The short version. Your recovery phrase and private keys are created and stored on your device; we never receive them. The wallet needs no account, email or name. Our servers see the public addresses you ask about, plus ordinary technical data, so they can fetch balances, prices and history. Identity checks happen only for features that legally require them, and are run by a specialist provider. We don't sell personal data and we don't use advertising trackers.
1. Who we are
Hesperion Wallet (the "app") is published by Hesperion Labs ("we", "us"). Hesperion Labs Ltd is being incorporated in England and Wales; its company number and registered office will be added to this page once registration completes. You can reach us at support@hesperion.app.
This policy covers the app and the website hesperion.app. It applies wherever you use them.
2. What stays on your device
The following never leaves your phone and is never sent to us:
- Your recovery phrase and the private keys derived from it. They are encrypted with AES-256 using a key derived from your passcode (PBKDF2-SHA256, 60,000 rounds or more) and kept in your phone's secure storage, bound to that device.
- Your passcode. We store only a salted, derived hash on the device, used to unlock the wallet.
- Biometric unlock. Face ID, Touch ID and Android biometrics are handled by the operating system. The app receives a yes or no, never the biometric itself.
- Your settings, watch-lists, custom tokens and local transaction cache.
Because of this, we cannot recover a lost phrase, reset a passcode, or reverse a transaction.
3. What our servers process
The app talks to servers we run so it can show balances, prices, history and market data. When it does, we process:
- Public wallet addresses in your wallet. These are public on their blockchains, but a list of addresses can identify a person, so we treat them as personal data. We forward them to blockchain data providers to fetch balances, token holdings, NFTs and transaction history. We don't build profiles from them and we don't link them to a name.
- Technical data that comes with any internet request: IP address, app version, device type, operating system version, language and the time of the request. We use it for security, rate limiting and diagnostics. Request logs are kept for up to 30 days.
- Crash and performance reports, sent through Sentry when the app fails: the error, a stack trace, device model, OS and app version. Reports are configured to exclude keys, recovery phrases and balances, and are kept for up to 90 days.
- Price and market requests: the assets you're looking at. No addresses are attached.
We do not use third-party analytics SDKs or advertising identifiers in the app.
4. Optional features that involve partners
Some features are provided with specialist partners. You will see which one before you use the feature, and their own privacy notice applies to what they collect.
| Feature | What happens to your data |
|---|---|
| Buying crypto with a card or bank transfer | The payment partner collects what the law requires of them (identity, payment details). We receive the order status and the wallet address the purchase is delivered to, not your payment details. |
| Swaps and staking | Quotes come from LI.FI and Jupiter; staking uses Lido and the Solana network. The transaction itself is public on-chain. These services see the addresses and amounts involved. |
| NFT marketplace | Listings and offers come from OpenSea's API. Purchases and sales are on-chain. |
| Identity verification | Where a feature legally requires it (for example peer-to-peer trading or a payment card), verification is performed by Persona. We keep the outcome (approved or declined), a reference ID and the date, for as long as the law requires. We do not store your document images or selfie. |
| Payment card | Issued by a licensed card partner, named in the app when the feature is available. The partner holds the card and transaction records required by card-scheme rules. |
5. Why we're allowed to process this
Under the UK GDPR and EU GDPR our legal bases are: performance of a contract (providing the wallet you asked for), legitimate interests (keeping the service secure and working, and fixing bugs), legal obligation (identity checks and record-keeping where the law requires them), and consent (optional features you choose to turn on). You can withdraw consent at any time by turning the feature off.
6. Who we share data with
- Infrastructure and data providers that run our servers and supply blockchain data, prices and error reporting, acting on our instructions.
- The partners named above, when you use the feature they provide.
- Blockchain networks, which publish every transaction you broadcast. That publication is permanent and outside anyone's control.
- Authorities, when a valid legal request requires it, or to protect the rights and safety of users.
We do not sell personal data and we do not share it with advertisers.
7. International transfers
Our providers operate in the United Kingdom, the European Union and the United States. Where data leaves the UK or EU we rely on adequacy decisions or standard contractual clauses (and the UK addendum) with the recipient.
8. How long we keep things
- Request logs: up to 30 days.
- Crash reports: up to 90 days.
- Support emails: for as long as needed to resolve the matter, then up to 24 months.
- Identity-verification outcomes: for the period required by anti-money-laundering law in the relevant jurisdiction.
- Everything on your device: until you delete the wallet or the app.
9. Your rights
You can ask us to access, correct, delete or export the personal data we hold about you, to restrict or object to its processing, and to withdraw consent. Email support@hesperion.app; we reply within one month. You can also complain to the Information Commissioner's Office in the UK or to the data-protection authority where you live.
Data stored only on your device isn't something we hold: deleting the wallet in the app's settings, or uninstalling the app, removes it.
10. Children
The app is for adults. It is not directed at anyone under 18 and we do not knowingly collect data from children.
11. Security
Keys are encrypted on the device as described above. Traffic between the app and our servers uses TLS. Our servers hold no keys and can't sign transactions, so a breach of them cannot move your funds. Report security concerns to support@hesperion.app with "Security" in the subject line.
12. Changes to this policy
When we change this policy we update the date at the top and, for material changes, tell you in the app before they take effect.
13. Contact
Hesperion Labs, support@hesperion.app. Postal details will appear here once the company is registered.