Privacy Policy

The short version

We designed Biaka so that we cannot read your data. No account, no email, no analytics SDKs, no advertising ID. The server sees ciphertext, version numbers, and the minimum operational logs needed to run a service.

What never leaves your device

• Recovery phrase, seed, private keys, PIN — generated and used locally, sealed with hardware-backed keys. No code path transmits them.
• Biometric data — handled entirely by Android; the app only receives success/failure.

What our servers process

• Encrypted sync blob (opt-in): ciphertext only (address book + account structure, sealed on your device with keys derived from your seed). Kept until you delete it in-app; we cannot decrypt it.
• Version check: app version + channel, to offer updates. Not stored per user.
• Crash summaries: scrubbed on the device before sending (digit runs and secret-shaped fields removed), redacted again server-side. Rotated with logs.
• Operational logs: timestamp, route, status, proxy-visible IP — short rotation, abuse prevention and debugging only.

We do not process names, emails, phone numbers, contacts, location, tracking identifiers, advertising identifiers, or analytics events. Balances and history are read by the app directly from public blockchain RPCs.

Third parties

Blockchain RPC providers receive the addresses the app queries (inherent to any wallet). Cloudflare fronts our API and download endpoints and sees standard proxy metadata. Price display goes through our server-side proxy so your IP is not exposed to the price vendor.

Your controls

Sync is opt-in and deletable in-app. Uninstalling destroys local keys. No account exists to delete; deleting sync removes everything server-side attributable to you.

Availability

Biaka is intended for global availability, except where access, distribution, or use is prohibited or restricted by applicable law, sanctions, or platform policy.

This website itself sets no analytics or tracking cookies.