1. What we do NOT collect
- Your recovery phrase and private keys. They are generated and stored in encrypted form on your device (scrypt + AES-256-GCM, the OS secure storage) and are never transmitted to us.
- Access to your funds. The wallet is non-custodial — transfers are signed locally on the device.
- KYC for the wallet. Creating and using a TON wallet requires no identity verification.
2. What data is processed
- Your public wallet address. To display your balance, tokens, NFTs and history, the app requests public blockchain data from TonAPI. An address is public by its very nature.
- Telegram Mini App. When opened inside Telegram, the app receives signed session data (initData) for authentication — limited to what Telegram provides.
- Technical data. Anonymized usage analytics (if enabled) — used to improve the product; never linked to your funds.
- Card and verification (once the card module becomes available). Issuing a crypto card will require KYC; that data is processed by the issuing partner and the KYC provider under their own policies. Card details (PAN/CVV) are never shared with us.
3. Third-party services
- TonAPI — public TON blockchain data (balances, tokens, NFTs, rates).
- Telegram — the Mini App environment and the notifications bot.
- Card issuer and KYC provider — for the card module only (once it becomes available).
We do not sell your data and do not share it with third parties beyond what is required to operate the features listed above.
4. Device permissions
- Camera — only for scanning address QR codes (triggered by your action). Images are neither stored nor transmitted.
- Biometrics (Face ID / Touch ID) — for unlocking and confirmations; verified locally, and your biometric data is never accessible to us.
5. Storage and security
Sensitive data (the recovery phrase) is stored only on your device, in encrypted form. Protection includes: a PIN with lockout after failed attempts, biometrics, auto-lock, and screenshot protection on sensitive screens.
6. Your responsibility
Because the wallet is non-custodial, access to your funds rests solely on your recovery phrase. Keep it offline and never share it with anyone — Tegro support will never ask for it. Blockchain transfers are irreversible.
7. Changes
We may update this policy. The current version, with its effective date, is always available on this page.
8. Contact
Privacy questions: @TegroWalletbot.