SOVEREIGN KEY LLC · EFFECTIVE DECEMBER 1, 2026
Privacy Policy
How SovereignKey handles personal information in the app and on its website.
Last updated: December 1, 2026. This Privacy Policy explains what Sovereign Key LLC, a Texas limited liability company (“SovereignKey”, “we”) collects through the SovereignKey app and website, why, who receives it, and your choices.
1 The short version
- We never receive your private keys, your 12-word backups or your PIN.
- We do not ask for your name, government ID or date of birth.
- We collect your email address and phone number, information about your registered devices, and the public information about your wallet that lets us show your balance.
- We can see your wallet’s addresses, balance and transaction history. We do not sell personal information or use it for advertising.
2 What we collect
| Category | What | Why |
|---|---|---|
| Contact details | Email address, phone number | Account verification, security alerts, support |
| Device and sign-in information | Registered device identifiers, Apple App Attest results, push notification token, passkey public keys | Sign-in, device registration, alerts, preventing fraud |
| Wallet information | Your wallet’s configuration file and extended public keys, which reveal your wallet’s addresses, balance and transaction history | Showing balances, preparing transactions, Backup Key signing, recovery |
| Key-protection data | A wrapping key for your Cloud Key; attempt counters and a per-record credential for the PIN limit | Protecting your Cloud Key. These cannot open your Cloud Key on their own. |
| Signing records | Backup Key requests, approvals and timestamps | Security, audit, dispute resolution |
| Subscription data | An anonymous customer ID and receipts from Apple or Stripe | Billing |
| Technical data | IP address and request metadata seen by our servers and network providers | Security and operations |
| Support | What you send us | Answering you |
What we do not collect: your private keys, 12-word backups, PIN, passwords (sign-in uses passkeys only), Cloud Key ciphertext (it stays in your iCloud), card numbers (Stripe or Apple handle them), or identity documents (Stripe handles identity checks for bitcoin purchases).
3 Who receives it
| Recipient | Purpose | What they receive |
|---|---|---|
| Apple | App Store, in-app purchase, App Attest, push notifications, iCloud | Device and subscription data; your encrypted Cloud Key in your own iCloud |
| RevenueCat | In-app subscription management | Anonymous customer ID, receipts |
| Stripe | Web billing; bitcoin purchases (Stripe is the seller) | Card and identity details you give Stripe; one receive address per purchase |
| Twilio | Verification codes and SMS alerts | Phone number, email address |
| Postmark | Email alerts | Email address |
| Google Cloud | The PIN-limit service for your Cloud Key | IP address, record identifier, blinded PIN data; no contact details |
| Independent cosigner (from public launch) | Approves the software that protects the PIN limit | No personal information |
| Cloudflare | Network security and delivery | IP address, traffic metadata |
| Backblaze | Encrypted backups | Encrypted data only |
- We may disclose information when the law requires it, to protect rights and safety, or in a merger or acquisition, subject to this Policy.
- We do not sell or share personal information for cross-context behavioural advertising. We use no third-party analytics or advertising SDKs.
4 Where and how we store it
- Our servers are SovereignKey-owned hardware in a secured office building in Dallas, Texas. Wallet information and wrapping keys are encrypted at rest under keys held in a hardware security module.
- Backups are encrypted before they leave our servers.
- Access is limited to SovereignKey officers using hardware security keys.
5 How long we keep it
| Information | Kept | Why |
|---|---|---|
| Contact details, device information | While your account is open, plus 12 months | Security alerts, fraud investigation, support |
| Wallet information (configuration file, extended public keys) | While your account is open, plus 5 years | Lets us return your configuration file if you lose it, even after you close your account |
| Signing records | 7 years from the signing | Audit, disputes, legal obligations |
| Subscription records | 7 years | Tax and accounting |
| Technical logs | 90 days | Security and operations |
| Encrypted backups | Daily: 90 days. Monthly: 2 months. | Disaster recovery |
- You can ask us to delete your wallet information earlier. If you do, we cannot return your configuration file later.
6 Your choices and rights
- You can update your contact details in the app and close your account at any time. Closing your account does not affect your bitcoin: you keep your keys and can use open-source software without us.
- Depending on your state, you may have the right to access, correct, delete or obtain a copy of your personal information. Email matt@sovereign-key.com. We will verify requests through your registered device and will not discriminate against you for exercising these rights.
- You can turn off push notifications in iOS Settings. Security alerts by email and SMS cannot be turned off while your account is open.
7 Security
- We protect information with encryption, hardware security modules, access controls and monitoring. No system is perfectly secure. We will notify you of a security incident affecting your information as the law requires and within 72 hours of confirming it.
8 Children
- The Service is not for anyone under 18. We do not knowingly collect information from children.
9 Changes
- We will notify you in the app or by email before a material change to this Policy takes effect.
10 Contact
- Sovereign Key LLC, 5530 Martel Ave, Dallas, Texas 75206. matt@sovereign-key.com