Privacy and security
Non-custodial
Section titled “Non-custodial”Your private keys and recovery words never leave your device. We can’t move your money, freeze it, or reverse a payment.
What stays on your device
Section titled “What stays on your device”- Your keys and recovery words, encrypted with a key derived from your password, in the iOS Keychain (this device only, not in iCloud backups) or in Android storage encrypted with a Keystore key (not in Google backups).
- If you turn on Face ID, Touch ID or fingerprint unlock, the unlock key is sealed behind your device’s biometrics. The app never sees your biometric data.
What our service keeps
Section titled “What our service keeps”To run chat, names, contacts and calls, our service (bit-sign) keeps the data those features need, linked to your wallet’s identity key. If you use push notifications, our push server keeps your device’s push token. We don’t collect your email (unless you choose Continue with Google), phone number, location, advertising identifiers, analytics or crash reports. We don’t sell data or use it for ads.
Full policy: bwalletx.com/privacy.
Staying safe
Section titled “Staying safe”- Never share your recovery words. Nobody from bWalletX will ask for them.
- Never click Remove on the extension to update it (why).
- Check the recipient on the approval sheet. A Bad signature on a name means don’t pay.
- Approvals come as one sheet inside the wallet, never as a run of pop-ups.
- bWalletX is in beta: test with small amounts.
Found a security problem? Email support@bwalletx.com. Please don’t post unfixed security bugs publicly.
Status
Section titled “Status”- ✓ Keys on device only
- ✓ Biometric unlock
- ✓ One approval sheet per connect or payment