XM Wallet

XM Wallet Privacy Policy

Effective Date:

XM Wallet (XM,” “we,” “our,” or “us”) is committed to safeguarding the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our non-custodial, multi-chain wallet application, browser extension, website, and related services (collectively, the “Services”).

By accessing or using the Services, you consent to the practices described in this Privacy Policy. If you do not agree with this Policy, you should discontinue use of the Services.

1. Our Privacy Principles

At XM Wallet, we follow a privacy-first, user-controlled approach:

  • Self-Custody: We do not store or manage your private keys, seed phrases, or digital assets. You maintain full ownership and control at all times.
  • Data Minimization: We collect only what is strictly necessary to operate and improve our Services.
  • Transparency: We clearly explain how data is handled, and we avoid hidden practices such as selling user data.
  • Security: We apply technical and organizational safeguards to protect any limited data we process.

2. Information We Do Not Collect

Unlike custodial wallets or centralized exchanges, XM Wallet does not:

  • Collect or retain your private keys, seed phrases, or wallet passwords;
  • Monitor, intercept, or store your on-chain transactions;
  • Control or access your digital assets;
  • Require account registration or identity verification (KYC) to use the wallet.

All sensitive cryptographic material remains encrypted locally on your device and under your exclusive control.

3. Information We May Collect

To operate, secure, and improve our Services, we may collect the following categories of information:

(a) Device and Technical Information

  • Device type and model, operating system version, browser type;
  • IP address (collected temporarily for network requests, not permanently stored);
  • Crash logs, error diagnostics, and performance analytics.

(b) Usage Information

  • Frequency and duration of use of specific wallet features;
  • Interactions with in-app features such as token swaps, NFT browsing, or DApp connections;
  • Non-identifiable aggregated data about transaction execution success/failure rates.

(c) Communication Data

If you contact us via support channels, we may collect:

  • Email address or other contact information you voluntarily provide;
  • Content of your inquiries, bug reports, or feedback.

(d) Website Data (if applicable)

When visiting our website, we may collect:

  • Standard server log files;
  • Cookies or similar technologies to improve browsing experience, remember preferences, and conduct analytics.

You may disable cookies in your browser settings, though some website features may be limited.

4. How We Use Your Information

We use the limited information we collect solely for the following purposes:

  • Service delivery – to enable the functionality of the wallet and website.
  • Improvement and optimization – to analyze usage patterns, troubleshoot crashes, and refine features.
  • Security – to detect suspicious activities, prevent abuse, and protect the integrity of our Services.
  • Compliance – to meet applicable legal obligations, if required by law.
  • Customer support – to respond to inquiries and provide assistance.

We never sell user data to third parties for advertising or marketing purposes.

5. Data Retention

  • Technical logs and analytics data are stored only for as long as necessary to fulfill their purpose, after which they are aggregated or anonymized.
  • Support-related communications may be retained for record-keeping and compliance, typically no longer than 24 months unless legally required.
  • We do not retain private keys, transaction history, or identifiable financial data.

6. Blockchain Transparency

Please note that blockchain networks are inherently public ledgers. Transactions you broadcast (e.g., token transfers, NFT purchases) are permanently recorded on the blockchain and may be publicly accessible to anyone.

While your wallet address is pseudonymous, it may still be possible for third parties to analyze on-chain activity and infer associations. XM Wallet has no ability to modify or erase blockchain data.

7. Third-Party Services and Integrations

Our Services may interact with third-party DApps, decentralized protocols, or blockchain networks. Please be aware:

  • We do not control the data practices of third-party services;
  • Interacting with DApps may expose your wallet address and transaction details to those parties;
  • You are encouraged to review the privacy policies of any third-party services you use.

8. Data Security

We implement appropriate technical and organizational measures to safeguard the limited information we collect, including:

  • Encryption in transit and at rest where applicable;
  • Access controls and monitoring;
  • Regular audits of security practices.

However, no system is entirely secure. You are responsible for securing your device, keeping your wallet credentials private, and maintaining safe backup practices for your seed phrase.

9. International Data Transfers

Our Services may process information on servers located outside your home country. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, please note that we may transfer information to jurisdictions that may not provide the same level of protection.

We will take reasonable steps to ensure that adequate safeguards are in place when such transfers occur.

10. Your Rights

Depending on your jurisdiction (e.g., under GDPR or CCPA), you may have the right to:

  • Access the information we hold about you;
  • Request correction or deletion of your information;
  • Object to or restrict certain processing activities;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with a supervisory authority.

To exercise these rights, please contact us at support@xmultiverse.org. We may require verification of your identity before responding.

11. Children’s Privacy

The Services are intended for users aged 18 and above. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us so we may delete it.

We may disclose information if required by applicable law, court order, or governmental authority. However, given our non-custodial design, our ability to provide meaningful user data is extremely limited.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted in the application and on our website, with the “Effective Date” clearly indicated at the top.

Continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

14. Contact Us

For questions, requests, or concerns regarding this Privacy Policy, please contact us at: xmultiverse.org@gmail.com