Privacy notice

Updated 1 November 2026 · RTWO Wallet owner authentication beta 0.1.0 (11) and (12)

This beta is operated by Rashad Elkersawy. Contact admin@rtwochain.com about privacy, access or deletion. The beta supports account authentication and public-account selection. It has no connected balance or activity data, recovery or payment service.

Account information and authentication

You enter your account email and password privately in the native app. The app sends these to the configured Supabase account provider over HTTPS. The wallet backend receives the resulting account token and selected public wallet address to check the enrolled account. It does not receive the account password. An owner account identifier and its enrolled public address are included in the private backend configuration.

The app keeps temporary credential input and verification proof while its request and cancellation finish. This beta does not persist an account refresh token. Public-account selection, current access and the last sign-in result are held in app memory; they are not proof of private-key custody or wallet recovery.

Verification and security records

Cloudflare Turnstile checks whether an account request is legitimate. Cloudflare processes information such as network address, browser or device signals and site information for security and bot detection. Supabase can retain account and authentication audit records. Hosting and security providers can process network and request metadata when handling the service.

These uses correspond to account email, user identifiers, authentication interactions and other account-service or network-security information. This beta includes no advertising SDK and does not use this information for advertising tracking. See Cloudflare's Turnstile privacy policy and Supabase's privacy policy for their handling of information.

Saved public addresses and camera

In build 12, you can choose to save public RTWO addresses and labels on this iPhone. The app stores them with the public network identity in an app-private file excluded from device backup. The saved list and labels are not sent to the wallet service. You can rename or forget these bookmarks in Accounts. A saved address does not prove private-key ownership or restore an account-service session. If you explicitly select an address and later sign in, the existing account-enrollment checks described above apply to that selected public address.

When you choose Scan, the app uses the camera after your permission; iOS asks if access has not already been decided. QR images are processed on this iPhone; the app does not save or upload camera images or request microphone or Photos access. It accepts only one complete supported plain public address, and asks you to confirm the address before selecting it or filling a payment recipient. Scanning does not prepare or send a payment. You can enter a public address manually if camera access is unavailable.

Saving and managing public bookmarks and importing public QR addresses work without account sign-in. These on-device features are separate from the fixed account-service testing window.

Device wallet information

The owner authentication beta leaves protected wallet creation and loading unavailable. An existing device wallet and its protected app-private storage are separate from following a public address. Account sign-in does not establish access to that protected material, recovery or permission to spend. Do not send private keys, recovery words or passcodes to the account service or support.

Retention and requests

Ending the testing window closes account admission; it does not erase provider records, private image layers, closed service configuration or possible service storage. The private image can retain the account-to-address enrollment after the service stops. Authentication grants are short-lived and held in process memory. Provider audit and security records follow the applicable provider's retention and security requirements.

Contact the operator to request access, correction or deletion. Requests are reviewed against the relevant stored records and providers. Information may need to be retained for security, dispute handling or applicable legal obligations; the operator will explain any remaining retention when responding. Do not assume that deleting the app erases service records or that a device-only wallet can be recovered.

TestFlight

If you install through TestFlight, Apple separately processes testing information and can share usage, crash, device, tester and feedback information with the developer. See Apple's TestFlight privacy information. Keep credentials, tokens and wallet secrets out of feedback attachments.

This information site

These pages contain no application scripts, advertising or analytics integration. The hosting provider still processes requests and associated network metadata to deliver and protect the pages. The support address opens your email application; these pages do not submit a form or send email automatically.