Privacy Policy

QuiNVarium Wallet · Version 1.1 · Effective 25 September 2026

1. Who we are

QuiNVarium LLC, a company organised in New Mexico, United States (“QuiNVarium”, “we”), publishes QuiNVarium Wallet (the “app”) and operates the wallet service it connects to at wallet.quinvarium.app, nodes.quinvarium.app, assets.quinvarium.app and support.quinvarium.app. Contact: support@quinvarium.app. Mailing address: 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States.

This policy covers the app and the wallet service. The marketing website quinvarium.app has its own privacy page. Blockchain networks, app stores, your operating system and the independent providers named below have their own practices.

2. No account. Your keys stay on your device

You do not create an account, and we do not ask for a name, email address or phone number. The app creates or imports your recovery phrase and private keys on your device and stores them in the device's protected storage. They are never sent to us or to anyone else, and we cannot restore a lost phrase. Never send a recovery phrase or private key to support; we will never ask for one.

The app also keeps on your device: wallet names, public addresses, the assets you enabled, preferences, price alerts, contacts you saved, and the transaction history it fetched. Your device backups may contain copies of this information; we do not control them.

3. What the wallet service receives

To show balances, history and prices and to send notifications, the app registers an anonymous installation with our service and talks to it while you use the wallet. We receive and keep:

• Installation record — a random installation identifier, platform and app store, device model and operating-system version, app version, device language, chosen currency and notification settings, and, if you turn notifications on, the push token issued by Apple or Google.
• Watched addresses — the public addresses of the wallets in the app, per network, so that our service can fetch their transaction history and tokens and send transaction notifications. Public addresses are public on their blockchains by nature; we do not combine them with your identity.
• Requests — the addresses, assets, amounts, transaction hashes and network names contained in each request, and the technical data any web service sees: your IP address, request time and app version. Requests to blockchain nodes go through our node proxy, so the node operators we use see our server, not you.
• Price alerts you set, tied to the installation record.

We use this information only to provide the wallet features you use, to keep the service working and secure, and to investigate abuse. We do not sell it, do not use it for advertising and do not build profiles.

4. Support chat

Settings → Support opens a chat with us. What you write, the photos or screenshots you attach and your app version are sent to our support system on our own servers and are read by our support staff. Do not include recovery phrases, private keys or card details. Conversations are kept for as long as needed to resolve the request and to keep a record of it, and are deleted on request.

5. Buying with a card (MoonPay)

If you buy crypto with a card, the purchase is made with MoonPay under MoonPay's own terms and privacy policy. To show a quote and open the checkout, our service sends MoonPay the asset, amount, currency, your receiving address and your IP address (MoonPay checks the country of the request). Identity verification and payment details are collected by MoonPay on its pages; we never see your card number or identity documents. We keep the order reference, the receiving address, the amount and the status so the app can show the purchase, and MoonPay sends us status updates.

During the beta, purchases run in MoonPay's test mode, quotes are marked “(test)” and no real payment is taken.

6. Swaps, staking, NFTs and connected apps

• Swap quotes come from independent exchange protocols and aggregators (for example Jupiter, THORChain, Uniswap, PancakeSwap, Relay, Mayan, NEAR Intents). The provider you choose receives the assets, amounts and addresses of the swap and, where the request goes directly to it, your IP address. The swap is executed on-chain from your own address. QuiNVarium charges no fee on swaps.
• Staking is a delegation from your own address to the validator you choose; only the blockchain is involved. Validator lists and rates are provided by our service.
• NFTs are read from the blockchains and public NFT indexes for your addresses and displayed in the app. You can hide a collectible or report it to us.
• WalletConnect connects the app to a third-party app or website you choose through the WalletConnect relay operated by Reown. The relay sees your IP address and the encrypted session; the connected app sees the addresses you approve and the requests you sign. Disconnect a session at any time in Settings.

7. Notifications

Transaction and price-alert notifications are sent through Apple's and Google's push services using the push token from section 3. We do not send marketing notifications. Turn notifications off in the app or in the system settings; the push token is then no longer used.

8. Third parties who process data for us

Our servers are rented from hosting providers and may be located outside your country, including outside the United States. Blockchain node operators, price-data sources, NFT indexes and the swap providers above receive only what their service needs, as described here. Apple and Google deliver notifications. Independent providers (MoonPay, swap protocols, Reown, the apps you connect) act under their own policies.

We disclose information when the law requires it, to protect people and the service from abuse, or to establish or defend a legal claim.

9. How long we keep it

• Watched addresses: while the wallet stays in the app. Deleting a wallet in the app removes its addresses from our service, and the addresses of an installation that has not connected for 120 days are removed automatically.
• Installation records and price alerts: kept until you ask us to delete them (section 10).
• Transaction history for watched addresses: derived from public blockchains and removed with the watched address.
• Purchase orders: as long as needed to show the purchase and to handle disputes and legal record-keeping.
• Support conversations: until resolved and for a reasonable record period afterwards, or earlier on request.
• Server logs with IP addresses: a short rolling period for security and troubleshooting.

Anything recorded on a public blockchain is outside our control and cannot be deleted by us.

10. Your choices and rights

You can delete a wallet, disable notifications, hide collectibles, disconnect WalletConnect sessions and clear the app's data at any time in the app or in your device settings. Depending on where you live, you may have the right to access, correct, delete or receive a copy of the information we hold, to object to or restrict its processing, and to complain to a data-protection authority. Write to support@quinvarium.app or use the support chat; tell us the installation or addresses concerned so we can find the records. Do not send secrets.

11. Age, security and changes

The app is for adults (18+). We do not knowingly collect information from children. The wallet uses your device's protected storage and system authentication; requests to our service are signed by the app and sent over encrypted connections. No system is perfectly secure: keep your device and backups safe, and contact us if you suspect a problem.

When this policy changes, we update the version and date above and show the change in the app where required.