Privacy Policy

Keon is a self-custody wallet. Your recovery phrase and private keys are encrypted on your device, and we can never read them. To work, the Wallet does send some information to us and to other services, mostly your public account addresses. This policy lists all of it, says why, and explains what you can do about it.

We do not use analytics or advertising trackers, and we do not ask for your phone number or ID.

Your recovery phrases and private keys are kept in an encrypted vault on your device that only your password opens. Other wallet data, such as account names, contacts, activity and settings, is kept on your device without that extra layer.

In the browser extension this is the browser's storage for Keon. On Android it is the app's private storage, and biometric unlock uses the phone's secure key store.

We run a service called TokenKit that the Wallet uses for most of its data. It receives:

• Your account addresses, to show balances, activity, prices and collectibles. Addresses are public on Starknet, but our service can see which addresses are looked up together and from which IP address.
• The web address of apps you use, when an app connects or sends a request, to check it against our list of reported scam sites.
• Reports you send. If you report a suspicious site, we receive the site, your reason, any link you add and your account address.
• Account activations. When you activate an account, the Wallet tells us its address, network, account type and the activation transaction. It does not send the name you gave the account.
• Your synced copy. See "Sync" below.

Sync keeps your wallets the same on every device that uses your recovery phrase. It is on by default and runs when you unlock the Wallet and after each change.

The copy kept on our server holds your wallets, including their recovery phrases and any imported private keys, plus your accounts, names, hidden items, contacts and a list of your devices (device type, app version and when it last synced). It is safely encrypted on your device before it is uploaded, and only your own devices can read it. We cannot.

You can turn sync off on any device, and delete the copy on our server, in Settings > Security > Sync. A device that still has sync on will upload a new copy, so turn it off on every device first.

Backup to Google Drive is optional and off until you turn it on. The Wallet then saves a backup encrypted with your password to a private app folder in your own Drive, which other apps and people cannot see. The file also records when it was made, how many accounts it holds and a random device number. These details are not encrypted. You can delete the backup from your Google account at any time.

• Starknet network providers (or the custom provider you set): your addresses and the transactions you sign, so they can reach the network. Name lookups for .stark addresses go the same way.
• AVNU: when you swap, your address, the tokens and the amounts, to get a quote and build the swap. The Wallet also reads AVNU's public list of staking pools.
• Endur and Vesu: the Wallet reads their public rates. It does not send your address.
• WalletConnect: when you connect to an app on another device, the connection and its requests pass through WalletConnect's relay.
• Google Drive: only if you turn on backup.
• Images and apps: token logos and collectible images load from the hosts their creators chose, including IPFS gateways, and apps you open in the Wallet's browser load directly. These hosts can see your IP address.

Each of these services has its own privacy policy.

This website uses no cookies and no analytics. It remembers your light or dark theme in your browser's local storage, which never leaves your device.

If you join the iOS waitlist, we keep your email address, the name you give (optional) and when you joined. We use our email service, Sentinmail, to store the list and to tell you when the iOS app is out. We do not use it for anything else.

Like any online service, our servers see your IP address and basic details of each request, and may keep routine technical logs. We use them only to run and secure the service, and we keep them only as long as we need them for that.

• Your synced copy: until you delete it in the Wallet.
• Waitlist entries: until the iOS app launches, or sooner if you ask us to remove yours.
• Site reports and the scam list: for as long as they help protect people.
• Account activation records: for as long as the account exists on Starknet.

• Turn sync off and delete your synced copy in Settings > Security > Sync.
• Turn Google Drive backup off in the Wallet, and delete the backup from your Google account.
• Use your own Starknet network provider in Settings.
• Removing the Wallet deletes everything it keeps on that device. It does not delete your synced copy, your Drive backup or the records on our servers.
• To ask what we hold about you, or to have it deleted, contact us. We will answer within 30 days.

• The Wallet asks for your password or biometrics to unlock and to show your recovery phrase.
• It locks itself after a period you choose.
• Before you approve a transaction, the Wallet simulates it so you can see what it will do. Simulation can fail, and you can turn it off in Settings.

Keon is not meant for anyone under 18, and we do not knowingly collect information about children.

We may update this policy. When we do, we will change the date at the top of this page, and for an important change we will also show a notice in the Wallet.

Questions or requests about your data: reach us through the channels on our contact page.