Privacy Policy

Aave Mobile is a read-only wallet portfolio scanner. It helps you inspect public on-chain balances, token holdings, and transaction history for wallet addresses you choose to analyze. We built Aave Mobile with a privacy-first posture: the app does not create wallets, does not custody assets, and does not request access to private keys or recovery phrases.

By installing or using Aave Mobile, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the application.

Aave Mobile is designed to minimize data collection. Depending on how you use the app, we may process the following categories of information:

• Public wallet addresses that you enter manually, paste from your clipboard, or capture via QR code scanning.
• Derived portfolio metadata such as token balances, NFT inventories, DeFi positions, and transaction summaries retrieved from public blockchain indexers.
• Limited technical telemetry for performance logging, including scan timestamps, selected chain identifiers, request latency, and anonymized error diagnostics.
• Basic device and app metadata required to operate the service, such as app version, operating system version, and network connectivity status.

We do not require account registration, legal name, email address, phone number, government identifier, or any other direct personal identity information to use the core scanning features of Aave Mobile.

Aave Mobile requests only the device permissions strictly necessary to deliver its core functionality. Permissions are requested at runtime through your mobile operating system, and you may deny or revoke them at any time in your device settings.

Denying camera or clipboard permissions limits related features but does not prevent you from manually entering a public wallet address.

We want this to be explicit: Aave Mobile does not collect, store, transmit, or process any of the following:

• Private keys, seed phrases, recovery phrases, or wallet export files.
• Passwords, PINs, biometric templates, or other wallet-unlock credentials.
• Personal identity information such as your legal name, home address, government ID, or contact details unless you voluntarily email us for support.
• Banking, payment card, or fiat account information.
• Contents of your camera roll, photo library, contacts, SMS messages, or unrelated clipboard history outside an explicit paste action initiated by you.

Aave Mobile is a portfolio viewer, not a wallet custodian. Never share private keys or seed phrases with any application, including support requests sent to us.

To retrieve public blockchain data efficiently, Aave Mobile communicates with trusted third-party infrastructure providers. These providers receive only the minimum data required to fulfill a request, typically a public wallet address and chain identifier.

Multi-chain blockchain indexers

Public wallet addresses are queried through secure multi-chain indexers and RPC aggregators, including services such as Moralis and Ankr. These providers return publicly available on-chain portfolio data. They do not receive private keys, seeds, or personal identity information from Aave Mobile.

Application infrastructure

Our backend services, analytics ingestion endpoints, and administrative tooling are deployed on Vercel. Performance logging events are stored in a secured MongoDB database infrastructure operated by Bluegrid. This database is used to monitor scan reliability, latency, and operational health. Stored records are limited to technical scan metadata and public wallet addresses submitted for analysis.

Third-party providers are bound by their own privacy policies and security obligations. We select vendors that support encrypted transport (TLS), access controls, and industry-standard operational safeguards.

Public wallet addresses and associated scan metadata may be retained in our MongoDB performance logging systems for as long as needed to provide service reliability, detect abuse, and improve application performance. You may request deletion of scan-related records tied to a specific public address by contacting us at support@wallet-scanner.com.

Locally cached data on your device, such as recent scan history stored in app storage, remains on your device until you clear app data or uninstall the application.

We apply administrative, technical, and organizational measures designed to protect information processed by Aave Mobile, including:

• TLS encryption for network communications between the app, Vercel, and third-party indexers.
• Least-privilege access controls for administrative and database systems.
• Separation between client-side address ingestion and server-side performance logging pipelines.
• Monitoring for anomalous ingestion patterns and infrastructure degradation.

No method of transmission or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict certain processing of information we hold about you. Because Aave Mobile does not require personal accounts, many requests will relate to public wallet addresses or technical telemetry associated with your use of the app.

You can also manage permissions directly on your device, clear local app storage, or uninstall Aave Mobile at any time to stop further data processing on that device.

Aave Mobile is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time to reflect product changes, legal requirements, or improvements to our privacy practices. When we make material changes, we will update the “Last updated” date at the top of this page. Your continued use of Aave Mobile after an update constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, our data practices, or your privacy rights, contact: