Privacy Policy

• Your 12-word recovery phrase never leaves your device unencrypted.
• We collect the minimum information needed to run the wallet: an email for sign-in, your chosen username and full name, and per-device sign-in metadata.
• We do not sell personal data and we do not run advertising trackers.
• Blockchain transactions you sign are public by design on their respective networks — that is a property of the network, not Legereum.

The Legereum backend stores:

• Account: email, username, full name, optional recovery email, account creation date.
• Encrypted wallet vault: the AES-GCM ciphertext of your recovery phrase and a random IV. The password that unlocks it is never sent to us. Without your password the vault is unreadable.
• Public addresses: your Ethereum, Bitcoin and Solana public addresses (needed to display balances and receive funds).
• Sign-in events & known devices: user agent, timezone, screen size, and a stable device hash — used to warn you about sign-ins from a new device.
• Wallet activity records: withdrawal requests, admin gas fee requests, and internal admin-managed USDT ledger entries.
• Client error reports: stack traces of crashes to help us fix bugs.

Your recovery phrase, private keys, and wallet password stay on your device. They are only ever transmitted to our servers in encrypted form (the vault ciphertext), and only your password can decrypt them.

• In transit: all communication with our backend uses HTTPS (TLS 1.2+).
• At rest: our database provider encrypts stored data at rest. Wallet vaults are additionally encrypted client-side with your password before upload (AES-GCM 256).
• Access control: row-level security policies restrict each user's data to that user; only a small number of authorised administrators can view support-related records.
• Biometric unlock uses your device's WebAuthn / passkey APIs; biometric data never leaves your device.

• Hosting & database: Supabase (managed via Lovable Cloud) and Cloudflare Workers.
• Blockchain data: public RPC endpoints and block explorers (Etherscan, BscScan, mempool.space, Solscan, Blockscout).
• Prices: CoinGecko.
• Cross-chain bridging (optional): LI.FI / Jumper aggregator, only when you open the bridge feature.

Each service has its own privacy policy. When you interact with a blockchain network or block explorer, your public wallet address is visible to that network — this is how blockchains work.

Legereum does not use advertising cookies or third-party marketing trackers. We use local storage on your device to keep your session and cache preferences.

• Account and vault data: kept until you request deletion.
• Sign-in events and known devices: 12 months, then rotated.
• Client error reports: 90 days.

If you are in the EU, UK, or a jurisdiction with similar rules, you have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. To exercise these rights, email support@legereum.tech from the address associated with your account. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

You can request account deletion at any time by contacting support. Deleting your Legereum account removes your profile, encrypted vault, sign-in history, and admin-managed balances from our database. It does not and cannot delete on-chain transactions or public addresses recorded on public blockchains.

Legereum is not intended for anyone under 18.

We will update this page and the “Last updated” date when our practices change materially.

Data protection questions: support@legereum.tech