Privacy Policy

This Privacy Policy explains how the publisher of Mo'Stash (“Mo'Stash”, “we”, “us”) handles information in connection with the Mo'Stash mobile application and the website mostash.io (together, the “Service”).

Mo'Stash is a non-custodial app. Our guiding principle is simple: we are built so that we cannot see or hold what matters most — your keys and your funds.

1. What we do NOT collect

• No account, no KYC, no mandatory email to use the app.
• Your private keys and recovery phrase are generated and stored only on your device, in the device's secure storage (encrypted). They are never transmitted to us or to anyone.
• As a result, we have no access to your assets and cannot freeze, move or recover them.

2. Information processed when you use the Service

Using a blockchain wallet inherently involves some data being processed by technical infrastructure:

• Public wallet addresses are sent to public blockchain RPC node providers (Ethereum, Arbitrum, BNB Chain) and to the 1inch API in order to display balances and build swap transactions.
• IP address: when the app contacts those third-party services, they may see your IP address as part of the request. We do not use it to identify you, and we keep no more than minimal technical logs (if any).
• Subscription status (Free / Pro) is managed through Stripe, our payment processor. Payment-card details are handled by Stripe (a PCI-DSS-certified provider), not by Mo'Stash. An optional recovery email may be provided solely to restore a subscription after changing or reinstalling on a device.
• Fiat on-ramp (if enabled): buying crypto with a card is handled by third-party providers (e.g. Moonpay / Transak), and any identity verification (KYC) is performed by them, under their own policies — not by Mo'Stash.
• Diagnostics: we may use aggregate crash- and usage-diagnostics to keep the app reliable. Any such data is aggregated and is not used to identify you personally, is never linked to your wallet keys, and can be disabled where the app offers the option.

On-chain data (your transactions and balances) is, by the nature of public blockchains, publicly visible to anyone — this is not something Mo'Stash controls.

The website (mostash.io)

The marketing website is separate from the app and collects very little:

• Waitlist email: if you choose to join the launch waitlist, we store the email address you submit (and the page or campaign tag you arrived from) solely to notify you at launch and send occasional product updates. You can ask us to delete it at any time at support@mostash.io.
• Privacy-first analytics: we record aggregate page views and an approximate country. The country is derived from your IP address at the moment of the request and the IP address itself is never stored. We set no advertising cookies and perform no cross-site tracking or advertising profiling.

3. Third-party services

The Service relies on independent third parties, each with its own privacy policy, including: public RPC node providers, 1inch, LI.FI, Stripe (payment processing), and — where enabled — fiat on-ramp providers (e.g. Moonpay / Transak). We encourage you to review their policies.

4. How we use information

Any information processed is used only to operate and secure the Service: to display your balances, build and broadcast the transactions you initiate, manage your subscription, and maintain reliability. We do not sell or rent your data, and we do not use it for advertising profiling.

5. Data retention

Sensitive data (keys, recovery phrase) lives only on your device and is removed when you uninstall the app or wipe the wallet. We retain server-side data only as long as necessary for the purposes described above or as required by law.

6. Your rights

Depending on where you live (e.g. the EU/EEA under the GDPR, or California under the CCPA), you may have rights to access, correct, delete, or restrict the processing of personal data we hold about you, and to object to certain processing. Because we hold very little personal data, some requests may relate to data held by the third parties listed above. To exercise your rights, contact us (Section 9).

7. Children

The Service is intended for users 18 years and older and is not directed at children. We do not knowingly collect data from children.

8. International transfers

The third-party providers we rely on may process data in countries outside your own, including outside the EU/EEA. Where required, such transfers rely on appropriate safeguards.

9. Changes & contact

We may update this Policy from time to time; material changes will be notified through the Service or website. Questions or requests? Contact us at support@mostash.io.

This Policy is governed by French law; for users in the EU/EEA it is read consistently with the GDPR. You also have the right to lodge a complaint with your local data-protection authority (in France, the CNIL).

The best privacy guarantee is architectural: Mo'Stash is non-custodial, so your keys and assets never leave your device and never reach our servers.