Privacy Policy

Data that stays on your device

Private keys, recovery phrases, passwords, vault encryption keys and biometric data are handled locally. iArcana does not intentionally transmit or store this private material on its servers.

Wallet preferences, imported token settings, hidden tokens, local Gateway activity, Daily Briefs and other local records may be stored on your device. Removing the app or clearing its storage may permanently remove this data.

Public blockchain and wallet data

To display balances, tokens, activity, approvals, contract information and transaction status, iArcana sends public wallet addresses, contract addresses, transaction hashes and blockchain queries to configured RPC endpoints, explorers and supported infrastructure providers.

Blockchain activity is public by design. Transactions signed and broadcast by you become part of the relevant network's public record.

Mind and DeepSeek

Mind is optional and requires a DeepSeek API key supplied by the user. When Mind is enabled, iArcana may send the user's question, selected app context and non-secret wallet data to DeepSeek so it can answer.

When Mind is used inside the in-app dApp browser, the content of the page you are viewing (visible text, links and detected addresses) is included in the prompt sent to DeepSeek so Mind can answer about that page.

iArcana is designed to exclude recovery phrases, private keys, passwords, vault keys, biometric data and the DeepSeek API key from Mind prompts. Users should never type private material into chat.

WalletConnect, Circle and external services

WalletConnect connections share the public wallet address and approved session information with the selected dapp through Reown infrastructure. Circle-powered Gateway and CCTP flows communicate with Circle services and supported blockchain networks as required to prepare and complete the requested operation.

Each external provider operates under its own terms and privacy practices. See the Third-Party Services page for details.

In-app dApp browser

iArcana includes a browser for visiting dApps. Browsing history, cookies and the local storage of the sites you visit are kept on your device; clearing the browser data or the app storage removes them. The sites you open are independent third parties that receive standard web request data and run their own code.

When you connect a site through the browser, iArcana shares your public wallet address with that site, and connection and signing requests are shown for your explicit approval. Typing a non-URL in the address bar performs a search through Google, and site icons are fetched from Google's favicon service.

Retention and deletion

iArcana does not provide a hosted user account. Data stored locally remains until the user removes it, clears app storage or uninstalls the app. Public blockchain records cannot be deleted by iArcana.

Requests sent to external services may be retained by those providers according to their own policies.

Security and contact

We use local encryption and deliberate signing flows to reduce exposure, but no wallet or software system can guarantee absolute security. For privacy questions, contact contact@iarcana.xyz.