Privacy Policy

Last updated: October 30, 2026

The short version

We never have your private keys or recovery phrase. Your backup is encrypted with your passkey, and we can’t open it.
We collect only what we need to run the app, keep it safe and stop fraud.
We don’t sell your data, we don’t show ads, and we don’t track you across other apps or websites.
Blockchains are public. Anyone can see the transactions of an address.
You can delete your account and its data from the app at any time.

This summary helps you read the policy. It does not replace it.

1. Who we are

Kantan Wallet (“Kantan”) is provided by Omnistra Protocol LLC, a Delaware limited liability company (“we”, “us”). We are responsible for the personal information described in this policy. It covers the Kantan app, our websites and related services. Words not defined here have the meaning given in our Terms of Service.

2. What we never collect

Your private keys or recovery phrase. They are created and used only on your device. Any backup we keep is encrypted with your passkey before it leaves your device.
Your passkey, device passcode, or Face ID, Touch ID or other biometric data. These stay with your device and your Apple or Google password manager.
Your phone contacts, photos or precise location.
Advertising identifiers. We don’t use them and we don’t track you for advertising.

3. What we collect and why

Your Kantan account

When you sign in with Apple or Google, we receive an account identifier from them, and your email address if you choose to share it. Apple may give us a private relay address instead of your real email. We use this to create your account, recognize you on a new device and contact you about important account matters.

Encrypted wallet backups

If you turn on backup, we store an encrypted copy of your wallet keys so you can restore your wallets on a new device. It is locked with your passkey, and we can’t unlock or read it. You can choose to keep an imported wallet on your device only, with no backup.

Wallet addresses and balances

Your public wallet addresses are needed to show balances and history, to prepare transactions and to tell you when you receive assets. To do this, your app or our servers send your addresses to blockchain infrastructure providers. We link your addresses to your account only to provide these features.

Address book

If you save people or addresses in your address book, we store the names, addresses and any destination tags with your account, so they come with you to a new phone. These details can’t be used to move your assets.

Transactions you prepare

When you ask for a swap quote, move assets between networks or trade, we send the details needed for that request, such as the assets, amounts, networks and your address, to the Provider that handles it. Before you approve some transactions, we send the transaction details to a safety-check provider to simulate the result and spot risks.

Websites you open in the app

To warn you about dangerous sites, the app checks websites against a list stored on your device. If a site looks like a possible match, the app may send a short, scrambled piece of the site’s address (a partial hash) to check it. We don’t receive or keep a history of the sites you visit.

Notifications

If you allow notifications, we receive a push token from Apple or Google, and we store your notification settings and the addresses we watch for you. We use these only to send the notifications you chose.

Points and referrals

We keep your invite code, the code you used to join, your points and the activity that earned them, such as a qualifying swap. To stop fraud, we use Apple App Attest and DeviceCheck or Google Play Integrity to confirm that the app and device are genuine. These services let us keep a small marker for a device, such as whether it has already used a referral code, without telling us who you are.

Help chat

On supported iPhones, the help chat can answer using AI that runs on your device or in Apple’s Private Cloud Compute, and the conversation isn’t sent to us. Otherwise, your question is sent to our servers and to an AI provider to create the answer. The app won’t send anything that looks like a recovery phrase.

Device, app and network information

When the app talks to our servers, we receive your IP address and basic technical information, such as app version, device model, operating system, language and currency settings. We use the IP address to work out your country, so we can show the features available there, and to protect our services. We also collect crash reports and error logs to fix problems.

We count how Kantan is used in each country: the number of people who open the app each day and month, and the fees we earn by country and feature, such as swaps or network moves. For this, the app sends only the date, your country, the feature, the fee amount and basic app details. These totals don’t include your IP address, wallet addresses, account or any identifier, and we don’t use them to identify you.

Messages you send us

If you email us, we keep your message and our reply to help you.

