Omnipath is a non-custodial wallet. Your recovery phrases and private keys are generated or imported, then encrypted, on your device; they never leave it, except, encrypted, in a backup you export yourself. The publisher has no access to them.
What the publisher collects and keeps
The app contains no user account, no usage analytics, no advertising tracking and no crash-reporting tool. The publisher keeps no data from the app: only its relay (see below) handles some requests on the fly, without recording them. Only the emails you choose to send to support are kept, for as long as needed to answer you (see “Retention”).
If you agreed in your iPhone settings to share analytics with app developers, Apple may pass anonymous crash reports and statistics on to the publisher; the app adds nothing to them.
What third-party services see
Blockchains are public: to show your balances, history, prices and NFTs, and to broadcast your transactions, the app queries external services. Services queried directly from your phone receive your IP address, technical connection details (app name and version, iOS version) and, for blockchain services, the public addresses looked up, under their own privacy policies. Services reached through the publisher’s relay do not see your IP address. None receives your recovery phrase or private keys.
| Feature | Services queried |
|---|---|
| Balances, history and sending (Bitcoin, Litecoin, Dogecoin, Bitcoin Cash) | mempool.space, blockstream.info, blockchain.info (Blockchain.com, up to 50 addresses of one account per request), litecoinspace.org, public Blockbook instances (atomicwallet.io), api.haskoin.com (up to 50 addresses of one account per request) |
| Balances and sending (EVM networks: Ethereum, BNB Chain, Polygon…) | public nodes publicnode.com and drpc.org, plus the networks’ official nodes |
| Tron | TronGrid (trongrid.io), public Tron nodes (publicnode.com) |
| Solana | public Solana nodes (solana.com, publicnode.com, solanavibestation.com) |
| TON, Stellar, XRP | toncenter.com, horizon.stellar.org (and Lobstr), xrplcluster.com / ripple.com |
| Cosmos Hub, Osmosis, Celestia, Injective | public nodes publicnode.com, cosmos.directory and Polkachu, Injective’s official node |
| Sui, Aptos, NEAR | Sui: graphql.mainnet.sui.io, publicnode.com, Suiscan, BlockVision; Aptos: Aptos Labs’ nodes and indexer, publicnode.com; NEAR: FastNEAR, the official NEAR node, nearblocks.io |
| History and token discovery | Blockscout, Routescan, Etherscan (only if the publisher enables this service) |
| Tokens, history, token prices and NFTs on EVM networks | Alchemy, through the publisher’s relay (see below) |
| DeFi positions (deposits, loans, staking, liquidity) and EVM transaction history | Zerion (zerion.io) and DeBank (debank.com), through the publisher’s relay: they receive your public EVM addresses, never your IP address |
| Prices and charts | CoinGecko, Binance (fallback): they receive the list of assets shown, not your addresses |
| Swaps (only if you use them) | Trocador (trocador.app), through the publisher’s relay, and the selected exchange: they receive the assets and amount requested, your receiving address and your refund address, not your IP address |
| Logos | public Trust Wallet repository on GitHub (reveals which logos are shown) |
| NFT images and metadata | Alchemy’s CDN, IPFS gateways (Filebase, Pinata, ipfs.io), Arweave and collection websites |
| Connecting to apps (if the feature is offered and you use it) | WalletConnect (Reown relay and verification service) and, while it runs, a connectivity check to Google (clients3.google.com) made by a library it uses; the connected app sees the address you choose to share |
| Tor check (only if you tap “Check my connection”) | check.torproject.org |
If you turn on incoming-funds notifications, the app queries these same services in the background, as iOS decides (at best every 15 minutes).
To limit linking, balances are requested wallet by wallet rather than in a single request; the addresses of one wallet may be sent together. Public blockchain addresses are visible to everyone by nature. Links to block explorers and to this website open in Safari, only when you tap them.
Publisher’s relay
Some requests go through a relay run by the publisher, which adds the providers’ API keys so they are not embedded in the app: today Alchemy, Zerion and DeBank (DeFi positions and EVM history) and, if the publisher adds a key, CoinGecko, TronGrid or Helius. At launch, the app asks the relay for this list. The relay keeps no logs: no IP address, no address looked up, no request content is recorded. To limit abuse, it only keeps a per-IP request counter in memory, never written to disk. It does not forward your IP address to the providers, which only see the relay’s. Public responses identical for everyone (currency lists, prices) may be kept in memory for a few minutes. The relay runs on a server the publisher rents from a hosting provider; connections to it are encrypted (HTTPS). Swap requests also go through this relay, which adds the publisher’s Trocador partner key.
