WalletFlow Privacy Policy

WalletFlow LTDA - CNPJ: 61.249.307/0001-15
Last Updated: April 2026

1. Introduction

At WalletFlow LTDA (CNPJ: 61.249.307/0001-15), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our self-custody cryptocurrency wallet platform. We operate in compliance with Brazilian data protection laws, including the LGPD (Lei Geral de Proteção de Dados).

2. Our Self-Custody Privacy Commitment

🔒 Your Privacy is Our Priority

We NEVER store your private keys or seed phrases
We CANNOT access your wallet contents or transaction history
We do NOT sell, rent, or share your personal information
We collect MINIMAL data necessary for app functionality only

3. Information We Collect

Information You Provide:

Email address (for account creation and support)
Device information (for security and performance)
App usage data (anonymized, for service improvement)

Information We Do NOT Collect:

Private keys or seed phrases
Transaction details
Financial information or investment data
Personal identification documents

4. How We Use Your Information

We use the information we collect solely for the following purposes:

To provide and maintain our wallet services
To improve app performance and user experience
To provide customer support and respond to inquiries
To ensure security and prevent fraud
To comply with legal obligations

5. Data Security & Protection

Our Security Measures:

End-to-end encryption for all data transmission
Secure cloud infrastructure with industry-standard protocols
Regular security audits and penetration testing
Access controls and authentication systems
Data backup and disaster recovery procedures

6. Wallet Synchronization and Encrypted Storage

🔐 Cross-Device Synchronization

WalletFlow may sync or back up wallet-related data across devices using encryption; how data is protected can depend on your account, device, and recovery setup. On supported browsers, locking and unlocking the wallet and approving sensitive actions typically use passkeys (WebAuthn). Your device or operating system—not WalletFlow—may prompt you for biometrics (such as Face ID, Touch ID, or fingerprint) or your device screen lock (PIN, password, or pattern) when the platform offers that as a WebAuthn factor. WalletFlow does not give you a separate in-app PIN for this purpose, and we do not collect or store your device passcode, biometric templates, or passkey private keys.

⚠️ CRITICAL: No Access to Private Keys

WalletFlow has no access, either directly or indirectly, to your private keys in readable form. Sensitive material is processed on your device using cryptography. We do not store passkey private keys, your device screen-lock PIN or password, biometric data, or any equivalent that would let WalletFlow, its employees, or third parties unlock your wallet for you.

🔑 User Responsibility

You are responsible for safeguarding your sign-in credentials, recovery options, devices, and registered passkeys. Losing access to your account, devices, or passkeys without working backups may result in permanent loss of access to your wallet and funds.

7. Your Rights Under LGPD

Under Brazilian data protection law (LGPD), you have the following rights:

Right to access your personal data
Right to correct inaccurate or incomplete data
Right to delete your data (right to be forgotten)
Right to data portability
Right to withdraw consent
Right to object to data processing

8. Data Sharing & Third Parties

🔒 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties. We may share data only with trusted service providers who help us operate our platform, and only under strict confidentiality agreements.

9. Data Retention

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain certain information for legal or regulatory purposes.

10. Contact Information

For privacy-related questions or to exercise your rights under LGPD, please contact us at [email protected]. WalletFlow LTDA is registered in Brazil with CNPJ: 61.249.307/0001-15.