What we never see
- Your recovery phrase and keys: created on your device, kept in its secure storage (Android Keystore, iOS Keychain), never sent.
- Who you send to: the Shield list is downloaded in full and compared on your device.
- Your identity: no account, no email, no ID.
What our server handles
To show your balances and broadcast your transactions, it sees your public addresses without keeping them. It only keeps what a feature you choose requires: your .mivora username, a report, the encrypted sync, or the tracking of a swap. Every item and how long it is kept are in the privacy policy (French).
What we don't do
- No ads, no ad trackers, no selling of data.
- No commission on swaps: the fees shown go to the networks and providers.
- No trust badge for sale. Shield is free, forever.
- We cannot freeze, block or recover your funds: that is how a wallet where you hold your keys works.
What is not done yet
No external security audit yet, and the code is not public. We will say so here when it changes. The app's limits are listed plainly on the What we can't do page.
Reports and disputes
An address in the Shield list comes from scam cases (Trustify) or verified reports. An address reported by mistake can be disputed, and it leaves the list 24 months after the last report.
Found a flaw?
Email [email protected]. The process is on the Security page.