Chainmole

Privacy Policy

Chainmole for iOS · Last updated 2026-09-05

Chainmole (“the app”) is made by ARB LLC (“we”, “us”). This policy says what the app does with data, in plain words.

In short

• There is no account. We never ask for your name, your email or a password.
• Your wallet data stays on your phone. The addresses you add, their balances and their transactions are written to a database inside the app. We keep no copy.
• The app reads public blockchains directly. To do that, your phone sends your wallet addresses to public blockchain nodes and explorers. They are run by other people, not by us, and they see your address and your IP address.
• Our own server never receives your wallet address. It answers questions about tokens, not about wallets.
• No ads, no analytics, no tracking. The app contains no advertising, no usage analytics and no third-party tracking code.
• We never sell data. We have nothing to sell.

1. What the app stores on your phone

The app keeps all of this in its own local database on your device:

A wallet address, and a nickname you write next to it, can say something about you. So we treat this as personal data even though we never see it.

We do not receive any of it. It is never uploaded, backed up to us, or shared with us. It lives in the app’s own storage, which iOS keeps private to the app.

Note that iOS may include the app’s data in your iCloud or iTunes device backup, if you have backups turned on. That backup is between you and Apple.

2. What leaves your phone, and where it goes

2.1 Public blockchain nodes and explorers

To show your balances and transactions, the app asks public blockchain services about your addresses. Your wallet address is part of that request, together with your IP address, which every internet request carries.

These services are not ours. Each has its own privacy policy, and we cannot control what it keeps. This is how the app works: reading a public blockchain means asking somebody who has a copy of it.

Nothing here is a secret in the way a password is. A blockchain is public, and anybody can look up any address on it. What these requests reveal is that this phone, at this IP address, is interested in these addresses.

2.2 Our own API

The app asks our server for the name, symbol, icon and price of tokens.

What we receive: the chain, the list of token ids (contract addresses) it is asking about, and the currency you have chosen. Not your wallet address, and nothing that names you.

Be aware of what that list still says: the tokens asked about are the tokens you hold. We do not know whose they are, or how many of each you hold, but the request does show which tokens some device holds together.

Server logs. Like any web service, ours writes a request log — the time, the URL asked for, and the IP address it came from. We use it to keep the service running and to find abuse. We keep these logs for [30 days] and then they are deleted.

2.3 Token pictures

Token icons are loaded from the address the token master holds, which today is CoinGecko’s image server. Your phone fetches the picture directly, so that server sees your IP address and which icon you asked for.

2.4 Links you tap

Some screens link out of the app:

• A transaction opens a block explorer (Solscan, SuiVision, BscScan, Blockscout, explorer.optimism.io, mempool.space) in your browser.
• Rate this app opens the App Store.
• Send feedback opens your mail app, with a message addressed to us. What you write is what we get; the app fills in only the subject and the app version.
• Privacy policy opens this page.

Once you leave the app, the site or the app you land on decides what it collects.

3. What the app does not do

• No advertising, and no advertising SDK.
• No usage analytics, no crash reporting SDK, no attribution SDK.
• No device identifier is collected. The app does not ask for tracking permission because it does not track you.
• No location, no contacts, no camera, no photos.
• No private keys. The app never asks for a seed phrase or a private key, and it cannot move your money. It only reads public addresses. If anything ever asks you for a seed phrase in our name, it is not us.
• We never sell or share personal data for advertising.

4. Why we may process data, and on what basis

For people in the EU, the EEA and the UK, our legal basis under the GDPR is:

• Our legitimate interest (Art. 6(1)(f)) in running the API and keeping it safe, for the request logs described in 2.2.
• Performance of a contract (Art. 6(1)(b)) for answering the token requests the app makes, which is the service you asked for by using the app.

Data on your phone is not processed by us at all, so no basis is needed for it.

5. Your choices and rights

The strongest control is in the app itself:

• Delete an address and its transaction history and its daily totals are deleted with it.
• Turn a chain off in Settings → Networks and its assets are hidden.
• Delete the app and everything it stored on your phone goes with it. There is nothing left on our side to delete, because there was never anything there.

Rights under the law. Because we hold no data that identifies you, we usually cannot find “your” data to act on — a request log holds an IP address and nothing that ties it to a person. Where the law gives you a right to access, correct, delete, object to, restrict or port your personal data, write to us at contact@chainmole.com and we will do what we can. If we cannot identify you in our records, we will tell you so.

• EU/EEA and UK (GDPR): you may also complain to your data protection authority.
• Japan (APPI): you may ask about disclosure, correction and deletion of retained personal data.
• California (CCPA/CPRA): we do not sell or share personal information, and we have not done so in the past 12 months. You will never be treated differently for exercising a right.

6. Children

Chainmole is not for children under 13 (or the age your country sets, if it is higher). We do not knowingly collect anything from them.

7. Security

Every request between the app and a server uses HTTPS. Data on your phone is protected by iOS, which keeps an app’s storage private to that app and encrypts it while the device is locked.

No service is perfectly safe. But the worst case here is smaller than usual: we hold no account, no password and no wallet address, so there is no store of them to lose.

8. Changes

We will update this page when the app changes — in particular if we ever add ads, analytics or a paid plan. The date at the top says when it last changed. A change that matters will also be announced in the app or on the App Store listing.

9. Contact us

ARB LLC
#301 Annex Shinsen, 10-15 Shinsencho, Shibuya-ku, Tokyo 150-0045 Japan
Email: contact@chainmole.com