In short: no sign-up, no email, no password, no analytics and no advertising. What the app knows about you stays on your iPhone and you can erase it. Transactions are public on the Stellar blockchain, as on any blockchain. ChimpDAO's fee server sees the transactions it pays for and the IP address that sends them.
Scope
This policy covers the ChimpDAO iOS app, version 2.0.0 and later, which runs on the Stellar testnet, and the website chimpdao.xyz. The privacy policy of the earlier ChimpDAO app (version 1.1.0) remains atnft.chimpdao.xyz/privacy.
Who is responsible
The app and this website are published by Consulting Manao GmbH, which is the data controller under the EU General Data Protection Regulation (GDPR) and Austrian data protection law. Contact for any privacy question or request:chimpdao@consulting-manao.com. Consulting Manao GmbH is registered in the Austrian company register under FN 571029z.
What stays on your iPhone
The app keeps the following in its own protected storage on your iPhone, and nowhere else:
- the first name you entered, and the names and colours you gave your cards;
- your account address, and your cards' public keys and wallet addresses, which are public on the blockchain anyway;
- your activity history, and a daily record of your savings used to show how they changed;
- your settings: look, currency, sounds and Face ID lock.
The app never stores a private key, a recovery phrase, your PIN or your card's unlock code. Your private key is created and kept by the chip in your card and never leaves it. Settings → "Erase everything on this phone" deletes all of the above from your iPhone. Your money stays on the blockchain, with your cards.
What leaves your iPhone, and why
The fee server's logs
The fee server may log the IP addresses of requests and the transactions it signs, to run the service and keep it secure (for example, to detect abuse). These logs are not linked to your name or to any identity, and they are never used for advertising or tracking, and they are kept only as long as needed to run and secure the service.
Camera and Face ID
The camera is used only to read the QR code of an address; images are neither recorded nor sent. Face ID is handled by iOS: the app only learns whether it succeeded, and Face ID never signs anything.
Apple
You download the app from Apple's App Store (or TestFlight for a beta), under Apple's own terms and privacy policy. Only if you choose, in iOS settings, to share analytics with app developers, Apple sends us anonymised crash reports. On TestFlight, feedback and screenshots you choose to send reach us through Apple.
This website
chimpdao.xyz sets no cookies and loads no analytics, advertising or third-party scripts; its fonts are served from the site itself. Your browser remembers only your light or dark theme choice, in its local storage, and that never leaves your device. Our hosting may keep standard technical logs (IP addresses, pages requested) for security. The "Fund your card" page contacts the Stellar testnet servers when you enter an address, and the wallet you choose when you connect one.
What we don't do
- No analytics, advertising or tracking tools, in the app or on the website.
- No tracking across other companies' apps or websites.
- No selling, renting or sharing of personal data.
- No ChimpDAO account: there is no profile about you on our side.
Public blockchain data
Your account and every transaction are recorded on the Stellar blockchain, which anyone can read. That record is permanent: neither ChimpDAO nor anyone else can delete or change it. The app runs on the Stellar testnet, Stellar's public test network, where balances are test tokens with no monetary value.
Legal basis
We process the little data described above to provide the service you asked for: reading your balances, sending your transactions and paying their fees (GDPR, Article 6(1)(b)). The fee server's logs are kept for our legitimate interest in running a secure service (Article 6(1)(f)).
Retention and security
Data on your iPhone stays until you erase it or delete the app. Connections from the app use HTTPS, provided by iOS. The fee server's logs are kept only as long as needed to run and secure the service.
International transfers
The Stellar network and the services listed above run on servers in several countries. When the app talks to them, your IP address and the data listed above may be processed outside your country.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict its processing, and to receive it in a portable format. You may also lodge a complaint with a data protection authority; in Austria, the Datenschutzbehörde (dsb.gv.at).
- Data on your iPhone: you control it directly, and Settings → "Erase everything on this phone" deletes it.
- Fee server logs: write to chimpdao@consulting-manao.com with the address or transaction concerned; we handle your request under the GDPR.
- Blockchain records: these are public and permanent; no one can delete them.
Minimum age
You must be 18 or older to use the app. We do not knowingly collect data from anyone under 18.
Changes to this policy
If the app or the website changes what it keeps or sends, we update this page and the date at the top.
Contact
Questions or requests about privacy: chimpdao@consulting-manao.com. We will never ask for your PIN or your card's unlock code.