Omnia Wallet Privacy Policy

How the Omnia Wallet mobile app handles your data. This policy covers the app specifically — the website has its own policy.

Last Updated: July 2026
Section 1

The Short Version

  • Your keys stay on your device. The app generates an Ed25519 keypair and recovery phrase on your phone and stores them in the operating system's hardware-backed secure store (Android Keystore / iOS Keychain). They are never transmitted to Omnia or anyone else.
  • We do not sell your data, and the app uses no advertising or third-party tracking SDKs.
  • Some features are optional and involve a server; those are described below.
Section 2

What Stays Only on Your Device

  • Your wallet private key, seed, and recovery phrase (secure storage).
  • Your app settings, including the node URL and the app-lock preference.
  • Locally blocked accounts — a moderation list kept on-device that is never sent to any server.
Section 3

Data Sent to an Omnia Node

To show your balance and submit transactions, the app talks to an Omnia Protocol node (the default node, or one you configure in Settings) over HTTPS. The node processes:

  • Your DID — a public identifier derived from your public key.
  • Balance and transaction-history queries.
  • Signed spend authorizations you create when sending UBC.

This is pseudonymous protocol data. UBC is a soulbound utility credit, not money, and the app does not collect payment-card or bank information.

Section 4

Optional Account Sign-In & Social Features

The app offers an optional sign-in (via Google, GitHub, or email through our authentication provider, Supabase) and optional social/news features. If you choose to use them, we process:

  • An account identifier such as your email address (for authentication).
  • A username and an optional profile photo.
  • Any posts, replies, or images you choose to publish, and any moderation reports you file.

If you only use the self-custodial wallet and do not sign in or post, none of this is collected.

Section 5

Device Permissions

  • Internet — to reach the Omnia node and (if used) the sign-in/social backend.
  • Camera — only when you scan a recipient DID QR code. No images are stored or uploaded by the scanner.
  • Biometrics — to unlock the app and confirm signing locally. Biometric data never leaves your device and is handled entirely by the OS.
Section 6

Security

  • Traffic to servers is encrypted in transit (HTTPS/TLS).
  • Private keys are held in the platform secure store and never leave the device.
  • Optional app lock gates access to the wallet behind device biometrics.
Section 7

Content Moderation

The optional social features include reporting and blocking so users can flag or hide objectionable content. Reports are reviewed by the moderation team, and content that breaks the community guidelines is removed. Blocking is handled entirely on your device and is never sent to a server.

Section 8

Your Choices & Deletion

  • Wipe the on-device wallet any time from Settings (irreversible without your recovery phrase — back it up).
  • To delete an optional account and any content you posted, contact us at the address below.
Section 9

Children

The app is not directed to children and is intended for users 18 and over.

Section 10

Changes to This Policy

We may update this policy periodically. The “Last Updated” date reflects the current version, and material changes will be surfaced in the app or its store listing.

Section 11

Contact

For privacy-related inquiries, email privacy@omnia-protocol.org or open a GitHub Security Advisory.