Trust Wallet
Legal

Privacy notice

Self-custody shapes this notice. There is no account to attach to you, and the most sensitive data in a wallet — your recovery phrase and your keys — never leaves your device at all.

Download on the App Store Get it on Google Play

The short version

A self-custodial wallet cannot tell who you are, because it never asks. There is no registration, no identity verification and no account database to link activity to a person. What the app needs to function — enough information to sign a transaction and show you a balance — is either on your device or already public on a blockchain.

Your recovery phrase and private keys are never processed by anyone but you

They are generated on your device, stored on your device, and used on your device. They are not transmitted to us, not logged, and not recoverable by us. No legitimate process in this product requires them, which is why no screen in the app will ever ask for them.

What is processed, and why

Categories of data processed by the wallet app
DataWhere it livesWhy it is needed
Recovery phrase / private keysYour device onlyNever transmitted. Not processed by us under any circumstances.
Wallet addressesYour deviceGenerated locally to sign and receive transactions.
Transaction historyYour deviceDisplaying your activity. Also public on the blockchain by design.
Staking positionsYour deviceShowing open terms, accrued reward and maturity dates.
Technical diagnosticsSent to us, anonymisedCrash reports, performance metrics and version distribution.
Support messagesSent to usOnly what you choose to send when contacting support.

What is public by design, not by disclosure

Blockchain data is public. Your wallet address, the transactions it sends and receives, and the amounts involved are recorded in a public ledger and can be read by anyone with the address. This is a property of the technology rather than a disclosure we make, and it is worth understanding plainly: using a self-custodial wallet provides financial privacy from intermediaries, not anonymity from everyone.

Reusing the same address across contexts links those contexts together, because the chain of transactions connects them. That is a user-level decision, not something a privacy notice can change.

How we use data

  • To provide the product. The app cannot sign, display or index anything without the minimum data described above.
  • To keep it working. Anonymised diagnostics tell us which version is installed where, and where it crashes.
  • To answer you. If you contact support, we use what you send to investigate that specific request.
  • To detect abuse. We may process publicly available transaction data to identify scam activity and protect users — never your keys, and never private message content.
  • We do not sell personal data. There is no advertising profile and no data broker relationship.

Who else sees it

Very few parties, and none of them can move your funds:

  • Infrastructure providers who host our servers, under contract and only as needed to run the service.
  • Public blockchain networks, which is everyone at once, and is the point of the design.
  • Law enforcement, where we hold data that is genuinely ours to hold — diagnostics and support messages — and only where legally required.
  • Nobody else. There is no advertising network, no analytics broker and no data resale.

Your rights

Where you are in a jurisdiction that grants them, you may ask what personal data we hold about you, request correction or deletion, object to processing, or lodge a complaint with a supervisory authority.

In practice, there is rarely much to ask about, because a self-custodial wallet collects very little. Requests relating to a wallet address are usually moot: the information is in a public ledger we do not control, and cannot delete from. We respond to requests within the timeframe your local law specifies.

Retention

  • On-device data stays on your device until you remove it, and is removed by uninstalling the app or clearing its storage.
  • Diagnostics are retained in anonymised form for a limited period and then aggregated.
  • Support records are retained only as long as needed to resolve the matter and to meet legal obligations.
  • Nothing tied to your recovery phrase is ever retained, because nothing of that kind is ever received.

Children

The service is not directed at children, and we do not knowingly collect personal information from them. Anyone below the applicable age of consent should not create an account or use the app, and should use a custodial wallet with parental supervision instead.

Changes to this notice

Material changes are announced in the app before they take effect. This page reflects the current version; where a change is significant, the previous version is archived so you can see what changed.

Questions about this notice

Use support and choose the privacy option. Please do not include a recovery phrase or a private key in a privacy request — we do not have them, and no legitimate reason to send them exists.