Privacy Policy

Last updated: June 11, 2026

Bitzum is a non-custodial Bitcoin wallet. This policy explains what we collect, what we deliberately don't, and why. The short version: your recovery phrase and private keys are generated and stored only on your device — we never see them and can never move your money.

What stays on your device — always

• Your 24-word recovery phrase and the private keys derived from it. These are stored in the device's secure hardware (Keychain on iOS, the encrypted keystore on Android) and are never transmitted to us or anyone else.
• Your contact list. To show which of your contacts already use Bitzum, the app reads your address book locally and hashes each phone number on-device before any lookup. We never receive or store your contacts.

What we collect

• Your phone number. When you sign up we send a one-time SMS code to verify it. To deliver that code we pass your number to our SMS provider. In our own directory we store only a one-way hash of your number — used so your friends can find you by contact — not the number itself in plain text.
• Your receiving address. We map your phone-number hash to your wallet's public receiving address so others can pay you. This is public-by-design payment information; it cannot be used to access or spend your funds.
• Push notification token. If you allow notifications, we store the token your device gives us (via Apple or Google) so we can alert you when you receive a payment.
• Limited payment metadata. When you send to someone who isn't on Bitzum yet, we temporarily hold the amount and the recipient's hashed number so the funds can be claimed — and returned to you if they aren't. Optional labels you add to a transaction are stored to display it back to you.

What we never collect

• Your private keys or recovery phrase.
• Your name, email address, or government ID — there is no KYC.
• Your contact list, browsing activity, or location.

How payments work

Payments between Bitzum users settle off-chain and clear in about a second. Top-ups arrive at your on-chain Bitcoin address, and you can also send and receive over the Lightning Network. Because the wallet is non-custodial, every transaction is signed on your device — we relay and coordinate, but we never hold or control your Bitcoin.

Third parties

We share data only with the providers needed to run the service: an SMS gateway to deliver verification codes, Apple Push Notification service and Firebase Cloud Messaging to deliver notifications, and the payment infrastructure that moves Bitcoin. We do not sell your data and we do not use it for advertising.

Data retention

We keep your phone-number hash and receiving address for as long as your account is active so the contact directory keeps working. Pending transfer records are deleted once claimed or refunded. You can ask us to delete your directory entry and push tokens at any time.

Your responsibility

Because Bitzum is non-custodial, you alone hold your recovery phrase. If you lose it and lose access to your device, your funds cannot be recovered by anyone, including us. Keep your recovery phrase safe and private.

Children

Bitzum is not directed to children and is not intended for anyone under 18.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about privacy? Email hello@bitzum.xyz.