your device only, using iOS Keychain (hardware-backed encryption). We never have access to your private keys or seed phrases

• Transaction History: Stored locally on your device for your convenience

2.3 Device Information

• Device Tokens: Push notification tokens (FCM tokens) to send you transaction notifications

• Device Platform: iOS device information for service optimization

2.4 Usage Information

• App Usage Data: Local preferences, settings, and transaction history stored on your device

• Blockchain Data: Public blockchain data (transactions, balances) accessed from the Solana network

3. How We Use Your Information

We use the information we collect to:

• Provide wallet services and enable cryptocurrency transactions

• Authenticate your identity and secure your account

• Send push notifications about transactions and account activity

• Enable username-based payments (@username feature)

• Provide customer support and respond to inquiries

• Improve app functionality and user experience

• Comply with legal obligations

4. Data Storage and Security

4.1 Local Storage (Your Device)

• Private Keys and Seed Phrases: Stored exclusively on your device using iOS Keychain with hardware-backed encryption

• Transaction History: Stored locally in an encrypted database on your device

• User Preferences: Stored locally on your device

Important: Your private keys and seed phrases are never transmitted to our servers or any third party. You maintain full control and custody of your cryptocurrency assets.

4.2 Cloud Storage (Our Servers)

• Account Information: Email, username, and wallet addresses stored in Supabase (our backend service provider)

• Device Tokens: Push notification tokens stored in Supabase for notification delivery

• Authentication Data: Managed by Supabase Auth

5. Third-Party Services

Valeo integrates with the following third-party services:

5.1 Authentication Services

• Supabase Auth: User authentication and account management

• Google Sign-In: Optional authentication method (Google Privacy Policy applies)

• Sign in with Apple: Optional authentication method (Apple Privacy Policy applies)

5.2 Blockchain Services

• Helius: Blockchain data provider for transaction history and token balances (public blockchain data only)

• Jupiter Aggregator: Token swap service provider (you interact directly with Jupiter for swaps)

5.3 Price Data Services

• Binance API: Cryptocurrency price data

• CoinGecko: Cryptocurrency price and chart data

• Jupiter Price API: Solana token price data

5.4 Notification Services

• Firebase Cloud Messaging (FCM): Push notification delivery service (Google Privacy Policy applies)

5.5 Infrastructure

• Supabase: Backend-as-a-Service provider for database and authentication (Supabase Privacy Policy applies)

Note: These services have their own privacy policies. We encourage you to review them.

6. Permissions We Request

6.1 Camera Access

• Purpose: To scan QR codes for cryptocurrency transactions

• Usage: Only when you actively use the QR code scanner feature

• Storage: We do not store camera images or video

6.2 Biometric Authentication (Face ID/Touch ID)

• Purpose: To securely unlock your wallet and authorize transactions

• Usage: Biometric data is processed locally on your device and never transmitted to our servers

• Storage: Biometric data is stored in iOS Secure Enclave (Apple's secure hardware)

6.3 Push Notifications

• Purpose: To notify you of transaction confirmations and account activity

• Control: You can disable push notifications in your device settings at any time

7. Blockchain Transparency

Important: All transactions on the Solana blockchain are public and permanent. When you send or receive cryptocurrency:

• Transaction details (amounts, wallet addresses, timestamps) are recorded on the public blockchain

• This information is publicly accessible and cannot be deleted

• We cannot control or modify blockchain data

8. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers (Supabase, Firebase) who assist in operating the App, subject to confidentiality agreements

• Legal Requirements: When required by law, court order, or government regulation

• Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users

• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

9. Your Rights and Choices

You have the right to:

• Access: Request access to your personal information

• Correction: Update or correct your account information through the App

• Deletion: Delete your account and associated data (note: blockchain transactions cannot be deleted)

• Opt-Out: Disable push notifications in device settings

• Export: Export your transaction history (stored locally on your device)

To exercise these rights, contact us at: [Your Support Email]

10. Data Retention

• Account Data: Retained while your account is active

• Local Data: Stored on your device until you delete the App or clear app data

• Blockchain Data: Permanent and immutable (cannot be deleted)

• Device Tokens: Removed when you delete your account or disable notifications

11. Children's Privacy

Valeo is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using Valeo, you consent to the transfer of your information to these countries.

13. Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: Private keys encrypted using iOS Keychain with hardware-backed security

• Secure Storage: Sensitive data stored locally with device-level encryption

• Authentication: Multi-factor authentication options (Face ID, PIN)

• Network Security: All API communications use HTTPS/TLS encryption

However: No method of transmission or storage is 100% secure. You are responsible for:

• Keeping your device secure

• Not sharing your seed phrase or private keys

• Using strong device passcodes

• Enabling biometric authentication

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App

• Updating the "Last Updated" date

• Sending you a notification (if significant changes)

Your continued use of Valeo after changes become effective constitutes acceptance of the updated policy.

15. Self-Custody Disclaimer

Valeo is a self-custody wallet. This means:

• You control your private keys: We never have access to your funds

• You are responsible: For securing your device, seed phrase, and private keys

• No account recovery: If you lose your seed phrase, we cannot recover your wallet or funds

• No insurance: Cryptocurrency transactions are irreversible and not insured

16. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: Email: [email protected] Website: www.valeocash.com