Your keys. Your iPhone. Nothing else.

This Privacy Policy applies to the suiflare — Wallet for SUI iOS application (Bundle ID app.suiflare.wallet) and to the website at suiflare.com (together, the "Services"). "suiflare", "we", "us" and "our" refer to the independent developer of the Services, who is responsible for the limited personal data described below.

By using the Services you acknowledge this policy. If you do not agree with it, please do not use the Services.

suiflare ("suiflare — Wallet for SUI") is a non-custodial software wallet for the Sui network. suiflare does not create user accounts, does not custody user funds, and does not operate a cryptocurrency exchange, swap broker, or financial intermediary.

The table below lists every category of data the Services touch, how it is obtained, why, who receives it and how long it is kept. We do not collect any data that is not listed here.

We do not collect your name, email address (unless you email us), phone number, contacts, location, photos, browsing history, device identifiers, advertising identifiers (IDFA), or usage analytics.

• Your 12- or 24-word BIP-39 recovery phrase and derived Ed25519 private keys are encrypted locally on your iPhone using AES-GCM with an HKDF-SHA256 key derived from your 6-digit passcode and stored in the iOS Keychain (kSecAttrAccessibleWhenUnlockedThisDeviceOnly).
• If you enable Face ID, your passcode is protected by a hardware-backed SecAccessControl entry bound to .biometryCurrentSet.
• Your recovery phrase, private keys, and passcode are never transmitted to suiflare or any external server. All transaction building and Ed25519 intent signing occur locally on your device.

• Sui GraphQL Full Nodes (https://graphql.mainnet.sui.io/graphql, testnet, devnet): To display your token balances, owned objects, transaction activity, current epoch, and reference gas price, and to broadcast signed Programmable Transaction Blocks (PTBs), the app sends your public 0x wallet address and signed transaction bytes directly to the selected Sui GraphQL endpoint. As with any direct HTTPS request, the Sui node operator sees your device's IP address and the queried public wallet address.
• CoinGecko Market Data API (pro-api.coingecko.com / api.coingecko.com): To display USD token prices, 24-hour price changes, market capitalization, 24-hour volume, and the 7-day SUI price chart, the app requests public market data from CoinGecko. These requests do not include your wallet address, balances, or recovery phrase. CoinGecko receives standard HTTPS request metadata, including your device's IP address.

The app communicates only with the providers listed in Section "Network Requests & Third-Party Endpoints". We share with them only the minimum data technically required for the feature you use, and only for that purpose. These providers act under their own privacy policies, which provide protection for the request data they receive:

• Sui GraphQL full-node operators — receive your public address, signed transactions and IP address in order to serve and broadcast blockchain data.
• CoinGecko — receives anonymous requests for public price data (no wallet data). See coingecko.com/en/privacy.
• Apple — distributes the app through the App Store. If you have opted in to "Share with App Developers" in iOS Settings, Apple may provide us with aggregated, anonymized crash and usage statistics under Apple's Privacy Policy. The app itself contains no crash-reporting code.

We do not sell personal data, do not share it for cross-context behavioral advertising, and do not use it for profiling, data brokering, or training AI models. We will never require a third party to receive more data than listed in this policy.

• NSPrivacyTracking: false (No cross-app or third-party tracking).
• NSPrivacyCollectedDataTypes: Declares NSPrivacyCollectedDataTypeOtherFinancialInfo (public blockchain address sent to Sui RPC nodes strictly for AppFunctionality, not linked to user identity, not used for tracking).
• NSPrivacyAccessedAPITypes: Declares NSPrivacyAccessedAPICategoryUserDefaults with reason CA92.1 (storing local app preferences such as selected network, active account index, appearance mode, and Face ID toggle state on the device).

