Privacy Policy | Amadeus Protocol

Amadeus Wallet Privacy Policy

Last updated: July 16, 2026

Amadeus Wallet ("the app," "we," "us") is a non-custodial, self-custody mobile wallet for the Amadeus (AMA) blockchain, published by Amadeus. This policy explains, in plain language, exactly what the app does and does not do with your information.

The short version: Amadeus Wallet does not collect your personal data. There are no accounts, no sign-ups, no email, no KYC, no analytics, no advertising, and no tracking. Your recovery phrase and private keys are generated and stored on your own device and never leave it. This document explains the details, including the one thing that does happen over the network — the app talking to a public blockchain node so your wallet can work.

Information We Do Not Collect

We want to be direct about this, because it is unusual. Amadeus Wallet does not:

  • Require an account, username, email address, or phone number.
  • Ask for or process any identity documents (no KYC/AML onboarding inside the app).
  • Include any analytics, telemetry, or usage-tracking SDK.
  • Include any advertising or attribution SDK, and shows no ads.
  • Include any crash-reporting SDK.
  • Assign you an advertising identifier (IDFA), a device ID, an installation ID, a UUID, or a persistent cookie. Because we do not use the advertising identifier, the app does not need to ask you for App Tracking Transparency permission, and it does not track you across other apps or websites.
  • Sell, rent, or share personal data with data brokers. We have no such data to sell.

We do not build a profile of you, and we have no server-side account where your activity is stored under your identity.

On-Device Data

Everything that identifies your wallet lives on your device, under your control:

  • Recovery phrase and private keys / seeds. When you create a wallet, the app generates a recovery phrase (a BIP-39-style word list) and shows it to you once so you can write it down. When you import a wallet, you supply your existing phrase. These secrets, and the account seeds derived from them, are encrypted on your device.
  • Your password. You set a password that encrypts a single "master vault" holding every account's seed. If you enable Face ID / biometrics, the password can be unlocked biometrically. Biometric data never leaves Apple's Secure Enclave and is never seen by the app or by us.
  • Wallet settings and content you add, such as your list of accounts, your address book (nicknames and addresses you save for recipients), and your network preferences.

All of the above is stored locally. We do not have a copy of your recovery phrase, your password, or your private keys, and we cannot recover them for you. If you lose your recovery phrase, we cannot restore your funds.

Vault backup. The app can export an encrypted backup of your vault. This only happens when you choose to do it, and the backup is handed to your operating system's share sheet (for example AirDrop or Files) at your direction. The app never uploads your backup to us or anyone else. Because a backup file contains your encrypted wallet, treat it as sensitive and store it somewhere safe.

Network Communication

A wallet has to talk to a blockchain to be useful. Here is every network connection the app makes and why.

Amadeus blockchain RPC node (mainnet-rpc.ama.one). To function, the app connects to a public Amadeus blockchain node in order to:

  • read your own AMA balance,
  • read your own transaction history, and
  • broadcast transactions you have signed on your device (Send AMA).

To do these things, the node necessarily receives your wallet's public address and the signed transaction data you are broadcasting. This is inherent to how any public blockchain works: a public address and the transactions associated with it are, by design, public ledger information, and a node cannot relay a transaction without seeing it. As with any internet connection, the node also sees your device's IP address, which is unavoidable for any networked app.

Importantly:

  • The app signs transactions locally on your device. Your private keys are never sent to the node or anywhere else.
  • The app does not attach any device identifier, advertising ID, UUID, cookie, or login token to these requests. The only extra information it sends is a static header naming the software version (X-Client-Type), which does not identify you.
  • Amadeus does not use your address or IP address to track you, advertise to you, or build a profile of you.

Malicious-address safety check. To warn you before you send funds to a known scam or blacklisted address, the app fetches the network's list of malicious addresses from mainnet-rpc.ama.one and then checks your recipient against that list on your device. Your recipient's address is never sent to the server for this check. If the list cannot be fetched, the app "fails open" — it simply proceeds without the warning rather than blocking you.

Custom networks (optional). In Settings you can point the app at a custom RPC node URL of your own choosing. If you do, the network traffic described above goes to that node instead. That node is operated by whoever you chose, and its data practices are outside our control and outside this policy. Only enter custom nodes you trust.

Third Parties

Amadeus Wallet does not embed third-party analytics, advertising, attribution, crash-reporting, or social-login services.

The app is built with Expo / React Native and uses standard on-device components — the camera (for scanning recipient QR codes), Face ID / biometrics (for unlocking and for authorizing the reveal of secrets), the iOS Keychain (for encrypted storage), the clipboard (for copying addresses), and the file/share system (for optional backups). None of these components send your data to us or to third parties. Camera frames are processed on-device to read a QR code and are not stored or transmitted. Copied secrets are automatically wiped from the clipboard after a short delay.

The only component that communicates off your device is the Amadeus blockchain SDK, which talks solely to the RPC node described in "Network Communication" above.

Data Retention & Deletion

Because we don't collect or store your personal data on our servers, there is nothing on our side for you to delete.

Your wallet data lives on your device, and you are in control of removing it:

  • Reset the wallet. In Settings you can reset the wallet, which wipes the stored vault and app data from the device. The "Forgot password" recovery path also resets and wipes the app.
  • Delete the app. Removing Amadeus Wallet from your device deletes its locally stored data, including the encrypted vault in the Keychain.

Before you reset or delete, make sure you have your recovery phrase written down. Resetting or deleting the app removes your keys from the device, and without your recovery phrase your funds cannot be recovered by you or by us.

Data that already exists on the public Amadeus blockchain (past transactions and public addresses) is part of a public ledger and cannot be deleted by us or by you — this is true of all public blockchains.

Children

Amadeus Wallet is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. The app is intended for adults managing their own cryptocurrency.

Security

We designed Amadeus Wallet so that your secrets stay yours:

  • Private keys and seeds are generated on your device and stored in the iOS Keychain, backed by the device's Secure Enclave where available.
  • Your seeds are encrypted into a single master vault using strong, standard cryptography (AES-GCM encryption with a key derived from your password via PBKDF2).
  • Access can be gated by Face ID / biometrics, and revealing your recovery phrase or a private key requires biometric authentication.
  • The app auto-locks after inactivity, throttles repeated failed unlock attempts with an escalating lockout, hides its contents with a privacy overlay when sent to the background, applies screen-capture protection, and auto-wipes copied secrets from the clipboard.

No system is perfectly secure, and because this is a self-custody wallet, the security of your funds also depends on you: keep your recovery phrase private and offline, use a strong password, and be cautious about where you send funds and which custom networks you connect to.

Changes to This Policy

We may update this policy from time to time — for example, if the app adds a new feature that changes how it uses the network. When we do, we will revise the "Last updated" date at the top. Significant changes may also be communicated in the app or on our website. Continued use of the app after an update means you accept the revised policy.

Contact

If you have questions about this policy or the app's privacy practices, contact us at:

[email protected]

Website: ama.one