Privacy Policy

1. Scope

This Privacy Policy applies to the VOUT mobile application, vout.app, and VOUT invitation pages. “VOUT”, “we”, and “us” refer to the provider of these services.

2. Self-custodial wallet data

Wallet keys, signing material, the wallet passcode, Bitcoin wallet records, and RGB client-side state are handled on your device by VOUT’s native wallet Core. They are not uploaded to the social database as a custodial account balance.

If you export an encrypted full-state backup, you choose where to store or share that file. VOUT cannot recover the backup password or recreate missing RGB state for you.

To synchronize a wallet, VOUT sends public Bitcoin addresses, transaction identifiers, and output references to its network gateways and blockchain data providers. Those requests let the service look up associated history and amounts. They do not send your recovery phrase or private keys.

3. Data used by optional social features

Creating or importing a wallet can provision a pseudonymous service account linked by a wallet signature. A chat username is optional. When you use social features, the service may also process:

• a pseudonymous service account identifier and your chosen username;
• profile information and an avatar you choose to upload;
• friend requests, friendships, group memberships, and group settings;
• chat messages, reactions, read state, and images you send;
• payment-request metadata shared through chat, but not wallet keys;
• device push tokens and notification preferences;
• referral codes, referral relationships, and VOUT points records;
• server-side search queries and abuse reports you submit.

Other members receive the profile and conversation information needed for the feature you use. Chat is not end-to-end encrypted. Do not put recovery material, passcodes, backup passwords, or private keys in chat.

4. Website and invitation data

The public website is static and does not include an advertising SDK. Our hosting and security provider may process standard request information such as IP address, browser type, requested URL, and timestamps to deliver and protect the site. Invitation URLs contain a routing code; opening an invitation page does not expose wallet balances, addresses, or keys to that page.

5. How we use data

• provide usernames, messaging, groups, invitations, and notifications;
• protect accounts, prevent abuse, and maintain service reliability;
• respond to support, legal, or security requests;
• comply with applicable law and enforce the Terms of Use.

We do not sell wallet or social data for advertising.

6. Signed RGB asset catalog

VOUT may download a signed, presentation-only catalog containing public RGB asset metadata such as contract identifiers, names, tickers, precision, source information, and approved logos. The catalog is a static discovery resource; it does not receive your wallet balance, holdings, invoices, transfer proofs, or local search terms.

Catalog inclusion, source attribution, or compatibility labels do not replace validation by the native wallet Core and are not an endorsement of an asset, issuer, price, or legal status.

Issuance and marketplace features separately process asset metadata and logos submitted for publication, public orders, transaction identifiers, quantities, prices, and the proofs needed to validate asset activity. Published asset and blockchain records may remain available after account deletion. Browsing a catalog does not publish your local holdings.

7. Service providers and disclosure

VOUT uses infrastructure providers to operate public pages, social data, storage, realtime messaging, push delivery, and public market-price display. Current providers include Cloudflare, Supabase, GetBlock, Apple, Expo, and Coinbase. They process data under their own terms and privacy commitments as needed to provide those services.

To show a BTC/USD estimate, the mobile application requests the same public BTC-USD spot quote for every user from Coinbase. The request does not include your wallet balance, addresses, transactions, RGB assets, username, or device identifier. The displayed quote is presentation-only and is never used to sign or authorize a wallet transaction.

To tell you when a newer version is available, the iOS application asks Apple’s public App Store lookup for VOUT’s current listing in your device’s region. The request includes only the app’s bundle identifier and that region code, never your wallet, account, or device identifier.

We may also disclose information when required by law, to protect users or the service, or in connection with a corporate transaction subject to appropriate safeguards.

8. Retention and security

We retain social data while it is needed to provide the feature, satisfy security and legal requirements, or resolve disputes. Uninstalling the app or erasing local files alone does not delete online social records. Use the in-app account deletion flow to delete linked online data. Deletion cannot recover or erase a Bitcoin transaction.

We use access controls and encrypted transport, but no networked service is risk-free. Keep VOUT updated and report suspected account or security issues promptly.

9. Your choices and rights

You can permanently delete your online VOUT account in the app under Settings → Account & privacy → Delete VOUT account. Confirm the deletion and authenticate with your device biometrics or screen-lock credential. You do not need to call or email support. When the screen also states that the wallet will be removed from this device, save the required backup and acknowledge that warning before continuing. Completion is shown only after the linked online data and the local data included in the confirmation have been removed.

This removes the selected wallet account’s online profile, username, uploaded files, messages, memberships, notifications, and related social and rewards records. It does not remove other users’ accounts or their own content. Shared groups may continue with another member as owner. Blockchain records and public asset proofs cannot be erased. Other wallet accounts and networks are not deleted. Returning to social features does not automatically recreate the deleted account; registration requires a new, explicit action.

The combined account-and-wallet deletion flow removes the selected wallet’s on-device recovery phrase or private key, Bitcoin and RGB wallet state, and related private local data on the selected network. A wallet without a linked online account can still be removed; no username registration is required. This does not transfer funds. Recovery requires your saved recovery phrase or private key, and RGB assets also require a full VOUT backup. Backups you exported elsewhere are not deleted. Older versions that offer online-account deletion only leave local wallet keys and state on the device.

Online deletion continues if you leave the app after the service accepts the request. Device removal may require reopening VOUT and completing the displayed cleanup. A minimal completion receipt, without the original account identifier or public key, is retained for about 30 days to safely handle retries. Deletion cannot retract copies other people have independently saved or alter public blockchain history.

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal data. You can change profile and notification settings in the app. For requests that cannot be completed in the app, use our account deletion request page. You can initiate a request without reinstalling the app.

10. Children

VOUT is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly invite children to use the Mainnet beta.

11. Changes

We may update this policy as the product or law changes. We will publish the current version here and update its effective date.

12. Contact

Privacy requests: support@vout.app.