Kaspium Mobile Application Privacy Policy

Andromeda Software SRL ("Andromeda Software", "we", "our" or "us") respects your privacy. This Privacy Policy explains what information is processed when you use the Kaspium mobile application released by us (the "App"), how it is used and protected, and the choices and rights you have.

Kaspium is a non-custodial wallet. The short version of this Privacy Policy is: we do not want your data. The App has no user accounts, no analytics, no advertising and no tracking. The only information we store on our servers is the optional push notification registration described below, and only if you choose to turn notifications on.

THE APP IS OWNED, OPERATED AND RELEASED BY ANDROMEDA SOFTWARE SRL ONLY. ANDROMEDA SOFTWARE SRL IS INDEPENDENT OF, AND OPERATES SEPARATELY FROM, THE ENTITIES INVOLVED IN DEVELOPING, OPERATING, MAINTAINING OR SUPPORTING THE KASPA PROTOCOL, THE KASPA BLOCKCHAIN NETWORK, THE KASPA COIN OR ANY SOFTWARE THAT IS NOT RELEASED BY ANDROMEDA SOFTWARE SRL.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, do not download or use the App.

What This Privacy Policy Applies To

This Privacy Policy applies only to the App and the information processed through the App. It does not apply to information collected outside of the App (for example on our websites or social media pages), or to information you provide to, or that is collected by, any third party, including the third-party services described below and any websites you open from within the App. Third parties have their own privacy policies, which we encourage you to read.

Information We Do Not Collect

● Your Wallet Secret Phrase and private keys are generated and stored on your device only. They are never sent to us. We cannot access your wallet or recover your Wallet Secret Phrase if you lose it.

● We do not collect your name, email address, phone number or any other contact information through the App. If you contact us by email, we receive the information you send us, and we use it only to respond.

● We do not track the location of your device.

● We do not use analytics, advertising identifiers, tracking technologies or profiling of any kind, and we do not collect your device's unique device identifier. The only device-scoped identifier we ever receive is the push token in the optional notification registration described below, and only if you turn notifications on.

● We do not retain copies of your balances or transaction history. Any Kaspa coins or other assets that you hold, send or receive using the App are never held, managed or transmitted by Andromeda Software SRL. Note that blockchain transactions are public by design: once broadcast, addresses and transactions are permanently visible on the Kaspa network, which nobody, including us, can alter or delete.

Information Processed to Operate the App

Like any wallet, the App must talk to servers to read the blockchain and broadcast your transactions. When it does, those servers technically receive your device's IP address together with the request contents. This information is processed transiently to serve your requests; we do not use it to identify you or build profiles. The App connects to:

● Kaspa nodes. By default the App uses a node operated by us (node.kaspium.io) to read balances and broadcast transactions. Standard server logs (IP address, timestamps) are kept for a short period for security and operations, then deleted. You can switch to any other node, including your own, in the App's settings, in which case that node's operator processes your requests instead.

● Kaspa REST API (api.kaspa.org), a community-operated service the App queries for transaction history and network information. Your wallet addresses and IP address are visible to this service when queried.

● CoinGecko (coingecko.com), a third-party service the App queries for fiat exchange rates. Only your IP address is technically visible to it; no wallet information is sent.

The legal basis for this processing is our legitimate interest in providing, operating and maintaining the App (Art. 6(1)(f) GDPR); it is limited to what is strictly necessary to perform the actions you request in the App.

Push Notifications (Optional, Off by Default)

The App can notify you about incoming transactions. Notifications are off by default: until you turn them on, the App does not contact Apple or Google push infrastructure and nothing described in this section is collected.

If you choose to turn notifications on, we store on our servers, for as long as notifications remain enabled:

● the wallet addresses you choose to watch (you select them before anything is sent to us);

● your device's push token, issued by Apple or Google for delivering notifications; and

● random identifiers generated by the App to organize your registration. They are not derived from you or your device and are not linked to any other data.

This information is used solely to detect incoming transactions to your watched addresses and deliver the corresponding notifications. It is not used for any other purpose, not linked to any other data, not sold and not shared, except that notifications are delivered through Apple Push Notification service or Google Firebase Cloud Messaging: the notification content (the received amount, the transaction identifier and the App's internal account identifier) passes through Apple's or Google's delivery infrastructure, which may involve processing in the United States under Apple's and Google's respective safeguards. Our notification service runs on Google Cloud infrastructure.

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by turning notifications off in the App: turning notifications off for all of your wallets, using Reset Notifications, or removing your last wallet deletes your registration, including the watched addresses, push token and identifiers, from our servers. We also delete registrations whose push tokens become permanently invalid.

Disclosure of Information

We do not sell personal information and we do not share it with data brokers or advertisers. We may disclose information described in this Privacy Policy:

● to service providers processing it on our behalf as described above (hosting and push delivery);

● to a buyer or other successor in the event of a merger, restructuring, dissolution or other sale or transfer of some or all of Andromeda Software SRL's assets;

● to comply with any court order, law or legal process, including responding to a government or regulatory request; and

● if we believe disclosure is necessary to protect the rights, property or safety of Andromeda Software SRL, our users or others.

Data Security

All communication between the App and our servers, and the third-party services above, is encrypted in transit. Requests to our notification service are cryptographically signed by your device so that only your device can change its registration. No transmission over the internet can be guaranteed to be completely secure, and any transmission is at your own risk. The safety of your wallet also depends on you: keep your Wallet Secret Phrase confidential and your device secure. We never have access to your Wallet Secret Phrase and cannot recover it for you.

Your Rights

Where the General Data Protection Regulation or similar laws apply to you, you have the right to request access to, rectification or erasure of your personal data, restriction of or objection to its processing, and data portability, and the right to lodge a complaint with your data protection supervisory authority. You can exercise these rights by contacting us at [email protected].

In practice, we hold very little: for most users we hold no personal data at all, and for users with notifications enabled we hold only the registration described above, which you can delete yourself at any time by turning notifications off. We cannot delete data recorded on the Kaspa blockchain, which is public and outside anyone's control.

Individuals Under the Age of 18

The App is not intended for individuals under 18 years of age, and we do not knowingly collect personal information from underage individuals. If you believe we might have information from or about an individual under 18, please contact us at [email protected] and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, in which case we will post the updated version at https://kaspium.io/assets/wallet/privacy-policy.html and update the effective date below. Your continued use of the App after changes are posted will be deemed acceptance of those changes, so please check this page periodically.

Contact

For questions about this Privacy Policy or to exercise your rights: [email protected]
For general support: [email protected]

Effective Date: August 10, 2026. This version supersedes the version dated January 1st, 2023.