Privacy policy
The short version: Tilde collects nothing. There is no Tilde server, no account, no analytics. The long version follows — including the caveats we’d want to know about.
Data we collect
None. Tilde has no servers, no user accounts, no analytics, no crash reporting, no advertising identifiers, and no third-party SDKs that collect data. We cannot see your balance, your names, your transactions, your IP address, or the fact that you use the app at all. The corresponding App Store privacy label is “Data Not Collected.”
What stays on your device
Your wallet seed, keys, addresses, transaction history, name records, and settings are stored locally on your iPhone. Keys live in the hardware-backed iOS Keychain. If you choose the Resilient or Accessible security tier, your seed is additionally stored in iCloud Keychain, end-to-end encrypted by Apple such that neither Apple nor we can read it. This is a choice you make explicitly at setup and can change later.
Caveat one: the peer-to-peer network
Tilde is a peer-to-peer application. To verify the Handshake chain it connects directly to other Handshake nodes over encrypted connections. Those peers — which are run by strangers, not by us — necessarily see your IP address and that it is speaking the Handshake protocol, the same way any P2P node sees its peers. In the default P2P block scan mode, peers cannot tell which addresses or names are yours: your wallet downloads whole blocks and finds its own transactions.
Caveat two: gateway mode
If you explicitly enable gateway query mode in Settings, your wallet asks a third-party gateway server about your transactions instead of scanning blocks itself. That gateway learns which addresses you are interested in, associated with your IP address. Tilde labels this tradeoff in the app before you enable it and never falls back to it silently. The gateway is operated by a third party under its own policies, not by us.
Notifications are local
Tilde reminds you about renewal deadlines and auction reveal windows using iOS local notifications: the schedule is computed on your device from the block heights it already knows, and handed to iOS. There is no push service, no device token registered anywhere, and no server that knows which names you own or when they expire. Nothing to unsubscribe from, because nothing was ever subscribed.
What ships inside the app
Tilde bundles pre-verified Handshake chain data — block headers, per-block filters, and an index of live names — so first sync, wallet restore and name search are fast. This is public chain data, identical for every user; it contains nothing about you and it does not phone anywhere. It also improves privacy: restoring a wallet matches your addresses against the bundled filters entirely on your device, so recovery reveals no addresses to any peer or server.
The blockchain is public
Handshake is a public ledger. Transactions you broadcast — sends, bids, reveals, renewals — are permanently and publicly recorded on-chain, as with any blockchain. This is a property of the protocol, not of Tilde, and nothing on-chain is linked to your identity unless you link it yourself.
Children
Tilde is not directed at children under 13 and collects no data from anyone, children included.
Your rights, and changes to this policy
Because we hold no data about you, there is nothing for us to disclose, correct, delete, or hand over — to you or to anyone else. If a future version of Tilde ever changes this (for example, a feature that genuinely needed a server), we will update this policy first and the change will be opt-in. Any change is published here before it takes effect.
Contact
Questions about this policy: email privacy@tildewallet.com.