Privacy Policy
Rellum is a non-custodial wallet. Your recovery phrase and private keys are generated and stored in encrypted form on your device. They are never sent to us, and we cannot access, recover, or move your funds.
We do not ask for an account, an email address, or identity documents to create a wallet. You can use the core wallet without giving us any personal data.
1. Data we process
- Public blockchain data. Wallet addresses, token balances, and transactions are public by nature. We read them through infrastructure providers to show your portfolio and activity.
- Rellum usernames. Registering a username is optional. We store the username, its linked public wallet addresses, and the registration date. Other Rellum users can look up these addresses to pay you. Linking addresses across networks makes their connection public. Ownership signatures prove control of a wallet and do not verify personal identity.
- WalletConnect sessions. When you connect to a dApp, we process the session proposal, the dApp name and URL, and the methods it requests so we can show you an approval screen.
- AI assistant. Messages you send to the in-app assistant are forwarded through our backend to our model provider to generate a reply. Do not include recovery phrases, private keys, or other secrets.
- Payments and identity checks. If you choose fiat on-ramp, off-ramp, bill payment, or similar regulated features, our payments partner collects the information it needs (such as legal name, identity document images, and transaction details) to run know-your-customer and anti-money-laundering checks. Those features are optional.
- Diagnostics. Basic technical data such as app version, device model, operating system, and crash or error logs, used to keep the app working.
2. Data we do not collect
- Your recovery phrase, private keys, or wallet password or PIN.
- Your contacts, precise location, or photo library. Photos are accessed only when you pick an avatar or scan a QR code.
- Advertising identifiers, and we do not sell personal data.
3. Service providers
We use infrastructure providers to operate the app, including blockchain data and RPC providers (such as Alchemy and public RPC endpoints), swap and bridge routing (Li.Fi), WalletConnect for dApp sessions, a model provider for the AI assistant, payment partners for fiat and bill services, and cloud hosting for our backend. They process data on our behalf or as independent controllers under their own terms.
4. Retention
Username registrations and address links are permanent in the current release to prevent a reused name from redirecting payments. Removing a wallet from your device does not remove its username registration.
On-device data stays until you delete the wallet or the app. Backend logs are kept only as long as needed for security and troubleshooting. Payment records are retained by our payments partner for as long as applicable law requires. Public blockchain records cannot be deleted by us or by anyone else.
5. Security
Secrets are encrypted on your device and protected by your PIN and, if enabled, biometrics. Backups are encrypted before they leave the app. No system is perfectly secure, so keep your device protected and your recovery phrase offline.
6. Your choices
You can remove the wallet from the app at any time. Depending on where you live, you may have rights to access, correct, or delete personal data we hold, or to object to certain processing. Contact us to make a request. We may need to verify your identity first. On-chain data is outside our control.
7. Children
Rellum is not intended for anyone under 18. We do not knowingly collect data from children.
8. Changes
We may update this policy as the app changes. The date above shows the latest revision, and material changes will be announced in the app.
9. Contact
Email support@rellum.io.