Privacy Policy

Last updated: May 17, 2026

Numa Wallet ("we", "our", or "the app") is a Bitcoin wallet application designed with privacy as a core principle. This privacy policy explains how we handle your information.

Our Philosophy

Numa Wallet is built on the belief that financial privacy is a fundamental right. We designed the app to operate with minimal data collection and maximum user control. We do not collect, store, or transmit any personal data to our servers because we do not operate any servers.

Data Stored on Your Device

All data created and managed by Numa Wallet is stored exclusively on your device:

• Wallet data: Extended public keys (xpubs), output descriptors, addresses, transaction records, and UTXO sets are stored in a local SQLite database on your device.
• Seed phrases (Signer mode): If you use the app as an air-gapped signer, your BIP39 seed phrase is encrypted using Argon2id key derivation and AES-256-GCM encryption, and stored in your device's secure enclave (iOS Keychain or Android Keystore).
• Security credentials: PIN codes and biometric authentication tokens are managed by your device's native secure storage and never leave the device.
• Preferences: Settings such as your preferred currency, language, and display options are stored locally.

Network Communications

In watch-only mode, the app communicates with public Bitcoin blockchain APIs (Blockstream Esplora and Mempool.space) to:

• Fetch address balances and transaction history
• Retrieve current fee rate estimates
• Broadcast signed transactions to the Bitcoin network
• Fetch exchange rate data for fiat conversion

These requests contain only Bitcoin addresses and transaction data necessary for wallet functionality. No personal identifiers, device IDs, or analytics tokens are included.

In signer mode, the app blocks all network connections at the application level. No data is sent or received over the internet.

Data We Do NOT Collect

• Personal information (name, email, phone number)
• Device identifiers or fingerprints
• Location data
• Usage analytics or telemetry
• Crash reports
• Advertising identifiers
• IP addresses (we operate no servers to log them)

Third-Party Services

The app interacts with the following third-party services solely for blockchain data:

• Blockstream Esplora API — primary source for blockchain data. Subject to Blockstream's privacy policy.
• Mempool.space API — fallback source for blockchain data. Subject to Mempool's privacy policy.

These services may log the IP address of requests made from your device. We recommend using a VPN or Tor if IP-level privacy is important to you.

Data Sharing

We do not share, sell, or transfer any user data to third parties. Since we do not collect any data, there is nothing to share.

Data Retention and Deletion

All data is stored locally on your device. You can delete all app data at any time by:

• Using the "Wipe device" function within the signer app
• Deleting wallets individually from the app
• Uninstalling the app, which removes all associated data

Security

We employ industry-standard cryptographic practices to protect data stored on your device:

• Seed phrases are encrypted with Argon2id + AES-256-GCM
• Secure storage uses platform-native APIs (iOS Keychain, Android Keystore)
• Optional PIN and biometric authentication
• Auto-wipe after excessive failed authentication attempts

Children's Privacy

Numa Wallet is not directed at children under 13. We do not knowingly collect any information from children.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected in the "Last updated" date at the top of this page and in the app's next release.

Contact

If you have questions about this privacy policy, you can reach us through our project's contact channels.