4. How we use information

We use the information above to:

provide Kantan, including showing balances, preparing transactions, restoring wallets and sending notifications;
keep you and Kantan safe, including warning you about scams and protecting our systems;
run the points and referral program and stop fraud;
show only the features offered where you are, and meet our legal duties, including sanctions rules;
fix problems and improve the app, using information that is aggregated or limited to what is needed;
keep our business and tax records, using the totals by country and feature described in section 3; and
answer your questions and send you important notices about the service.

We don’t sell personal information, and we don’t use it for targeted advertising. We don’t make decisions about you that have legal or similarly significant effects based only on automated processing.

We share information only as needed for the purposes above, with:

Service providers who work for us under contract, such as cloud hosting and storage providers, blockchain infrastructure providers, price data providers, safety-check providers, AI providers for the help chat, and crash reporting tools. They may use the information only to provide their services to us. The AI providers we use may not train their models on your messages.
Providers you choose to use, such as swap aggregators, bridges, the Hyperliquid protocol and websites you connect to. They receive what is needed for your request and handle it under their own privacy policies.
Apple and Google, for sign-in, push notifications and device checks.
Authorities and others, when we believe in good faith that the law requires it, or to protect the rights, safety or property of our users, us or others.
A buyer or successor, if we are involved in a merger, acquisition or sale of assets. We will tell you before your information is covered by a different privacy policy.

6. Public blockchains

Transactions on public blockchains can be seen by anyone, forever. This includes the addresses involved, amounts and times. We can’t change or delete information on a blockchain. If someone links your address to you, they may be able to see your activity. Deleting your Kantan account doesn’t change this.

7. International transfers

We are based in the United States, and we and our service providers may process information in the United States and other countries whose data protection laws may differ from yours. When the law requires it, we use safeguards such as the Standard Contractual Clauses approved by the European Commission, or the UK equivalent.

8. How long we keep it

Account, encrypted backups and address book: until you delete them or delete your account. Copies in our backup systems are removed within 30 days after that.
Push tokens and watched addresses: until you turn off notifications, remove the wallet or delete your account.
Points and referral records: while your account exists. After you delete your account, we may keep a minimal record that a device or code has already been used, for up to 24 months, to prevent fraud.
Help chat conversations handled by our servers: up to 30 days.
Server logs with IP addresses: up to 30 days, unless we need them longer to investigate an attack or abuse.
Totals by country and feature: as long as we need them for our business and tax records. They don’t identify you.
Crash reports: up to 90 days.
Emails with us: up to 24 months after the conversation ends.

We may keep information longer when the law requires it or to deal with a legal claim.

9. Security

Kantan is designed so that we never hold anything that can move your assets. Backups are encrypted on your device with your passkey before they are uploaded. Information is encrypted in transit, access to our systems is limited and protected with strong two-factor authentication, and the app is checked by outside security experts before release. No system is perfectly secure, so please also protect your device, your Apple or Google account and your recovery phrase.

10. Your choices and rights

Delete your account: go to Settings in the app and delete your account, or follow the steps on our account deletion page if you can’t use the app. This deletes your account data, encrypted backups and address book from our servers. Write down your recovery phrases first.
Notifications: turn them off in the app or in your phone’s settings.
Backups: choose to keep imported wallets on this device only.
Address book: edit or delete entries at any time.

Depending on where you live, you may have the right to ask us to give you access to your information, correct it, delete it, give you a copy in a portable format, limit or object to how we use it, or withdraw consent you gave. To make a request, email [email protected]. We may need to confirm the request comes from you, for example by asking you to send it from the app or from the email linked to your account. We will answer within the time the law requires and won’t treat you differently for using your rights. If we decline your request, we will explain why and how to appeal.

11. More for certain regions

United States

This part applies if you live in California or another U.S. state with a consumer privacy law, such as Colorado, Connecticut, Oregon, Texas, Utah or Virginia. You have the rights described in section 10, including to know, access, correct and delete your information, and to get a copy of it.

What we collect, from where, and who receives it. In the past 12 months we have collected the categories below. We keep each category for the periods in section 8.

Identifiers

Account identifier from Apple or Google, email address, IP address, public wallet addresses, push token and device check markers. Sources: you, your device, Apple and Google. Disclosed to: service providers, Apple and Google, and Providers you choose to use.