• Face ID (NSFaceIDUsageDescription): Used solely on-device to unlock suiflare, reveal your recovery phrase in Settings, and approve outgoing SUI transfers. Biometric data is processed exclusively by iOS / Secure Enclave and is never accessed by suiflare.
• Camera (NSCameraUsageDescription): Used solely to scan recipient QR codes on the Send screen. Camera frames are processed in real time on-device and are never recorded, stored, or transmitted.
• Clipboard (UIPasteboard): Read only when you explicitly tap the Paste button on the Send screen.

suiflare contains zero third-party analytics SDKs, crash reporters, advertising networks, or behavioral trackers.

The limited data described above is used only to:

• display your balances, objects and transaction history, and broadcast transfers you approve;
• show public market prices and network telemetry;
• remember your app preferences on your device; and
• respond to support requests you send us.

Where the EU/UK GDPR applies, we rely on performance of a contract (providing the wallet features you request), our legitimate interests (answering support requests and keeping the Services secure), and your consent for optional device permissions such as Camera and Face ID, which you can withdraw at any time.

Because suiflare has no user accounts or backend servers, all personal wallet data resides solely on your iPhone. You can permanently erase all local data at any time by navigating to Settings → Reset App & Delete All Data, confirming that you have backed up your recovery phrase, and typing DELETE. This immediately wipes all Keychain entries (app.suiflare.wallet), biometric tokens, UserDefaults preferences, and URLCache responses. Public transactions previously broadcast to the Sui blockchain are immutable and cannot be erased from the public ledger.

A step-by-step guide is available on our Support & Data Deletion page.

Depending on where you live (for example under the GDPR, UK GDPR, or California CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and not to be discriminated against for exercising these rights.

Because the app keeps wallet data only on your iPhone, you can exercise most of these rights directly and instantly:

• Revoke permissions: iOS Settings → suiflare → turn off Camera, or Settings → Face ID & Passcode to remove biometric access. You can also disable Face ID inside the app.
• Delete all data: Settings → Reset App & Delete All Data (see the Data Retention section), or simply delete the app.
• Support emails: write to support@suiflare.com to access or delete any correspondence we hold. We respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. Data written to the public Sui blockchain cannot be modified or deleted by anyone, including us.

• Recovery phrase and keys encrypted with AES-GCM using an HKDF-SHA256 key derived from your passcode.
• Secrets stored in the iOS Keychain with kSecAttrAccessibleWhenUnlockedThisDeviceOnly — excluded from iCloud and device backups.
• Face ID, recovery-phrase reveal and every outgoing transfer gated by live passcode / biometric verification.
• All network traffic uses HTTPS (TLS) with Apple App Transport Security enforced.
• No servers or databases operated by us, so there is no central store of user data that could be breached.

The Services are not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

Sui node operators and CoinGecko may process request data in countries other than your own, including the United States. Where required, such transfers rely on appropriate safeguards offered by those providers, such as Standard Contractual Clauses. Wallet secrets are never transferred anywhere.

• No cookies, analytics or trackers. The site stores only your light/dark appearance choice in your browser's local storage.
• Live demo & status checks: your browser requests public price data from CoinGecko and public network data from Sui GraphQL nodes. The interactive wallet demo uses simulated data only — it never asks for or handles real keys.
• Support form: the form validates your input in your browser and opens your own email app; we receive only what you choose to send.
• Hosting logs: like any website, our hosting provider may briefly log IP addresses and request metadata for security and reliability.
• Do Not Track: because we do not track you across sites, no change in behavior is needed when your browser sends a Do Not Track or Global Privacy Control signal.

suiflare ("suiflare — Wallet for SUI") is an independent, non-custodial application and is not affiliated with, endorsed by, or sponsored by the Sui Foundation, Mysten Labs, Inc., or any token issuer.

We may update this policy when the app or the law changes. We will revise the "Last Updated" date at the top of this page and, for material changes, note them in the App Store release notes before they take effect.

For any privacy question or request, email support@suiflare.com or use our Support page. We aim to reply within 2 business days and to fulfil privacy requests within 30 days.