Privacy Policy

1. Who we are

Cevtar Holdings Limited (“Cevtar”, “we”) publishes OW Wallet and the website ow.money. For privacy questions write to privacy@ow.money. For other legal notices write to legal@ow.money.

If this English text differs from a translation, the English text controls.

2. The wallet is non-custodial

OW Wallet is self-custodial. We do not hold your cryptoassets, and we do not hold the keys that can move them. The recovery phrase, private keys, seed, and PIN are created and stored on your device. We cannot see them, reset them, or sign a transaction for you.

A transaction you broadcast is public on the network you choose. We cannot delete it.

3. Data we do not collect

We do not ask you to upload a recovery phrase, a private key, a seed, a PIN, or a signature payload. Crash reports and product events are scrubbed of those values before they leave the device.

We do not run an account system for the wallet. We do not ask for a government identity document in the app. We do not use your IP address or nationality to decide whether the app opens.

4. Data we collect

Device and app data. When the app runs, it can send an install identifier, device model, operating system name and version, app version, locale, and storefront code.

Product analytics. When analytics is on, the app sends an event name and properties such as a venue name, a chain identifier, a public transaction hash, and an error code. Those events do not include an IP address, an email address, a recovery phrase, a PIN, a signature payload, a local address label, or a raw balance. Product events are kept for 180 days.

Crash logs. The app sends crash reports to Sentry (organization cevtar, project ow-wallet-app). Session replay is off. Default personal data collection in that SDK is off. Reports are scrubbed on the device.

Risk records. A separate signal can include a device identifier, device model, operating system version, app version, a public address, a chain, and an OW ID. The server may read the connection IP. That IP is encrypted, kept for 90 days, and then truncated. Export of risk records requires two staff approvals.

OW ID. If you register a name, we store the name and the public addresses you sign for. The signature is a public proof that you control the address. It is not a key.

Support. If you email us, we keep the address you wrote from, the locale, and the message. Support tickets are kept for two years after they close. Do not send a recovery phrase, a private key, or a PIN.

5. Third-party services

Card purchases and sales are offered by MoonPay and Transak. Those companies collect identity information under their own terms and their own privacy notices. They decide whether to accept a customer. We do not receive their identity files, and we do not hold the funds they move. Assets from a completed purchase are recorded on an address you control.

Swaps, perpetual contracts, prediction markets, and lending are protocols you reach from your own wallet. A DEX aggregator, a decentralized perpetuals venue, a prediction market, or a lending protocol sees the public address and the transaction you sign, as any wallet would. Those services have their own terms. We do not custody the position.

The network you use, and the RPC provider the app calls, see the public address and the transaction you broadcast.

6. Cookies on this website

ow.money uses a language preference in local storage so the page stays in the language you picked. The site does not run a third-party advertising cookie. Details are in the Cookie Policy.

7. Retention

Product events: 180 days. Encrypted IP addresses in risk records: 90 days, then truncated. Support tickets: two years after the ticket closes. OW ID records: for as long as the name remains registered, and for a short period after release so the name is not immediately reissued to someone else.

On-chain data is kept by the network, not by us. We cannot delete it.

8. Your rights

Depending on where you live, you may ask to access, correct, or delete personal data we hold, to restrict or object to certain processing, and to receive a copy in a portable form. You may also complain to a supervisory authority.

Hong Kong residents may contact the Office of the Privacy Commissioner for Personal Data. People in the EEA or the United Kingdom may contact their local data protection authority under the GDPR or the UK GDPR. People in Singapore, Malaysia, or another country with a personal data protection law (including a PDPA) may contact that country’s authority.

Write to privacy@ow.money. We may need to confirm that the request is yours. We will not ask you to prove it with a recovery phrase. We will respond within the time the applicable law requires. Some records, including on-chain transactions and records we must keep for a legal claim, cannot be deleted on request.

9. Children

OW Wallet is not for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to privacy@ow.money and we will delete it.

10. International transfers

Cevtar is in Hong Kong. Processors we use, including Sentry, may store data in the United States or another country. Where the GDPR applies, we use a transfer tool the law recognises, such as standard contractual clauses, when a country is not treated as adequate.

11. Security

We limit staff access to support and risk records. Risk exports need two people. Crash reports are scrubbed before upload. None of this protects a recovery phrase that you store badly, or a device that someone else opens. Security reports go to security@ow.money.

12. Changes

We will post a new version on this page and change the version number and the last-updated date. If a change is material, the app will show the new date before you continue. The version in force is the one published here.

13. Contact

Cevtar Holdings Limited, a company incorporated in Hong Kong (CR No. 80782737), with its registered office at Unit 903B, 9/F., Cameron Commercial Centre, 458-468 Hennessy Road, Causeway Bay, Hong Kong. Privacy: privacy@ow.money. Legal: legal@ow.money. Support: support@ow.money. Security: security@ow.money.