Legal

Privacy Policy

Effective October 5, 2026 · Kamara Labs LLC

The short version Ironhavn is a non-custodial wallet. Your recovery phrase and private keys are generated and stored on your device only — Kamara Labs never sees them. The app has no analytics SDKs, no advertising tracking, and no cloud wallet sync. Blockchain requests use the Ironhavn RPC gateway or direct third-party endpoints, depending on platform, as described below.

Information you provide directly

Wallet and account labels you choose
Watch-only addresses you add to track
Contact labels and recipient addresses you save
Recovery phrase material, only at the moment you create or import a wallet on-device — protected by the platform storage described below and never transmitted to Kamara Labs

Available features differ between iOS and the Android preview. The Android-specific section below describes its current feature scope and providers.

Information stored locally on your device

The following is stored locally on your device rather than in a Kamara Labs account database:

Wallet and account state
Transaction activity history
Browser favorites
Connected dApp session records and permissions
Security preferences (auto-lock timing, private browsing, notification settings)

Information sent to third parties

Using Ironhavn requires network requests to service providers and sites that Kamara Labs does not control:

Cloudflare and Alchemy — Ironhavn sends blockchain RPC requests through a Cloudflare Worker operated for Kamara Labs and forwards them to Alchemy to read balances, estimate fees, and broadcast transactions on Ethereum, Base, Arbitrum, Optimism, and Polygon. Cloudflare can process your IP address and request metadata. RPC payloads can include public wallet addresses, contract calls, and signed transaction data. The Worker does not intentionally log or persist request or response bodies.

LI.FI — earlier iOS builds with a Swap feature used this provider for quotes and transaction routes, which could include wallet addresses, token selections, amounts, and network information. The current iOS submission and Android preview do not include Swap.

CoinGecko — to display live token prices. Standard network metadata, including your IP address, may be processed by the service.

In-app browser — search queries and any site you visit are subject to those sites' own privacy practices. Ironhavn does not control what third-party sites do with your traffic.

We do not sell your data. As of this release, Ironhavn does not include any analytics, advertising, or third-party tracking SDKs.

Your controls

Add, rename, or remove watch-only addresses at any time
Review and revoke connected dApp permissions from the Settings tab, per site and per permission
Enable private browsing mode in the browser
Optionally restrict direct sends to your own wallet and saved contacts
Remove saved contacts, watch-only accounts, and connected-site permissions in the app

Security

Recovery phrases and signing keys are generated and stored on-device on iOS via Apple's Keychain, protected by Face ID, Touch ID, or your passcode. You are solely responsible for backing up your recovery phrase and keeping it offline and private. Anyone with your recovery phrase can access your funds. Kamara Labs staff will never ask you for it.

Android preview

The Android preview stores public wallet and watch addresses, preferences, and outgoing transaction records locally. Recovery phrases are encrypted on-device with an authentication-bound Android Keystore key. Sensitive wallet operations require strong biometrics or the device credential. Wallet storage is excluded from Android cloud backup and device transfer; hardware protection depends on the device.

Android mainnet balance requests use the Ironhavn Cloudflare/Alchemy RPC gateway described above for Ethereum, Base, Arbitrum, Optimism and Polygon. Sepolia testnet requests go directly to PublicNode. Requests can include public wallet addresses, fee-estimation details, and signed transactions. These providers receive network metadata such as your IP address. Recovery phrases and private keys are never included in these requests. Broadcast blockchain transactions are public and cannot be deleted by Ironhavn.

The Android preview does not include swaps, connected dApp sessions, an embedded browser, or live portfolio pricing. Discover and explorer links open in your external browser and are subject to the destination's privacy practices. You can remove a watch address in Settings. Uninstalling removes local app data; keep an offline recovery backup before uninstalling.

Children's privacy

Ironhavn is not directed at children and is not intended for use by anyone under 18.

Changes to this policy

We may update this policy as the app's features change. Material changes will be reflected here with an updated effective date.

Contact

Kamara Labs LLC
Email: hello@ironhavn.com
Support: ironhavn.com/support