SatPocket Privacy Policy

Effective date: 1 November 2026

This Privacy Policy explains how Voize j.d.o.o. (“Company”, “we”, “us”, or “our”), a company established in Croatia, handles personal data in connection with the SatPocket mobile application (“SatPocket” or the “App”) and the website at satpocket.com (the “Website”).

Privacy and support contact: support@satpocket.com

The Company has not appointed a Data Protection Officer.

SatPocket is an Android app. SatPocket does not offer a web wallet.

1. Summary

• SatPocket is a self-custody wallet. Your recovery phrase and private keys are created and kept on your device. We never receive them.
• There is no SatPocket account or sign-up.
• The App contains no advertising, analytics, or crash-reporting SDKs, and we do not run an analytics server.
• To show balances and send transactions, the App connects to public blockchain and market-price services. Those services receive the information needed to answer each request, including your IP address.
• BSV transactions are public and permanent. Nobody, including us, can erase them.

2. Information kept on your device

Depending on the features you use, SatPocket stores the following on your device, inside its encrypted local storage:

• your recovery phrase and the keys derived from it;
• receiving addresses and their names, address-book entries, and recent recipients;
• BSV and BSV-21 token balances, activity, token details and icons, and your choices to review, pin, or hide tokens;
• settings such as appearance, display currency (USD or EUR), auto-lock period, Hide balances, Hide wallet preview, and backup reminders; and
• cached market prices and synchronization state.

You protect the wallet with a 6-digit passcode. The passcode is processed only on your device to unlock the encrypted storage. We never receive it. While the auto-lock period you choose is running, the App keeps a device-protected record so it can stay unlocked.

Android application backup is disabled for SatPocket, so this data is not copied into Android device backups.

3. Information sent to external services

3.1 Wallet and blockchain information

To find your balances and activity, check tokens, prepare transactions, and broadcast them, the App sends wallet information to a public blockchain service. This includes your receiving and change addresses, transaction identifiers and transaction data, token identifiers, and the BSV and BSV-21 amounts involved.

Once a BSV transaction is broadcast, its addresses, amounts, outputs, and scripts are public on the BSV blockchain. They may be copied, indexed, and kept permanently by anyone. Public blockchain information does not contain your name or email address, but it may be possible to link it to you when it is combined with other information.

Every BSV or BSV-21 send includes a disclosed service-fee output to a BSV address controlled by the Company. We may keep records of service-fee receipts for accounting, tax, security, and legal-compliance purposes.

If a token service reports that a token is inactive, the App may request that token’s status and the service’s funding details so it can show them to you. SatPocket does not send any funding payment on your behalf.

3.2 Market prices

To show approximate USD and EUR values, the App requests the current BSV price from public market-price services. These requests do not include your addresses, balances, or other wallet information. Prices are cached on the device to limit how often they are requested.

3.3 Network information

Any service the App or Website connects to necessarily receives technical information such as your IP address, the time of the request, and information made available by your device’s network software. We do not add an advertising identifier to any request.

3.4 Services we use

These services are operated independently of the Company. Depending on the service, they act as independent controllers of the information they receive, and their own privacy notices apply.

4. The Buy option and referral information

Buy opens an external ChangeNOW referral link in your browser, or in the ChangeNOW app if it is installed. The link contains a public referral identifier and selects BSV as the asset to buy. It does not contain your recovery phrase, keys, or SatPocket addresses.

ChangeNOW may provide the Company with referral and commission records under its affiliate program. These records may be aggregated or per transaction, depending on ChangeNOW’s reporting. Anything you enter on ChangeNOW is collected by ChangeNOW and its partners under their own privacy notices.

5. Device features you control

Camera

SatPocket asks for camera permission only when you open the QR scanner. Camera frames are processed on the device to read an address or payment request. SatPocket does not keep or upload camera images. You can revoke the permission in your device settings.

Clipboard

SatPocket reads the clipboard only when you tap Paste and writes to it only when you tap Copy. Other apps may be able to see clipboard contents. Avoid copying your recovery phrase unless you understand that risk.

Screenshots and app-switcher preview

Screenshots and screen recording are always blocked while your recovery phrase is shown. If you turn on Hide wallet preview, the App’s content is hidden in the app switcher and screenshots are blocked throughout the App.

Recovery-phrase files

If you choose to download your recovery phrase, SatPocket saves a text file to a folder you select with the system file picker. Once saved, the file is outside SatPocket’s encrypted storage. It may be accessible to the storage or cloud-backup service you chose, to other apps, and to anyone with access to the device.

