Legal
Privacy Policy
This policy describes what Heaven Wallet collects, why it collects it, who it is shared with, and what never leaves your device. It is written against what the app actually does, feature by feature, rather than as generic boilerplate.
Who we are
Heaven Wallet is operated by Heaven EcoHub. In data-protection terms we are the controller for the personal data described here. You can reach us at support@heavenecohub.com.
Heaven Wallet is a non-custodial cryptocurrency wallet with additional services layered on top: identity verification, a payment card programme, fiat on-ramps, subscriptions, and a community funding feature called Dreams. Different parts of the app collect different data, so this policy is organised by feature rather than by data type.
Your wallet keys never reach us
This is the most important thing in this document, so it comes first.
Heaven Wallet is non-custodial. Your private keys and recovery phrase are generated on your device and held in the operating system's secure storage — the iOS Keychain or the Android Keystore. They are never transmitted to Heaven, never written to our servers, and never included in analytics, crash reports or logs. We cannot access your funds, move them, freeze them, or recover them on your behalf.
Your public wallet addresses are a different matter. Those are visible on public blockchains by design, and we do process them — to display balances and transaction history, to route payments, and to link a verified identity to an address where you have asked us to.
What we collect
Account information
When you create an account we collect your email address and a display name. If you sign in with Apple or Google we receive the identifier that provider returns, plus the email address you choose to share — including Apple's private relay address, if that is what you elect to use. We do not receive your password from either provider.
Wallet and transaction data
Public wallet addresses, token balances, and transaction records across the networks the app supports (Ethereum, BSC, Polygon, Base, Arbitrum, Optimism, Avalanche, Fantom and Tron). Blockchain transactions are public and permanent by nature: once broadcast, a transaction is outside anyone's control, including ours, and cannot be edited or deleted.
Device and diagnostic data
Device model, operating system version, app version, language and region, plus crash reports and performance diagnostics through Firebase Crashlytics. Crash reports can include a stack trace and the state of the app at the moment of failure. They never include your recovery phrase, private keys, PIN or card numbers.
Usage analytics
Which screens you open and which features you use, through Firebase Analytics. We use this to understand which parts of the app are working and which are not.
Where you have turned on Ads Personalisation in your own Google account, Google Analytics also associates this usage with that account. Google calls this Google Signals. It lets us see aggregated age, gender and interest categories, and recognise the same person moving between the phone app and the web version of the wallet. We see these only as group totals, never attached to a named individual, and we never use them to make decisions about your account, your funds or your identity verification.
You can switch this off at any time, for every site and app rather than just ours, in Google My Ad Center. On iOS it sits behind the App Tracking Transparency prompt described below as well: decline that and no advertising identifier is shared.
Advertising identifiers
The app shows advertisements in some places, including an optional rewarded ad that unlocks a free address Safety Check. On iOS, we ask for permission through Apple's App Tracking Transparency prompt before any tracking identifier is used. If you decline, advertising continues in a non-personalised form and no tracking identifier is shared. Declining does not reduce your access to any wallet feature.
Identity verification (KYC)
Some features — the card programme, higher limits, and certain regulated flows — require identity verification. This is the most sensitive data the app handles, and it is treated accordingly.
When you complete verification we collect:
- Your legal name, date of birth, nationality and residential address
- Images of a government-issued identity document
- A selfie and a liveness check, used to confirm the document belongs to you
These documents are held in a restricted compliance store. No other user of Heaven Wallet can read your identity documents through the app, under any circumstance. Access rules are enforced at the database layer, not merely in the interface, and the raw documents are readable only by the server-side compliance process.
What other users can see, if you have chosen to be verified, is a minimal public record: that an identity is verified, and the wallet addresses associated with it. That record contains no document images, no date of birth and no address.
Verification also supports our legal obligations around anti-money-laundering and counter-terrorist financing. Where those obligations apply we may be required to retain records, and to disclose them to a regulator or law-enforcement body on a lawful request.
Cards, payments and on-ramps
The Heaven card programme
Card issuing and processing run on Mastercard's rails. Where you hold a Heaven card, Mastercard and its issuing partners process the card number, the transaction amount, the merchant and the country in order to authorise and settle each payment. Heaven receives transaction records to display your activity and calculate spend figures.
