Privacy Policy
Last updated 2026-10-15
Trenchpad is a non-custodial Solana wallet and trading app for iPhone. This policy explains what data the app handles, where it goes, and what never leaves your device. The short version: there is no account, no analytics, no advertising and no tracking, and your keys stay on your phone.
What stays on your device
- Private keys and recovery phrases. Stored in the iOS Keychain, readable only on this device while it is unlocked. Viewing a recovery phrase requires Face ID, Touch ID or your passcode. They are never sent to us or anyone else.
- Transaction signing. Every transaction is signed on your device. Only the signed transaction is sent to the Solana network.
- Your PIN and Face ID. Your PIN is kept in the Keychain. Face ID is handled entirely by iOS; the app never sees biometric data.
- Settings, address book, favourites, recent searches, hidden tokens and trade history. Stored locally on your device and not synced to any server.
- Photos. The app only asks to add images to your library, when you save a PnL card. It never reads your photos.
- Clipboard. Read only when you tap Paste.
What we collect
We don't operate user accounts, and we don't collect your name, email, phone number, contacts, location, device identifiers or usage analytics.
The only thing the app sends to our own backend is a token report, when you choose to report a token. A report contains the token's address, name and symbol and where in the app you reported it. It doesn't include your wallet address or any identifier, and it's used only to review and hide abusive content.
Data sent to service providers
To show balances, prices and charts and to execute trades, the app talks directly to the services below. Your public wallet address is public on the Solana blockchain by design, and these providers receive it only so they can answer the request you made. Like any internet service, they also see your IP address.
| Provider | What it receives | Why |
|---|---|---|
| Helius | Public wallet address, signed transactions | Balances, holdings, transaction history, sending transactions |
| Jupiter | Public wallet address, token addresses, trade amounts, search text, signed transactions and limit order details | Token data, prices, charts, swap quotes and execution, limit orders (Jupiter stores open limit orders so they can fill) |
| Jito | Signed transactions | Fast transaction landing |
| Supabase | Token reports, plus requests for market lists and the app's API configuration | Our backend: trending lists, feed, moderation |
| DexScreener, Birdeye, GeckoTerminal | The token address you're viewing | Optional embedded charts, only if you pick one in Settings. These pages may use their own cookies under their own privacy policies. |
| wsrv.nl, pump.fun, Filebase, Arweave, GitHub, Jupiter | Image requests | Loading token logos |
Links to X, Telegram, Solscan or a token's website open outside the app and are governed by those sites' policies.
Tracking and advertising
Trenchpad does not track you across apps or websites, contains no advertising, and does not sell or share personal data.
Deleting your data
Because there's no account, there's nothing to delete on our side. To remove a wallet from the app, delete it in Wallet settings. Deleting the app removes local data. Back up your recovery phrase first: anything recorded on the Solana blockchain is public and permanent and can't be deleted by anyone.
Children
Trenchpad is not intended for anyone under 18, and we don't knowingly collect data from children.
Security
Keys are protected by the iOS Keychain and Secure Enclave-backed device encryption, and the app can be locked with Face ID or a PIN. All network traffic uses HTTPS. No system is perfectly secure, so keep your recovery phrase offline and private. We will never ask for it.
Changes
If this policy changes, we'll update the date above and post the new version here.
Contact
Questions about privacy: solmelting@gmail.com