Legal

Privacy Policy

Last Updated: November 3, 2026

1. Introduction

This Privacy Policy describes how Kryn Labs LLC, a Wyoming limited liability company ("Kryn Labs," "we," "us," or "our"), collects, uses, discloses, and otherwise processes personal information in connection with the Kryn Wallet mobile application (the "App"), the website located at krynwallet.xyz (the "Site"), and any related services that we make available (collectively, the "Services").

Kryn Labs is the controller of the personal information described in this Privacy Policy. By using the Services, you acknowledge that you have read and understood this Privacy Policy. Capitalized terms not defined in this Privacy Policy have the meanings given to them in our Terms of Service.

2. Our Non-Custodial Design

The App is non-custodial. Your recovery phrase, private keys, and PIN are generated, encrypted, and stored exclusively on your device, using your device's secure hardware, and are never transmitted to Kryn Labs or to any third party. Kryn Labs has no access to them and cannot recover them.

We do not require you to create an account, and we do not request your name, email address, telephone number, date of birth, or government-issued identification in order to use the App.

3. Information We Collect

Information Processed Only on Your Device. The following information is processed locally on your device and is not collected by Kryn Labs: your recovery phrase and private keys; your PIN; biometric data used for Face ID, Touch ID, or fingerprint authentication, which is handled entirely by your device's operating system; images captured by your camera when you scan a QR code; and your App settings and preferences.

Information Collected Automatically. When you use the App, we collect the following information:

  • Wallet Information: the public blockchain address of the Wallet you are using, and information relating to the transactions you request through the App, such as the digital assets, amounts, and recipient addresses involved.
  • Device Information: a random identifier generated by the App, which is not derived from your device's hardware or advertising identifiers; your device platform; your language setting; and, if you enable notifications, a push notification token.
  • Technical Information: your IP address, the date and time of your requests, the App version, and diagnostic information relating to errors.
  • Integrity Information: information provided by the app attestation services of your device's operating system, used to verify that requests originate from a genuine and unmodified version of the App.

Information You Provide to Us. If you contact us, we collect your email address, the contents of your communication, and any information you choose to include. Never include your recovery phrase in any communication. Kryn Labs will never ask for it.

Information Collected Through the Site. When you visit the Site, our hosting provider processes technical information, such as your IP address and browser type, as necessary to deliver and secure the Site.

4. Information We Do Not Collect

We do not collect your precise or approximate location, your contacts, your photos, your advertising identifiers, or information about your activity in other applications or websites. The App does not contain advertising, analytics, or third-party tracking software, and we do not create profiles about you.

5. How We Use Information

We use the information we collect for the following purposes:

  • to provide the Services, including authenticating requests from your Wallet, displaying balances, prices, and transaction history, preparing and relaying transactions and Swaps, and sending notifications you have enabled;
  • to protect the security and integrity of the Services, including detecting, preventing, and responding to fraud, abuse, and security incidents, and enforcing rate limits;
  • to respond to your inquiries and provide support;
  • to diagnose technical problems and maintain the Services; and
  • to comply with legal obligations, enforce our Terms of Service, and protect the rights, property, and safety of Kryn Labs, our users, and others.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we process your personal information on the following legal bases:

  • Performance of a Contract: to provide the Services you request in accordance with our Terms of Service;
  • Legitimate Interests: to secure the Services, prevent fraud and abuse, and maintain and improve the Services, where these interests are not overridden by your rights and interests;
  • Consent: to send you push notifications, which you may withdraw at any time through your device settings; and
  • Legal Obligation: to comply with applicable laws and lawful requests from public authorities.

7. How We Disclose Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We disclose personal information only as follows:

  • Service Providers: to third parties that perform services on our behalf, including cloud hosting, database, blockchain infrastructure, transaction relaying, swap aggregation, website hosting, and communications providers. These service providers receive only the information necessary to perform their services and are contractually or otherwise obligated to protect it. Where our servers interact with blockchain infrastructure and Swap Providers, they do so on your behalf without transmitting your IP address.
  • Platform Providers: to Apple and Google, to the extent necessary to deliver push notifications and to verify the integrity of the App, in accordance with their respective terms and privacy policies.
  • Legal Requirements: when we believe in good faith that disclosure is required by law, regulation, or legal process, or is necessary to protect the rights, property, or safety of Kryn Labs, our users, or others.
  • Business Transfers: in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our assets, subject to customary confidentiality obligations. This Privacy Policy will continue to apply to the information transferred.
  • With Your Consent: at your direction or with your consent.

