Privacy Policy
Last updated: October 2026
This Privacy Policy explains what information Cap Wallet collects, why we collect it, and what you can do about it.
Cap Wallet is built on a simple idea: your money is yours, and so is your data. We have designed the app to hold as little of your information as possible. Much of what other financial apps collect by default, we never see at all.
This Policy applies to the Cap Wallet mobile application, browser extension, website, and related services (together, “Cap Wallet” or the “Services”), provided by Cap Wallet (“Cap Wallet,” “we,” “us,” or “our”). We are the data controller for the information described here.
UK: Registered in England and Wales (Company No. 17244772). Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
US: Registered in the United States (File No. 10738130). Office: 287-254 Chapman Rd, Suite 101-B, Newark, Delaware 19702, United States.
1. What We Never Collect
We do not collect, store, transmit, or have any access to:
- Your private keys
- Your seed phrase or recovery phrase
- Your wallet password or PIN
- Your biometric data, which stays on your device and is handled by your operating system
These are generated and stored locally on your device. They never reach our servers, and they are never sent to Nia or to any AI provider. This is not a policy choice we could quietly reverse. It is how the app is built.
2. What We Collect
Information you give us:
- Contact details, such as your email address if you contact our support
- Business details, if you apply for a Cap for Business account
- Prompts and questions you type to Nia, only if you choose to use Nia (see Section 3)
Information collected automatically:
- Device and technical information, including device model, operating system, app version, language, and time zone
- Usage data, such as which features you open and how you move through the app
- Approximate location, derived from your IP address, used for security, fraud prevention, and to determine which features are available in your market
- Crash reports and diagnostic logs
Public blockchain information:
When you use Cap Wallet to view balances, send a transaction, swap, bridge, or connect to a protocol, the app interacts with public blockchains. Your public wallet addresses and transaction history already exist on those networks, visible to anyone. We process this public information to display your portfolio, calculate fees, and run security checks. We do not treat your public address as secret, because it is not.
3. How Nia (AI Assistant) and Exchange Providers Handle Your Data
3.1 Nia (AI Assistant) & Third-Party AI Services
Nia is our AI assistant. It reviews transactions, fees, and on-chain activity so it can warn you about risk, suggest better routes and timing, and respond to your questions in plain language.
Who Receives Your Data
Nia is powered by DeepSeek API (DeepSeek Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and its affiliates) as our primary provider, and OpenAI as a fallback provider.
What Data Is Sent
When you use Nia, we route requests securely through our server to send the AI providers:
- The text of your prompt or question
- Context needed to answer or execute function calls, such as public wallet addresses, public key parameters, portfolio balances, target tokens, and transaction context under review (destination address, amount, token, and contract method)
What Is Never Sent
We never send your private keys, seed phrase, wallet password, PIN, or biometric data. We do not send your name, email address, or account contact details to AI providers.
Ephemeral Processing & No Storage
AI requests are transmitted securely and processed ephemerally (in-memory) solely to generate real-time answers or construct unsigned transaction payloads. Neither Cap Wallet nor our third-party AI service providers (DeepSeek and OpenAI) store your chat conversations, prompts, or public keys on persistent servers, nor is your data used to train third-party AI models.
Third-Party Protections
All third-party AI providers act as data processors under contractual confidentiality and data protection obligations providing equal or equivalent protection to those under applicable UK and EU data privacy laws.
Your Permission
Using Nia is optional. Before your first Nia request, the app shows an explicit permission modal explaining what data is sent and naming our AI service providers. Nothing is sent until you tap Allow. You can withdraw your permission at any time in app settings, and Nia will stop sending data immediately.
3.2 Swap, Bridge, and DEX Providers
To fetch quotes, route transactions, and prepare cross-chain and EVM swaps for client-side signing, Cap Wallet integrates with third-party protocol aggregators:
- Jupiter: Used for fetching swap routes and liquidity quotes on Solana.
- LI.FI: Used for fetching cross-chain and EVM swap quotes and routing parameters.
When you request a swap or bridge, these providers receive public wallet addresses, target tokens, transaction amounts, and IP addresses needed to compute quote parameters and construct transaction payloads. All transactions are signed strictly on your local device. These providers operate under their own terms and privacy policies.