6. The Website

satpocket.com has no accounts, forms, cookies, analytics, or tracking. To show you a page, our hosting provider’s server receives your IP address and browser details. We don’t keep logs of visits.

7. Support emails

If you email us, we receive the information you choose to send, such as your email address, your message, screenshots, device details, and transaction identifiers. Our email providers process these messages so we can receive them.

Never send us your recovery phrase, private keys, or passcode. SatPocket support never needs them and will never ask for them.

8. Why we process information

Where the GDPR or similar law applies, the legal basis depends on the context:

• Performance of a contract or steps you request: creating or restoring your wallet, showing balances and activity, calculating fees, and signing and broadcasting transactions you approve.
• Legitimate interests: keeping the App and Website secure, responding to support requests, keeping the service reliable, and reconciling service-fee and referral records, where these interests are not overridden by your rights.
• Legal obligations: accounting, tax, sanctions, regulatory, and record-keeping obligations that apply to the Company.
• Consent: where consent is specifically requested. You can revoke a device permission in your operating-system settings at any time.

We do not make automated decisions that produce legal or similarly significant effects. We do not sell personal data or use it for targeted advertising.

9. Disclosure

Information may be disclosed:

• to the external services described in this Policy when you use a feature that depends on them;
• to professional advisers, accountants, auditors, and insurers where reasonably necessary and subject to confidentiality duties;
• to courts, regulators, tax authorities, or law enforcement where required or permitted by law;
• to protect users, the Company, or others from fraud, security threats, or unlawful conduct; or
• as part of a merger, sale, or reorganization of the Company or SatPocket, subject to applicable data-protection law.

We cannot disclose recovery phrases or private keys because we do not have them.

10. International processing

The BSV blockchain and some external services operate worldwide, so requests and public blockchain data may be processed outside Croatia, the European Economic Area (“EEA”), or your country. The Website’s server is in the United States.

Where the Company itself transfers personal data subject to the GDPR outside the EEA, it uses a recognized legal mechanism where required, such as an adequacy decision or standard contractual clauses. Independent services are responsible for the transfers they control.

11. Retention and deletion

• Data on your device: kept until you log out in Settings → Security & privacy → Log out (or through Forgot passcode on the lock screen) and confirm, or until Android removes the App’s data. Logging out erases the wallet data on the device, including your keys, address book, names, and settings.
• Downloaded or copied recovery phrases: under your control once written to a file or the clipboard. Logging out does not erase copies stored elsewhere.
• Blockchain records: public and permanent.
• Records held by external services: kept according to each service’s own policies.
• Support emails: kept while we handle your request and afterwards where reasonably necessary for security, dispute resolution, and legal compliance.
• Fee, referral, and accounting records: kept for the periods required by accounting, tax, and other applicable laws.

Because there is no SatPocket account, there is no account to delete on our servers. A privacy request can cover only information the Company controls. For information held by an external service, you may need to contact that service directly.

12. Security

SatPocket uses measures intended to reduce risk, including encrypted local storage, device-protected key storage, a mandatory passcode with automatic lock, increasing waits after repeated wrong passcodes, screenshot blocking on the recovery-phrase screen, an optional app-switcher privacy setting, HTTPS connections to external services, and disabled Android application backup.

No device, app, network, or service is completely secure. Your security also depends on your device lock, keeping your operating system updated, how you store your recovery phrase, which apps you install, and avoiding phishing and malware.

13. Your rights

Subject to applicable law, you may have the right to:

• be informed about processing;
• access your personal data;
• correct inaccurate personal data;
• request erasure;
• restrict processing;
• receive your data in a portable format;
• object to processing based on legitimate interests; and
• withdraw consent where processing is based on consent.

Send requests to support@satpocket.com. We may ask for information needed to verify your identity. We will respond within the period required by law.

These rights cannot be used to erase the public BSV blockchain or information controlled only by an independent service.

You may lodge a complaint with your local data-protection authority. In Croatia, this is the Croatian Personal Data Protection Agency (AZOP), Ulica Metela Ožegovića 16, HR-10000 Zagreb, Croatia, email azop@azop.hr.

14. Children

SatPocket is intended only for people aged 18 or older. We do not knowingly offer the App to children or collect their personal data.

15. Changes to this Policy

We may update this Policy when SatPocket, the services it uses, the law, or our practices change. Material changes will be communicated through the App, its store listing, or this Website where required. The effective date at the top shows the current version.

16. Contact

Voize j.d.o.o.
Email: support@satpocket.com