Legal

Privacy Policy

1. Introduction

Untaxed is a non-custodial Solana wallet and trading app for iPhone and Android. This Privacy Policy explains how we handle data when you use the Untaxed app and this website.

2. Data we do not collect

Untaxed does not collect or store:

• Personal information such as name, email or address
• Analytics or usage data
• IP addresses for product analytics
• Device fingerprints, advertising identifiers or tracking cookies
• Wallet addresses, balances or transaction history on our servers
• Private keys or seed phrases
• Crash logs, error reports or performance telemetry
• Contacts, photos, location or any other device data

3. Local data storage

The app stores data only on your device, inside the app's sandboxed storage:

• Encrypted private keys and seed phrases, encrypted with a key derived from your password
• Wallet metadata: wallet names, groups and public addresses
• Active wallet selection
• Transaction history and position tracking used for PnL
• Settings: quick-buy presets, RPC URL, slippage, priority fee, engine, language and lock preferences

Public blockchain data such as wallet addresses, token mints, quotes and signed transactions may be sent to third-party Solana infrastructure solely to perform the wallet, swap, order, pricing or transaction functions you request. Untaxed does not store this data on any server or use it for tracking.

4. Third-party API requests

The app makes requests to third-party Solana infrastructure. These requests may include public wallet addresses, token contract addresses, quote details or signed transactions, but never your private keys or seed phrases.

Jupiter

• Used for: swap routing and execution, Jupiter Beam landing, trigger orders and token search
• Data sent: token mints, amounts, taker address and signed transactions or messages

Helius

• Used for: RPC queries, token metadata, wallet holdings, transaction history and Helius Sender submission
• Data sent: token mint addresses, wallet public addresses and signed transactions

Jito Block Engine

• Used for: optional MEV-protected bundle submission
• Data sent: signed transactions

Market data providers

• Used for: trending lists, the pump.fun firehose, DexScreener feed, prices and charts
• Data sent: token mint addresses

Solana RPC nodes

• Used for: blockchain queries and transaction submission, including any custom RPC you configure
• Data sent: public addresses and signed transactions

5. Data security

• AES-256-GCM encryption of private keys and seed phrases using a password-derived key
• PBKDF2 key derivation before any local wallet data is decrypted
• Biometric and PIN protection on unlock, using the device's own biometrics (Face ID or Touch ID on iOS, fingerprint or face unlock on Android). Biometric data never leaves the device's secure hardware and is never available to the app.
• App sandboxing on iOS and Android so other apps cannot read Untaxed's storage
• Local signing. Transactions are signed on your device and only the signed result is transmitted.

6. No user accounts

Untaxed does not require accounts or authentication with our servers. Your wallet is your identity, and your wallet data remains on your device.

7. No cookies or tracking

The app does not use cookies, tracking pixels, advertising identifiers or analytics SDKs. We do not participate in ad networks or tracking frameworks.

8. Data deletion

Because all data is stored on your device, deleting the app deletes everything it holds. See Delete Your Data for step-by-step instructions. Back up your seed phrase and private keys first; there is no recovery.

9. Children

The app carries a mature age rating on the App Store and Google Play and is not directed at children. We do not knowingly collect information from anyone, including minors.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

11. Contact

For privacy questions, email admin@glitchlabs.app or use the channels on the support page.