As a fallback only: if a public service queried directly refuses or drops your phone’s connection (for example behind some VPNs or filtered networks), the app may retry that read through the publisher’s relay, then prefer the relay for that service for about ten minutes. This only applies to reads (balances, history, prices), never to the sending of a transaction or a swap request. The relay then sees the public addresses looked up, handles them on the fly without recording them, and the service queried sees the relay’s IP address instead of yours.
Data kept on the device
- Recovery phrases, passphrases and private keys: encrypted (AES-256-GCM) with a key derived from your passcode and a device-specific secret, all kept in the device keychain (“this device only”). If you turn on Face ID, the unlock key is also kept there, protected by Face ID.
- Public addresses and keys (including Bitcoin extended public keys), balances, history, NFTs, contacts and preferences: the app’s local storage. On iOS this storage may be included in the device’s iCloud backups; it contains no secret.
- Encrypted backup (.omnibak): created only when you ask, encrypted with the password you choose and saved wherever you decide.
Resetting the app (Settings › Reset the app, or “Forgot your passcode?” on the lock screen) removes this data from the device, keychain included. Uninstalling it removes its local storage, but iOS may keep the encrypted keychain content: reset the app before uninstalling it.
Permissions
- Camera: reading QR codes only; no image is stored.
- Face ID / Touch ID: unlocking the app and confirming operations; biometric data stays with iOS.
- Notifications (if you enable them): generated locally on the device, with no notification server; the balance check then also runs in the background, as iOS decides.
- Clipboard: read only when you tap “Paste”, or to clear a secret you have just copied; its content is never sent.
Data controller
ESQUADRO INC, 105 SE 7th St, Unit 18, Deerfield Beach, FL 33441-5341, United States. Contact: [email protected]. Representative in the European Union (GDPR Article 27): none designated at this time; for any request, write to [email protected].
Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Requests to blockchain services, directly or through the publisher’s relay | Show your balances, history, prices and NFTs, and broadcast the transactions you sign | Performance of the service you request (GDPR Article 6(1)(b)) |
| Swap requests (only if you use them) | Get offers, create the order with the provider and follow it until it completes | Performance of the service you request (GDPR Article 6(1)(b)) |
| Emails sent to support | Answer your questions | The publisher’s legitimate interest in answering its users (GDPR Article 6(1)(f)) |
Providing this data is not mandatory, but without it the app cannot show your balances or send your transactions, and support cannot answer you. No automated decision-making or profiling takes place.
Retention
- Publisher’s relay: nothing is recorded; requests are processed and forgotten, and the per-IP anti-abuse counter only lives in memory.
- Support emails: kept while your request is handled, then deleted no later than 12 months after the last exchange.
- Data on the device: until you reset the app (uninstalling it does not always remove the encrypted vault from the iOS keychain).
- Third-party services: under their own privacy policies.
How third parties protect data
The publisher embeds no analytics, advertising or tracking tool. The only providers it passes data to are those serving the requests marked “through the publisher’s relay” above and, as a fallback only, the public services in the table that the relay queries in place of your phone (see “Publisher’s relay”); it only uses providers that offer data protection at least equivalent to this policy. Public blockchain services are queried directly by your device, as a web browser would, except as a fallback (see above), under their own privacy policies.
Transfers outside the European Union
The publisher is established in the United States, and several services queried are located outside the European Union, notably in the United States. The data they receive (IP address, public addresses) may therefore be processed outside the European Union. For its own providers, the publisher relies on the standard contractual clauses adopted by the European Commission; a copy of these safeguards is available from [email protected].
Your rights
You can ask for access to your data, its rectification or erasure, restriction of processing, object to it and ask for portability by writing to [email protected]; you will receive an answer within one month. As the publisher holds no data from the app, erasure is done directly on your device (Settings › Reset the app); for third-party services, contact them. You can withdraw camera and notification access at any time in iOS Settings.
Complaints
If you believe your rights are not respected, you can lodge a complaint with a supervisory authority, in particular in your country of residence; in France, the CNIL (www.cnil.fr).
Minors
The app is reserved for people who have reached the age of majority in their country (see the Terms of use). The publisher does not knowingly collect any data about minors.
Website
The omnipathwallet.com website sets no cookie, does not measure its audience and uses no third-party service: text, fonts, images and scripts are served by the website itself. It picks its language from your device settings; if you switch language, that choice is stored in your browser (local storage) and sent to no one. The hosting provider may keep technical logs (IP address, date, page requested) under its own policy.
Changes
This policy may change; the date of the last update is shown at the top. Any significant change, for example a feature that sends new data, will be published before the release of the version concerned.
Contact
For any question: see the Support page, or email [email protected].