Effective: 24 September 2026. Version 1.4.0. This policy describes how HBVNK LLC handles information when you use HBVNK. Contact privacy@hbvnk.com.
HBVNK does not receive or store your seed phrase or private keys.
We process information to provide requested software, secure and debug it, comply with law and sanctions obligations, document agreements, respond to support, prevent fraud, and establish or defend legal claims. Depending on location, the basis is performance of a contract, legitimate interests in security and service operation, compliance with legal obligations, or consent where required.
HBVNK does not use the compliance data described here for advertising or cross-company tracking.
Raw application-level IP addresses are not included in capability or acceptance records; infrastructure may process them for delivery and security under the stated short retention schedule. Edge-derived country/subdivision and the policy decision may be retained with security or acceptance evidence. Infrastructure IP logs are normally deleted or de-identified within 30 days unless an incident, abuse investigation, or law requires longer retention.
We use hosting, edge delivery, database, RPC, monitoring, security, email/support, App Attest, Expo push delivery, Apple Push Notification service, Firebase Cloud Messaging, and analytics processors under contractual safeguards. Public wallet requests are visible to networks and RPC/data providers. Optional social wallets use Privy and the identity provider you select; their authentication and wallet services process information under their own policies, including https://www.privy.io/privacy-policy. When you initiate a fiat purchase, HBVNK sends the information needed for its preflight and the purchase request to MoonPay. MoonPay controls its payment and any required identity verification and processes information under its own privacy information. MoonPay may use service providers, including identity verification providers, under its own arrangements. We may disclose information to authorities or advisers where legally required, to protect users, or in a corporate transaction subject to appropriate safeguards. We do not sell personal information.
Capability cache records expire according to their policy TTL. Push recipient, outbox, and provider-receipt detail is normally deleted after 30 days; inactive notification installations are normally deleted after 90 days. Operational/security logs are normally retained up to 90 days; support records up to 24 months after closure; purchase references, amounts, networks, provider statuses, settlement evidence, preflight information, and legal acceptances may be retained for the applicable limitation period, generally up to seven years, where needed to operate the service, establish compliance, or resolve disputes. MoonPay and its service providers set their own retention periods for payment and verification information submitted in their flow. We may retain less or more when reasonably necessary for security, law, disputes, or deletion obligations.
HBVNK LLC operates from the United States and providers may process data in other countries. Where required, we use contractual clauses or other lawful transfer mechanisms and assess appropriate safeguards.
Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and may appeal a refusal or complain to a competent authority. You may disable notifications in device settings at any time without losing wallet access. A public blockchain cannot be altered by HBVNK. To exercise rights, email privacy@hbvnk.com with enough information to verify and scope the request. See /legal/deletion/.
Removing a social wallet from this device removes its local HBVNK record; it does not delete the Privy account, the linked Google or Apple account, or blockchain assets. Provider-held data follows the provider's retention and deletion process. Preserve a working access method or export the wallet before requesting account deletion.
HBVNK is not for persons under 18. We do not knowingly collect personal information from children. Contact privacy@hbvnk.com if you believe a child has provided information.
We use access controls, encryption in transit, environment separation, device attestation, and data minimization, but no system is risk-free. Material changes receive a new effective date and version. The controlling policy is /legal/privacy/.