Self-Custody Principle (Most Important)
AQON Wallet is a self-custody wallet.
- The user's seed phrase (mnemonic), private key, PIN, and backup password are stored encrypted only in the secure storage of the user's device and are never transmitted to the Company's servers.
- The Company cannot access, does not store, and cannot recover this authentication information.
- Accordingly, the user holds both complete control over and complete responsibility for their assets.
Information We Collect
2-1. Stored only on the device (never sent to servers)
- Encrypted seed phrase / private key
- PIN, biometric settings, backup password
- App settings (language, theme, balance visibility, etc.)
2-2. Sent to and stored on servers to provide the Service
- Wallet address (TRON network) — to provide send/receive notifications and transaction history
- Handle/nickname and profile information (bio, chat display name) — when using user search and transfer-convenience features
- Device identifier and push token (FCM registration token) — to send transaction notifications and for device binding
- Chat messages — when using the in-app chat feature (delivered to the counterparty and stored)
- Transaction history and related metadata — for payment/transfer processing, history display, and trust-grade calculation (based on transaction activity)
- Terms / privacy consent records — consent timestamp, consented items, and consent version (for dispute handling and legal evidence; the IP and device information (User-Agent) at the time of consent may additionally be stored in the future to strengthen dispute handling)
- Access / authentication logs — app version, device information (User-Agent), IP address (hashed), etc. — for security, abuse prevention, incident response, and force-update decisions
- App diagnostic information — when an app error or abnormal behavior occurs: device identifier, app version, OS type/version, error type and time, and the recent screen-navigation trail (identifying values automatically masked) — for app-stability diagnosis and incident response. Not linked to your account, and never includes wallet addresses, seed phrases, or transaction amounts. Automatically destroyed 90 days after collection.
2-3. Automatic collection through third-party SDKs
The Service uses the following Google/Firebase services, each of which may collect device/usage information.
- Firebase Analytics — Analytics data collection is currently disabled, so app usage statistics are not collected. (The SDK is included but does not transmit usage data.)
- Firebase Crashlytics — Crash diagnostic information (device state, stack traces). Does not include personally identifying values such as wallet addresses, seed phrases, or amounts.
- Firebase Cloud Messaging (FCM) — Push notification delivery (push token)
2-4. Permissions Used
- Camera — for scanning QR codes (addresses/payments). The video is processed only on the device.
- Photo library — for importing QR images. Photos are used only for QR decoding on the device and are not uploaded.
- Biometrics (Face ID / fingerprint) — used only for local authentication on the device. Biometric data is managed by the OS and is not collected by the Company.
- Notifications — to display transaction/payment alerts.
※ The website (aqonwallet.com) does not use cookies or other automatic collection devices of its own.
Information We Do Not Collect
At sign-up, the Company does not collect your name, email address, national ID number, phone number, location data, or contacts (address book). (Because the Service uses wallet-signature-based authentication, it does not collect email addresses or passwords.) (However, information you voluntarily enter into chat, profile, etc. is processed within the scope of that feature.)
Purpose of Use
Collected information is used solely for: ① providing wallet/send/receive/payment features, ② transaction/security notifications, ③ in-app chat and user search, and ④ incident response, service improvement, and fraud prevention.
Third-Party Provision and Processing Consignment
- The Company does not sell or provide users' information to third parties for commercial purposes.
- To operate the Service, the Company entrusts certain processing to Google LLC (Firebase Analytics/Crashlytics/Cloud Messaging).
- Due to the nature of blockchain transactions, wallet addresses and transaction history are recorded on the TRON public ledger and can be viewed by anyone. This is an intrinsic property of the blockchain that the Company cannot control or delete.
Overseas Transfer of Personal Information
To provide the Service, the Company entrusts/stores certain personal-information processing with overseas providers as disclosed below.
| Category | Details |
|---|---|
| Recipient | Google LLC (Firebase — Crashlytics · Cloud Messaging) |
| Destination country | United States and other countries where Google data centers are located |
| Timing / method | Continuous transmission over the network at the time of Service use |
| Items transferred | Push token, device information, crash diagnostic information |
| Purpose / retention | Push-notification delivery and crash diagnosis; until the consignment ends |
| How to refuse / disadvantages | You may request refusal of the overseas transfer via the contact in Article 12. However, refusing may limit the use of some features such as push notifications. |
Retention and Destruction
- On-device information: destroyed immediately when the app is deleted or the "Remove Wallet" feature is used.
- Server information: when a user performs wallet removal (device unbind), binding/push-token and related information is unlinked and deleted. Additional server-side data deletion may be requested via the method in Article 8.
- Retention period: the Company retains information for as long as necessary to provide the Service, and upon a user's request for account withdrawal, wallet removal, or data deletion, destroys it without delay, except where there is a retention obligation under applicable law.
- Where there is a legal retention obligation, information is kept for that period and then destroyed.
- Destruction timing by item
| Item | Destroyed |
|---|---|
| Device binding information · push tokens | Immediately upon wallet removal (device unbind) |
| Handle/profile · chat messages | Upon completion of a deletion request |
| Terms / privacy consent records | After data deletion, retained only within the scope required by applicable law for dispute handling, then destroyed |
| Access / authentication logs | Retained up to 1 year from collection, then destroyed |
| App diagnostic information | Automatically destroyed 90 days after collection |
- Destruction method: electronic files are deleted in a manner that prevents recovery or reproduction; printed materials are shredded or incinerated.
- Transactions recorded on the blockchain cannot technically be deleted.
- For detailed procedures, see the Account & Data Deletion Guide (https://aqonwallet.com/en/legal/account-deletion).
Users' Rights
Users may request to access, correct, delete, or suspend processing of their information, and may withdraw marketing consent at any time. Requests are received at the contact below.
Children's Personal Information
The Service is not directed at children under the age of 14 and does not knowingly collect children's personal information.
Security Measures
The Company applies reasonable protection measures including on-device encryption of sensitive information, TLS encryption in transit, and access controls. However, responsibility for managing the seed phrase/PIN rests with the user.
Changes to This Policy
This policy may be amended in line with changes in law or the Service; for material changes, advance notice will be given through the app or this page.
Revision history
- v1.1.0 (effective 2026-08-25, current): added app diagnostic information collection and 90-day automatic destruction (Articles 2-2 and 7)
- v1.0 (effective 2026-07-01): initial version — view archived version
Privacy Officer and Contact
- Operator: FIRST SNOW COMPANY LIMITED
- Address: 19/94 Sukhumvit Suite Building, 11th Fl, Soi Sukhumvit 13, Khlong Toei Nuea, Watthana, Bangkok 10110, Thailand
- Privacy officer: Head of Operations (department in charge: Operations Team)
- Privacy inquiries: help@aqonwallet.com
Users may submit any privacy-related inquiries, complaints, or requests for remedy arising from the use of the Service to the contact above, and the Company will respond and process them without delay.
Remedies for Infringement of Rights
If you need to report or consult on a personal-information infringement (for users in the Republic of Korea):
- Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr
- Personal Information Infringement Report Center (KISA): 118 · privacy.kisa.or.kr
- National Police Agency Cyber Investigation Bureau: 182 · ecrm.police.go.kr
This page is also available in the AQON Wallet app under "Settings > Terms / Privacy".