4. Why We Use Your Information
We process your information for the following reasons, each with a lawful basis under UK and EU data protection law:
| Purpose | Lawful basis |
|---|---|
| Providing the Services you have asked for | Performance of a contract |
| Processing your Nia AI requests via DeepSeek/OpenAI | Your explicit consent |
| Routing swap parameters via Jupiter and LI.FI | Performance of a contract |
| Security, fraud prevention, and risk detection | Legitimate interests |
| Improving and debugging the app | Legitimate interests |
| Responding to your support requests | Performance of a contract and legitimate interests |
| Meeting legal, regulatory, and anti-money laundering obligations | Legal obligation |
| Sending you product updates and marketing | Consent |
Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, you can object, and we will stop unless we have compelling grounds to continue.
5. Who We Share Information With
We do not sell your personal information. We have never done so, and we do not intend to.
We share information only with:
- Third-Party AI Providers: DeepSeek and OpenAI (fallback), solely to provide Nia responses and function calling, subject to explicit consent and strict data protection agreements.
- Swap & Bridge Protocol Aggregators: Jupiter (Solana) and LI.FI (EVM/Cross-chain), to compute swap routes and prepare transaction payloads for client-side signing.
- Infrastructure Providers: Cloud hosting, RPC node infrastructure, analytics, and crash reporting services.
- Professional Advisers: Auditors, tax compliance officers, and legal counsel, where necessary.
- Authorities & Regulators: Where legally compelled under valid law.
Each partner receives only what they need for their specific role, and is required to protect it.
Because Cap Wallet is non-custodial, there is a hard limit on what any authority can compel from us. We cannot hand over keys or funds we do not hold.
6. International Transfers
Cap Wallet operates globally. When transferring personal information abroad, we rely on approved safeguards, including UK adequacy regulations, International Data Transfer Agreements, or Standard Contractual Clauses. Data routed to third-party providers (including DeepSeek and OpenAI) is transmitted under standard encryption and strict processing parameters. Transfer for AI processing is made strictly with your explicit consent.
7. How Long We Keep Information
We keep personal information only for as long as we need it:
- Account and contact details: Active account period plus reasonable retention
- Support messages: Up to 3 years
- Technical logs and diagnostics: Up to 12 months
- Nia AI Prompts: Ephemeral processing only. We do not store AI conversation prompts or public key parameters on our backend servers once your request is fulfilled.
8. What We Cannot Delete
Blockchain records are permanent and public. Once a transaction is confirmed on a blockchain, it cannot be edited, deleted, or withdrawn by us or anyone else. If you request deletion of your personal information, we will delete all records in our custody. We cannot delete records stored on public blockchains or data held independently by third-party protocol APIs.
9. Your Rights
Depending on where you live, you have the right to access, correct, delete, object to, or export your personal information, or withdraw consent at any time.
To exercise your rights, email privacy@capwallet.app. We respond within 1 month.
- UK: Information Commissioner’s Office (ico.org.uk)
- EU: National Data Protection Authority
- Nigeria: Nigeria Data Protection Commission (NDPC)
10. Security
We protect your information using end-to-end encryption in transit and at rest. Your private keys stay in your device’s secure enclave protected by PIN or biometrics. Keep your seed phrase secure; if lost, Cap Wallet cannot recover your wallet.
11. Cookies and Analytics
Our website uses cookies for operation and analytics. In-app analytics and crash logs are collected to improve performance, subject to user consent where required.
12. Children
Cap Wallet is strictly for users aged 18 and older. We do not knowingly collect data from children.
13. Changes to This Policy
We may update this Policy from time to time. If material changes are made (such as adding new third-party AI or swap providers), we will notify you in-app or via email and obtain consent before sending data to new providers.
14. Contact Us
For privacy inquiries:
privacy@capwallet.appUnited Kingdom: Registered in England and Wales (Company No. 17244772). Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
United States: Registered in the United States (File No. 10738130). Office: 287-254 Chapman Rd, Suite 101-B, Newark, Delaware 19702, United States.