Privacy Policy
ZeWallet is a watch-only crypto portfolio tracker. There is no sign up, we never ask for a seed phrase or private key, and the app cannot move funds. This policy explains what little data is involved and where it goes. It applies to the ZeWallet Android app, the web app at zewallet.app, and this website.
1. Data stored on your device
The wallets you add (public addresses and the labels you give them), your portfolios, average buy prices you enter, and your settings (language, currency, theme) are saved in your device's local storage. A short-lived cache of balances and prices is saved there too so the app opens quickly.
This data stays on your device. We do not have a copy, and we cannot see or restore it. You can delete all of it at any time from Profile › Clear all data on this device, or by uninstalling the app or clearing site data in your browser.
2. Public wallet addresses sent to look up balances
To show balances, the app sends the public addresses you added to our server (a Cloudflare Worker at zewallet.app). The server forwards the address to the data providers below and returns the result. A public address is not a secret: anyone can look it up on a blockchain explorer. Even so, we treat it with care:
- Addresses are not linked to your name, email, phone number or any account, because ZeWallet has no accounts.
- Responses are cached at Cloudflare's edge for about 10 minutes per address to save requests, then expire. We do not keep a database of addresses.
- Requests only happen when you open the app (if data is older than 10 minutes) or tap refresh. Nothing runs in the background.
Some networks (Ethereum, Base, Arbitrum, Optimism, Polygon) are scanned directly from your device through Blockscout, so for those requests Blockscout sees your device's IP address.
3. Third party services
We use these providers to run ZeWallet. Each receives only what it needs and processes it under its own privacy policy.
| Provider | Purpose | What it receives |
|---|---|---|
| Cloudflare | Hosting, edge cache, abuse rate limiting, error logs, Web Analytics | IP address and request details, public addresses passing through, anonymous page views |
| Zerion | EVM and Solana balances | Public address (via our server) |
| Hyperliquid | Hyperliquid spot, staking and perp positions | Public address (via our server) |
| mempool.space | Bitcoin balances | Public address (via our server) |
| Blockscout and public RPC nodes | Fallback balance data | Public address; your IP for device scans |
| CoinGecko, Coinbase, OKX | Prices and coin logos | Coin identifiers, no wallet data |
| Google Fonts | Typeface | Your IP when the font loads |
| Google Play | App distribution and the Pro subscription | Handled by Google under your Google account |
We do not sell data, we do not share it with advertisers, and we do not use it to build profiles.
4. Analytics and error reports
We use Cloudflare Web Analytics, which counts page views without cookies and without identifying you. If the app crashes, it sends a short technical error report (error message, code location, screen path and app version) to our server logs. Error reports do not include wallet addresses or balances. Cloudflare keeps these logs for a limited period and then deletes them.
We also keep simple anonymous counters so we know how ZeWallet is used: which of our pages were viewed, how often the app is opened, whether that happened on the web or in the Android app, whether the plan is Free or Pro, how many wallets are tracked (a number only), and, for visits to this website only, the country Cloudflare detects for the request. These counters never include your IP address, wallet addresses, balances or any identifier, so they can't be linked to you.
5. Purchases and ads
ZeWallet Pro is sold only as an in-app subscription through Google Play (and later the App Store). Google or Apple handle the payment, and we never see your card or payment details. To unlock Pro, the app asks Google Play on your phone whether your Google account has an active ZeWallet Pro subscription. That check happens between your phone and Google Play; we do not receive or store your purchase details, and no account with us is needed.
The free version may show a small banner ad in the future. If we add ads, the ad provider will never receive your wallet addresses or balances, and we will update this policy and the Google Play Data safety section before it ships.
6. Security
All traffic between the app and our server is encrypted with HTTPS. Because ZeWallet never handles private keys or seed phrases, a breach of our server could not give anyone control of your funds. Never type a seed phrase into ZeWallet or any site claiming to be ZeWallet.
7. Your rights
Since your wallet list lives only on your device, you already have full control: view, edit or delete it in the app. If you believe we hold data about you, you can ask us to access, correct or delete it by emailing us. We respond in line with Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022) and other laws that apply to you.
8. Children
ZeWallet is intended for adults aged 18 and over and is not directed at children.
9. Changes
We will post any update on this page and change the effective date. Significant changes will also be noted in the app.
10. Contact
Questions or requests: support@zewallet.app