Privacy Policy

Data we collect

We collect only the following, and only when you use a feature that requires it.

• When you sign in with Google: your name, email address, profile photo, and account identifier (UID).
• App preferences: language, display currency, hide-balance setting, biometric lock, and notification settings.
• Device data for notifications: Firebase Cloud Messaging token, operating system, and app version.
• Public wallet addresses you link to your account. Public addresses are open on the blockchain and grant no access to your funds.
• Notes or labels you write yourself for a transaction.
• Usage data and crash reports via Firebase Analytics and Crashlytics.
• If you use Staking: token amount, term, depositing wallet address, and transaction signature.

Data we do NOT collect

This section matters as much as the one above, and holds without exception.

• Your seed phrase and private keys are NEVER sent to our servers. They are stored encrypted on your own device, in the operating system's secure storage (Android Keystore).
• We cannot access, recover, or move funds in your wallet.
• We do not record your balances or transaction amounts in analytics data.
• We do not link your wallet address to your identity in analytics or crash reports.

How data is used

• To provide your account and keep your preferences consistent across devices.
• To send notifications you have enabled.
• To operate Staking, Marketplace, and Referral, including recording our obligations to you.
• To fix crashes and understand which features are used.
• To meet legal obligations and handle disputes.

Third parties

Some data is processed by the following third-party services, each with its own privacy policy.

• Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging, Analytics, Crashlytics, Storage) — account storage, notifications, and analytics.
• Google Sign-In — signing in with your Google account.
• Solana RPC provider (Helius) — reading balances and submitting transactions.
• Raydium — price quotes and token swap execution.
• GeckoTerminal — price history for charts.
• open.er-api.com — currency rates for rupiah display.
• Solscan — block explorer links you open yourself.

Blockchain data is public and permanent

Transactions you send are recorded permanently on the Solana blockchain and are visible to anyone. We cannot delete, alter, or reverse them — including when you request data deletion. This is a property of the technology, not a policy choice.

Storage and retention

Account data is stored on Google Cloud for as long as your account is active. If you delete your account, your personal data is deleted immediately.

Exception: Staking and payout records are retained even after account deletion, because your tokens are held by us and those records are evidence of our obligation to you. Such records are marked as belonging to a deleted account.

Security

Connections to our servers use TLS encryption. Account data is protected by Firestore security rules that restrict each user to their own data. Sensitive server-side keys are stored in Google Secret Manager.

Even so, no system is completely secure. The safety of your funds depends primarily on keeping your own seed phrase secret.

Your rights

You have the right to:

• Access and correct your profile data through the app.
• Delete your account and personal data at any time via Settings → Delete Google Account in the app.
• Request deletion by emailing support@argentum.id if you no longer have access to the app.
• Withdraw consent by signing out and uninstalling the app.

Children

This service is not intended for users under 18, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, we update the effective date on this page. Significant changes will be announced in the app.

Contact us

PT Asia Sistem Teknologi Email: support@argentum.id Website: https://agtm.finance