Full card numbers and security codes are handled by the card processor and are not stored by Heaven Wallet. Card credentials come from the card processor's systems or they do not exist — the app never generates them.
Buying crypto with a card
Fiat on-ramp purchases are fulfilled by third-party providers, currently Meld, Transak and MoonPay. When you start a purchase you are handed to that provider, who collects your payment details directly. Heaven Wallet never sees your card number for an on-ramp purchase. We receive the outcome — amount, currency, status and the destination address — so the order can be tracked and confirmed on-chain.
Subscriptions
Heaven Wallet Pro is sold through Apple's In-App Purchase system. Apple processes the payment; we receive a receipt confirming the purchase and its renewal state. We never receive your payment card details from Apple. See the Subscription Terms for the commercial terms.
Device security binding (COVR)
Heaven Wallet Pro includes a device-binding security layer. It ties your account to a specific device and can require a PIN before high-value actions such as sending funds. This involves a device identifier and, where you enable it, a biometric check performed by your operating system. Biometric data itself — your fingerprint or face — never leaves your device and is never transmitted to Heaven or to any third party. The operating system returns only a pass or fail result.
Device permissions
Every permission below is requested only at the point the corresponding feature is used, and each is optional. Declining a permission disables that specific feature and nothing else.
| Permission | Used for |
|---|---|
| Camera | Scanning QR codes to send crypto, capturing identity documents and the selfie for verification, and adding photos to Dreams |
| Photo library | Uploading an identity document you have already photographed, and adding images to Dreams |
| Face ID / biometrics | Unlocking the wallet and authorising transactions. Matching happens on-device |
| Contacts | Sharing a Dream with people you choose. Your address book is read on-device to let you pick a recipient; we do not upload or store your contact list |
| Microphone | Recording voice messages to send to other users |
| Location | Showing nearby community members and location-relevant content |
| Notifications | Payment confirmations, Dream updates and security alerts |
| Tracking (iOS) | Personalised advertising only. Declining leaves every wallet feature intact |
Who we share information with
We do not sell your personal data. We share it only in these circumstances:
- Service providers who run parts of the product on our behalf — Google Firebase for authentication, database, storage, analytics and crash reporting; Mastercard and its issuing partners for the card programme; Meld, Transak and MoonPay for fiat purchases; Apple for subscription billing.
- Blockchain networks. Any transaction you send is broadcast publicly and permanently. This is inherent to how blockchains work.
- Other users, where you choose. Your display name and verification status are visible to people you transact with or share a Dream with.
- Regulators and law enforcement, where we are legally required to respond to a valid, lawful request.
- A successor, if the business is transferred, in which case this policy travels with the data.
Some of these providers operate outside your country, including in the United States. Where personal data is transferred internationally we rely on the safeguards those providers offer, such as Standard Contractual Clauses.
How long we keep it
- Account data — for as long as your account is open.
- Identity verification records — for the period our anti-money-laundering obligations require, which is typically five years after the account closes, and may be longer where a specific legal duty applies.
- Transaction records — as required for financial record-keeping.
- Analytics and crash data — on a rolling basis, in line with Firebase's retention settings.
- On-chain transactions — permanent and outside anyone's control, including ours.
Your rights
Depending on where you live, you may have the right to:
- Ask what personal data we hold about you, and get a copy
- Have inaccurate data corrected
- Have data deleted, where no legal obligation requires us to keep it
- Object to or restrict certain processing, including advertising
- Receive your data in a portable form
- Withdraw consent for anything you previously agreed to
To exercise any of these, email support@heavenecohub.com. You can also delete your account directly at heaven-wallet.com/delete-account.
If you are in the UK or the EEA and are unhappy with how we have handled your data, you may complain to your national data-protection authority.
Children
Heaven Wallet is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
If we make a material change we will update the effective date above and notify you in the app before the change takes effect. Continuing to use Heaven Wallet after that point means you accept the updated policy.
Contact
Questions about this policy, or about your data: support@heavenecohub.com
Related documents: Terms of Service · Subscription Terms