8. Public Blockchain Information

Transactions conducted through the Services are recorded on the Arbitrum One public blockchain. Information recorded on a blockchain, including wallet addresses, balances, and transaction histories, is publicly available and permanent, and cannot be altered or deleted by Kryn Labs. Third parties may be able to associate your blockchain activity with you if your wallet address is linked to your identity.

9. Cookies and Similar Technologies

The App does not use cookies. The Site does not use cookies or similar technologies for analytics or advertising purposes. Because we do not track users across third-party websites or applications, we do not respond differently to "Do Not Track" signals; we honor Global Privacy Control signals as a request to opt out of the sale or sharing of personal information, which we do not engage in.

10. International Data Transfers

Kryn Labs is located in the United States, and our servers are located in the United States. Our service providers may process information in other countries. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States and other countries whose data protection laws may differ from those of your jurisdiction. Where required by applicable law, we rely on appropriate safeguards for such transfers, such as the Standard Contractual Clauses approved by the European Commission.

11. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. In particular:

  • device registration information is retained until you remove your Wallet from the App or the associated push notification token is no longer valid;
  • authentication credentials expire automatically and are deleted upon expiration or when you remove your Wallet from the App;
  • technical information in server logs is generally retained for no more than thirty (30) days; and
  • support communications are retained for as long as necessary to resolve your inquiry and for up to twenty-four (24) months thereafter, unless a longer period is required to comply with legal obligations or resolve disputes.

Information recorded on a public blockchain is outside our control and cannot be deleted.

12. Data Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit, hardware-backed encryption of Wallet data on your device, short-lived authentication credentials, access controls, and application integrity verification. All transactions are constructed and signed on your device. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your device, your PIN, and your recovery phrase.

13. Your Rights and Choices

Choices Within the App. You may disable notifications at any time through your device settings. Selecting "Remove wallet" in the App's settings deletes the Wallet from your device and deletes the associated device registration from our servers.

Your Rights. Depending on your jurisdiction, you may have the right to: request access to and a copy of the personal information we hold about you; request correction of inaccurate personal information; request deletion of your personal information; object to or request restriction of certain processing; request portability of your personal information; withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; and lodge a complaint with a data protection authority.

California Residents. The California Consumer Privacy Act, as amended, provides California residents with the right to know the categories and specific pieces of personal information we collect, the right to request deletion and correction of personal information, and the right not to receive discriminatory treatment for exercising these rights. In the preceding twelve (12) months, we have collected the following categories of personal information: identifiers (such as wallet addresses, device identifiers, and IP addresses); internet or other electronic network activity information (such as server log data); and, if you contact us, your email address and the contents of your communications. We collect this information from you and your device for the business purposes described in Section 5, and we disclose it to the categories of recipients described in Section 7 for those purposes. We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes other than those permitted by law. You may designate an authorized agent to submit a request on your behalf.

Brazil. If you are located in Brazil, you have the rights provided under the Lei Geral de Proteção de Dados Pessoais (Law No. 13,709/2018), including the rights to confirmation of the existence of processing, access, correction, anonymization, blocking, or deletion of unnecessary or excessive data, portability, information about the entities with which we share data, and revocation of consent.

Exercising Your Rights. To exercise any of these rights, contact us at support@krynwallet.xyz with the subject line "Privacy Request." Because the Services do not use accounts, we may ask you to verify your request, for example by signing a message with the relevant Wallet. We will never ask for your recovery phrase. We will respond within the period required by applicable law.

14. Children's Privacy

The Services are intended solely for individuals who are at least eighteen (18) years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this Privacy Policy and, for material changes, will provide notice through the App or the Site before the changes take effect.

16. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Kryn Labs LLC

30 N Gould St Ste N, Sheridan, WY 82801, United States

support@krynwallet.xyz