XMR Labs Monero Wallet
Privacy Policy
XMR Labs is a non-custodial Monero wallet. The app is designed to operate locally on your device, and this policy explains the data involved when you use its wallet, network, camera, location, biometric, and price-display functions.
Important: The wallet is non-custodial. XMR Labs does not hold your XMR or operate wallet accounts for users. Keep your recovery seed private and backed up securely.
1. Data Controller and Contact
The data controller responsible for processing personal data in connection with the app is XMR Labs Inc. For privacy and support questions, contact contact@xmrlabs.org.
2. General Principles
The app is a non-custodial Monero wallet. XMR Labs does not hold your XMR, operate wallet accounts for users, or receive your recovery seed or private keys.
Wallet data is generally processed locally on your device. XMR Labs does not operate a general backend service to which wallet files, recovery seeds, or private keys are transferred.
The app does not contain its own advertising, personalized advertising, or in-app analytics.
3. Data Processed Locally on Your Device
Depending on the features you use, the app may process and store locally:
- wallet files, recovery seeds, private and public keys;
- wallet addresses, balances, and transaction data;
- settings, selected network nodes, and recovery information;
- PIN and security settings;
- data used for optional price alerts;
- locally stored app and connection preferences.
This data is required to provide the wallet functions on your device. Private keys and recovery seeds are not transmitted to XMR Labs.
The app uses Android's protected storage for security-related credentials. Wallet files are protected by the wallet technology and the wallet password chosen by you.
4. Biometric Authentication
If you enable biometric unlocking, the app uses Android security functions such as fingerprint or facial recognition.
The app only receives the result of the authentication check. XMR Labs does not access, store, or transmit biometric characteristics.
5. Network Connections
For wallet functions, the app connects to selected Monero nodes. The relevant node operator and your internet service provider may technically receive information including:
- your IP address or network address;
- connection time and duration;
- technical network information;
- Monero network requests required by the wallet;
- the signed transaction when you explicitly confirm a transaction.
Node operators are independent third parties. XMR Labs does not control their logging, retention periods, locations, or privacy practices. You should use only nodes you trust or operate your own node.
6. Automatic Tor Startup
The integrated Tor service may start or be prepared automatically in order to reduce the time required to establish a Tor connection.
Starting the Tor service automatically does not mean that app traffic is automatically routed through Tor. Tor is only used for the relevant app connections after you explicitly enable the Tor switch in the app.
When Tor is enabled, the relevant connection is established through the Tor network. Tor is operated by independent parties. Tor may make direct association between your IP address and a destination more difficult, but it does not guarantee complete anonymity or continuous availability.
7. Node Selection and Public Node Directories
If you use the optional public node search, the app may contact an independent node directory such as monero.fail and check available nodes.
The directory service and checked node operators may receive your IP address and standard connection information. Your recovery seed and private keys are not transmitted to the directory service.
8. Price Data
If you use price information, the app may retrieve price data from CoinGecko.
CoinGecko and your internet service provider may see your IP address and technical connection data. The request does not contain your recovery seed, private key, or wallet file.
9. Camera and QR Codes
The camera is used only when you explicitly open a QR-code feature.
The camera image is processed locally to recognize the QR code and is not transmitted to XMR Labs. A detected address or amount is only used after you explicitly confirm the relevant wallet action.
10. Location and Local Protection Features
If you enable the optional trusted-location protection, the app may use the device's location to check locally whether the device is within the area defined by you.
Location data used for this feature is processed locally and is not transmitted to XMR Labs. Android and the location provider used by your device may process location data independently under their own privacy policies.
You can disable this feature and revoke the location permission at any time in Android settings.
11. Notifications
If you enable local notifications or price alerts, the required rules are stored on the device and notifications are displayed through Android.
The app does not use these functions for personalized advertising.
12. Support Requests
If you contact XMR Labs by email, XMR Labs may process your email address, your name if provided, and the content and attachments of your message.
This information is used solely to handle your request, communicate with you, and comply with legal obligations. Support requests are deleted when they are no longer required and no statutory retention or limitation periods apply.
13. Third Parties and Data Sharing
XMR Labs does not sell personal data or share it for advertising purposes.
Technical transmission to independent third parties may occur only in connection with features you use, including selected Monero nodes, public node directories where applicable, CoinGecko for price data where applicable, the Tor network when you explicitly enable the Tor switch, and your email provider when you contact XMR Labs.
These third parties generally act independently and may have their own privacy policies and retention periods.
14. Security
XMR Labs uses reasonable technical measures to protect the app and locally stored data. These measures include Android protected storage, local authentication, and the security mechanisms of the wallet technology.
No technical security measure can guarantee complete protection against loss, malware, compromised devices, or unauthorized access.
You are responsible for storing your recovery seed securely and never sharing it with anyone else.
15. Retention and Deletion
Wallet and settings data stored locally remains on your device until you delete it or remove the app data.
You can delete local data by removing the wallet within the app, deleting the app data in Android settings, or uninstalling the app.
Before deleting a wallet, make sure that you have securely backed up your recovery seed. Deleting a wallet without a valid backup may permanently prevent access to your XMR.
XMR Labs does not store wallet files, recovery seeds, or private keys on a general app backend.
16. International Data Transfers
Connections to independent nodes, third-party providers, the Tor network, or email services may result in technical data being processed outside the European Economic Area.
XMR Labs does not have complete control over the storage locations, security measures, or privacy practices of these independent services.
17. Children
The app is not directed at children. It does not require registration or request a date of birth.
18. Changes to This Privacy Policy
This Privacy Policy may be updated when the app, third-party services, legal requirements, or data-processing practices change.
The current version will be published on a publicly accessible website. The date at the beginning of this policy indicates when it was last updated.