Privacy Policy

Last updated: July 2026

The short version. IroPay has no accounts and asks for no identity. Your wallet keys are created and stored on your phone and are never sent to IroPay: we could not access your funds even if we wanted to. Payments happen on the Solana blockchain, which is public by nature. If you choose to enable the optional Google backup, your recovery phrase is saved to a private area of your own Google account, not to IroPay. We run no analytics and no advertising trackers.

No Accounts, No Identity Collection

IroPay does not collect names, emails, phone numbers, or any identity documents. There is no sign-up and no KYC (Know Your Customer) to use the application. Your wallet's public address is your only identifier inside the app.

Your Keys Stay on Your Device

Your recovery phrase and private keys are generated on your device and stored locally in your browser's protected storage. They are never transmitted to IroPay's servers. IroPay is non-custodial software: we cannot see, move, freeze, or recover your funds. Protect your device with its screen lock; inside the app you can additionally set an optional PIN that gates sensitive actions.

Optional Cloud Backup (Google Drive)

If you explicitly enable Save to Google, your recovery phrase is saved to a private, app-scoped area of your own Google account (the Drive "application data" space). This file is invisible in your Drive interface, inaccessible to other apps, and is never sent to or through IroPay's servers. It is encrypted at rest by Google like all Drive data and is protected by your Google account's security: we strongly recommend enabling 2-step verification on your Google account. You can revoke IroPay's access at any time from your Google account's security settings. If you never enable this backup, nothing ever leaves your device.

What Our Infrastructure Processes

App delivery. The app is served through Cloudflare. Like any website, standard technical logs (including your IP address) are processed by our hosting provider to deliver and protect the service.
Fee relays. If you use a fee relay (a service that pays the Solana network fee on your behalf), the relay receives your already-signed transaction, which contains the same information that becomes public on the blockchain: wallet addresses and amounts. Relays also keep aggregate anti-abuse counters: per-IP request counters that expire after 24 hours, and per-wallet fee totals kept for as long as needed for abuse prevention. Relays never receive your keys.
Payment request links. When a merchant creates a payment request, the request (merchant wallet address and amount) is relayed through our infrastructure so printed QR codes can display the active request.
Country detection. Your IP address is used once to detect your country code, so the app can show the service's availability for your region. We do not build user profiles from this.

Blockchain Data (Permanent)

All transactions are recorded on the Solana blockchain, which is public and permanent: wallet addresses, USDC amounts, and timestamps are visible to anyone, forever. Payment notes (names and local-currency amounts attached to a payment) are end-to-end encrypted: only the sender and the receiver can decrypt them; blockchain observers see only the public transfer data.

No Tracking

IroPay uses no analytics, no advertising trackers, and no third-party cookies. We do not track user behavior and we do not share or sell data to advertisers.

Third-Party Services

Solana network and RPC providers (Helius, Alchemy): the app reads balances and broadcasts transactions through these providers; they see the queried wallet addresses and your IP address, subject to their own privacy policies.
Cloudflare: hosting and infrastructure, subject to the Cloudflare privacy policy.
Cloudflare Turnstile: invisible anti-bot protection on certain free requests. Turnstile may collect technical information about your browser and device, governed by the Turnstile Privacy Addendum.
CoinGecko: your app fetches exchange rates directly from CoinGecko; they see your IP address but no wallet data.
Google: the Google sign-in component is loaded from Google's servers when the app starts. Your data is only sent to Google if you explicitly enable the optional Drive backup described above.
Coinbase: only if you use the card deposit or bank withdrawal feature, your wallet address and IP are shared with Coinbase to create the session. Coinbase applies its own identity checks and privacy policy.
Third-party fee relays: you can connect relays operated by other parties; they see the transactions you submit through them, under their own policies.

Your Rights

Most of your data lives either on your own device (delete it at any time by resetting the app) or on the public blockchain (which nobody, including IroPay, can alter or erase). For questions about the limited server-side data described above, including access or deletion requests where technically possible, contact us at the address below. If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority.

Children

IroPay is not intended for use by children under 13 years of age. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. The date at the top reflects the latest version, and significant changes will be highlighted in the app.

Contact

IroPay LLC is the operator of this service. Questions about this policy: contact@iropay.com.