Commercial information

Transactions you prepare in the app, such as assets, amounts and networks, and your points and referral records. Sources: you and public blockchains. Disclosed to: service providers and Providers you choose to use.

Internet or other network activity

Server logs, crash reports, app version and settings, and partial hashes of website addresses used for safety checks. We don’t collect your browsing history. Sources: your device. Disclosed to: service providers.

Approximate location

The country you are in, worked out from your IP address, used to show the features available there and in totals that don’t identify you. We don’t collect precise location. Sources: your device. Disclosed to: service providers.

Information you choose to give us

Names and addresses you save in your address book, help chat questions and emails you send us. Sources: you. Disclosed to: service providers, including AI providers for the help chat.

We use each category for the purposes in section 4: to provide Kantan, keep it secure, prevent fraud, meet legal duties and fix problems.

No selling or sharing. We have not sold personal information or shared it for cross-context behavioral advertising in the past 12 months, and we don’t do so. We have no actual knowledge of selling or sharing information of anyone under 16.

Sensitive information. We don’t collect sensitive personal information such as government ID numbers, precise location or biometric data. Your encrypted wallet backups protect access to your wallets, but we can’t decrypt them, and we use them only to let you restore your wallets. We don’t use any information to infer characteristics about you.

Points program. We don’t offer points in exchange for your personal information. The program uses only the information needed to run it, described in section 3. Because points have no cash value, we don’t assign a value to that information. You can stop taking part at any time by not using the features that earn points.

Making a request. Email [email protected]. You may use an authorized agent; we may ask the agent for proof of permission and ask you to confirm your identity. We answer within 45 days, and may extend that once by another 45 days if needed, with notice.

Appeals. If we decline your request, you can appeal by emailing [email protected] with the subject “Privacy appeal” and explaining why. We will reply in writing within 45 days with our decision and the reasons. If you disagree, you can contact your state attorney general.

Do Not Track. Kantan doesn’t track you across other apps or websites. Because there is no common standard for browser “Do Not Track” signals, we don’t respond to them. Our website honors Global Privacy Control signals, although it doesn’t sell or share data in the first place.

European Economic Area, United Kingdom and Switzerland

We process your information on these legal bases: to perform our contract with you (to provide Kantan); for our legitimate interests in keeping Kantan secure, preventing fraud, improving the app and keeping accurate business records, balanced against your rights; to meet legal obligations; and with your consent, for example for push notifications, which you can withdraw at any time. You can complain to your local data protection authority. If the law requires us to appoint a representative in the EU or the UK, we will list their contact details here.

Brazil

Under the LGPD you can confirm whether we process your data, access, correct, anonymize, block or delete it, request portability, get information about who we share it with, and withdraw consent. Contact us at [email protected], and you may also contact the ANPD.

Japan

You can ask us to disclose, correct, stop using or delete your personal information as provided by the Act on the Protection of Personal Information. Your information is processed in the United States and other countries. Our service providers are bound by contract to protect it.

Other regions

If you live elsewhere, you may have similar rights under local law. Contact us and we will help.

12. Children

Kantan is not meant for anyone under 18. We don’t knowingly collect personal information from children. If you think a child has given us information, contact us and we will delete it.

13. Our website

Our website does not use advertising or analytics cookies, and it doesn’t track you. Our hosting provider receives your IP address and basic browser information when you visit, to deliver the pages and protect the site. It also uses your IP address to work out your country, so the site can open in your language. We don’t store your country or IP address for this.

If you choose a language from the menu, we save that choice in a small cookie on your device (kt-lang) for one year, so the site opens in that language next time. It isn’t used for anything else.

14. Changes to this policy

We may update this policy. If a change is important, we will tell you in the app or by other reasonable means before it takes effect, and we will ask for your consent where the law requires it. The date at the top shows when it last changed.

15. Contact us

Omnistra Protocol LLC, a Delaware limited liability company

Privacy questions and requests: [email protected]
Help with the app: [email protected]