Privacy Policy
bWallet is published by The Bitcoin Corporation Ltd and is based on the open-source Yours Wallet (MIT licence). It is not made, reviewed or endorsed by the Yours Wallet authors, and this policy covers only the bWallet mobile app.
Summary
bWallet is non-custodial. We run no servers for the app and don't operate accounts. We don't collect your name, email, contacts, location, advertising identifiers, analytics or crash reports. Your private keys and recovery phrase never leave your device.
What stays on your device
- Your private keys and recovery phrase, encrypted with a key derived from your password and stored in the iOS Keychain (this device only, excluded from iCloud and device backups) or in Android storage encrypted with an Android Keystore key (excluded from Google backups).
- If you turn on Face ID, Touch ID or fingerprint unlock, a key to unlock your wallet is sealed behind your device's biometrics. Your biometric data itself is handled by the operating system and is never available to the app.
- Settings, recent sites and apps you open, chat history cached for bChat, and local caches.
What the app sends over the network
To work as a wallet, the app connects to these third-party services, all over HTTPS:
-
Wallet storage: by default, your wallet's transaction records (outputs, transactions and related
metadata, not your private keys) are synced to a remote wallet storage service operated by 1Sat
(
wallet.1sat.app). You can change the storage provider in Settings → Wallet Backup. - Blockchain services: address, balance, transaction and token lookups, and transaction broadcasts, go to BSV indexing services (1Sat APIs). Transaction links open on WhatsOnChain.
- Wallet messaging: wallet-to-wallet messages use
messagebox.1sat.app. - Market, Media, Apps and Chat: trending tokens, collections, listings and ordinal media are loaded from 1Sat indexing and content services (ORDFS). The Apps tab lists bApps such as bChat, bMovies and bWriter; bChat and other bApps you open talk to their own services, which receive what you send them.
- Names and payments to names: when you send to a $handle, paymail or OpNS name, or look up your own name, the app asks 1Sat indexers (including OpNS), bit-sign and HandCash paymail lookup services to resolve that name to a payment destination. Those services see the name being looked up.
- Market and Chat: token and NFT listings, media and token rooms are loaded from 1Sat indexers. The Market's safety filter runs as part of that loading; if you use Report, the item is hidden on your device and, where a review service is configured, the item reference is sent to us for review.
- Websites you open in the in-app browser receive the requests you make and the responses you approve. They're governed by their own privacy policies.
These services see your IP address and the public blockchain data needed to answer each request. Blockchain transactions are public by nature.
Verified identity (KYC certificates)
Identity verification is optional. If you choose to verify, you are sent to bit-sign, which uses Veriff to check your identity document. bit-sign and Veriff keep the verification record under their own privacy policies. bit-sign then issues a private certificate that is stored in your wallet on your device. bWallet does not upload that certificate anywhere by itself: you choose which details, if any, to reveal to an app or service, and only when you approve it.
Notifications
If you allow notifications, the app shows local alerts about incoming transactions. They're generated on your device; no push notification service is used.
Testing waitlist (this website)
If you join the testing waitlist on this website, we collect your email address, the phone platform you chose (iPhone, Android or Either), the time you signed up, and your browser's user-agent string (to help spot abuse). This is stored by The Bitcoin Corporation Ltd in our own database and is used only to invite you to test bWallet and send testing updates. We do not sell it or share it for marketing. You can unsubscribe from any email, or ask us to delete your entry at any time using the contact details below.
Your choices
- You can delete all app data by signing out in Settings, or by uninstalling the app.
- You can turn biometric unlock off from the lock screen at any time.
- You can change the remote wallet storage provider in Settings → Wallet Backup.
Children
The app is not directed at children under 13.
Changes
We'll post changes to this policy on this page, and in the source repository at github.com/b0ase/yours-mobile.
Contact
Questions about this mobile app: open an issue at github.com/b0ase/yours-mobile/issues.