This website
SatKeep.com is a static website. In plain terms:
- No embedded advertising or visitor analytics. We have not added advertising code, visitor-analytics tools or social-media widgets to the website’s own code.
- Hosting security cookies. Our hosting infrastructure uses Cloudflare and may set security cookies such as
__cf_bmto detect automated traffic and protect the service. These are separate from advertising and the apps’ optional analytics. See Cloudflare’s cookie documentation. - System fonts and local page assets. Our page templates use the fonts already on your device and serve their own styles and scripts with the website. Hosting infrastructure may also provide security checks.
- No wallet interaction. There is no wallet-connect, import or “verify” feature. The site never asks for a recovery phrase, key or password.
Serving the website involves processing ordinary request metadata, such as your IP address, the page requested, the time and your browser’s user-agent string. Hosting providers may keep operational and security logs to deliver the website, maintain reliability and prevent abuse. Their handling is governed by their own policies, including Cloudflare’s privacy policy.
Links to Google Play, the app support site and public block explorers lead to services with their own privacy policies.
The apps, in summary
The Android app (listed on Google Play as Bitcoin Wallet: BTC Crypto, version 1.1.0) and the iOS app (version 1.0.1, awaiting App Store review) are self-custody wallets. The points below are a summary of their privacy policies, written to be readable; where the summary and a policy differ, the policy governs.
- No publisher account is required. Wallet keys and recovery material are processed locally, and transactions are signed on your device.
- Network providers receive public wallet-related queries and normal connection information, including IP addresses and timing. Signed transactions disclose their public contents to the blockchain.
- Estimated USD values use public Coinbase exchange rates. Price requests do not include wallet addresses, holdings, recovery information or transaction history; portfolio calculations happen on the device.
- Optional camera access scans QR codes locally. The app does not upload camera frames.
- Emailing support shares your address, message and attachments. Correspondence is retained as needed to respond, investigate, handle follow-up, prevent abuse or meet legal obligations. You may request deletion at info@rowix.com.
- Public blockchain records cannot be removed by uninstalling the app or contacting support.
What stays on your device
Wallet keys and seed material, public addresses, transactions, synchronisation data, cached fees and prices, and your preferences are stored on the phone. Ethereum and Solana accounts are derived locally from compatible seed material. Private keys, seed material and wallet passwords are not sent to network or market-data providers.
Device authentication is handled by the operating system. The app receives the result of a passcode or biometric check, never a biometric template.
Network providers
A wallet must talk to the networks it uses. Those providers can receive your public addresses, balances, recipients, amounts and signed transactions, together with your IP address and the timing of requests, and some queries, such as fee simulations, reveal a planned transfer before it is broadcast. Providers keep their own logs under their own policies. Rowix does not promise anonymity, and these flows are entirely separate from the optional analytics described below: they happen whether or not analytics are enabled, because they are how a wallet reaches a blockchain.
- BitcoinAndroid syncs and broadcasts through Bitcoin peers, which can see your connection address and may infer wallet activity; fee estimates come from a fee-estimate service that receives your IP address. iOS uses mempool.space over HTTPS for transactions, fee estimates and broadcasting.
- EthereumQueries and broadcasts go to an Ethereum RPC provider (PublicNode) over HTTPS. Queries can include addresses, token contracts, balances and fee-simulation data.
- SolanaQueries and broadcasts go to a Solana RPC provider (Helius) over HTTPS, with similar query data.
- ExplorersLinks from the Activity tab open public block explorers, such as mempool.space, Etherscan or Solana Explorer, in your browser.
Signed transactions disclose their public contents to the network and remain on the blockchain permanently. Public blockchain records cannot be removed by uninstalling the app or by contacting support.
Prices
Estimated US-dollar values use public Coinbase exchange rates. The price request does not include wallet addresses, holdings, recovery information or transaction history, and the portfolio calculation happens on the device. No Coinbase account is involved.
Optional analytics
- Your choiceOff until you choose to allow it. Declining does not limit wallet features.
- Collected if enabledIf enabled, pseudonymous installation, session and flow identifiers; screen and feature names; step outcomes; sanitized error codes; durations; timestamps; selected asset/network categories; app/build/platform and OS major version.
- Excluded from optional analyticsRecovery phrases, private keys, wallet and recipient addresses, names, balances, payment amounts, transaction identifiers, passwords, backup files, camera frames, clipboard contents, search text, free-form logs and advertising identifiers.
- ProcessingFirst-party analytics uses Cloudflare Workers and D1. IP addresses are used transiently for rate limits and raw IP addresses are not stored in the analytics database. Cloudflare handles normal connection data under its own policy.
- RetentionEvents: 30 days. Inactive installation records: 30 days. Daily totals without installation, session or flow identifiers: 365 days. Local queue: at most 200 events for up to 7 days. Automatic retention runs daily.
- ControlsSettings → Optional analytics lets you turn collection off or request deletion. Disabling clears unsent events. Deletion removes installation-linked server records after acknowledgement; anonymous totals may remain. Offline requests retry while the app is running and online. Keep the app installed until deletion is confirmed.
The identifiers involved are random values created by the app; they are not wallet addresses and are not derived from your wallet or device hardware. The data is pseudonymous rather than anonymous, which is why it is described as such in the full policies. The exclusion list above applies to the analytics event stream only; the network providers described earlier still receive the wallet-related queries a blockchain wallet has to make.
Android specifics
- Wallet data is stored in Android app storage. Android automatic app backup is disabled.
- Device authentication adds an approval gate but does not replace an encrypted wallet’s password. Android handles passcodes and biometric checks; the app receives the result, not a biometric template.
- Manual backups are encrypted with your chosen backup password and saved to your selected document-provider location.
- Uninstalling or clearing storage removes ordinary app data and may permanently remove access to assets without a usable backup. Exported backups and public blockchain records remain.
- Bitcoin peer and supported payment protocols are not all encrypted; no claim is made that every connection is encrypted or anonymous.
Copied addresses or transaction IDs go to the Android clipboard; what other apps can read there depends on your Android version and settings. Diagnostic logs and crash traces are stored locally and shared only through the app’s reporting flow, to a recipient you choose.
iOS specifics
- Recovery material is stored in the device Keychain with access restricted to when the device is unlocked. It does not synchronize to iCloud or migrate through device backups.
- Public wallet descriptors, account information, transactions and synchronization state use protected application storage excluded from backups.
- A device passcode is required. The wallet locks in the background. Authentication protects unlocking, payment approval and recovery-phrase access.
- Copied addresses use the device-only clipboard with a two-minute expiry.
- Keychain items can persist after app deletion. This version has no wallet-delete action. Preserve recovery information before changing the app or device.
Email and support
Emailing info@rowix.com shares your email address, your message and any attachments with Rowix. Correspondence is retained as needed to respond, investigate, handle follow-up, prevent abuse or meet legal obligations. You may request deletion at the same address. Support never needs, and will never ask for, recovery words, private keys or passwords.
Full policies
These are the complete, authoritative privacy policies for the apps:
If this website’s practices change, for example if the hosting arrangement changes what is processed, this page will be updated and the review date above revised.
Contact
Rowix, LLC, Tbilisi, Georgia, is the publisher of the apps and the operator of this website. Privacy enquiries: info@rowix.com.