Mane privacy policy
Mane for iPhone is operated by Kit Capital, Inc. (“Kit Capital,” “we,” or “us”). Kit Capital is the controller for information it processes through Mane-controlled systems. This policy explains how Kit Capital and the service providers used by Mane process information when a user operates the app, requests a wallet action, or contacts support.
Mane for iPhone is offered only to people who are at least 18 years old and located in the United States. People under 18 or outside the United States must not use this iPhone release.
Mane is a self-custodial wallet. Recovery phrases, private keys, the wallet PIN, and decrypted signing material are processed on the iPhone and are not intentionally transmitted. Public network data and signed transactions are transmitted only as needed for the wallet operation the user requests.
Information kept on the device
Mane stores information needed to operate the wallet locally, including:
- the encrypted Stronghold wallet vault and local wallet identifiers;
- wallet names, public addresses, settings, preferences, and contacts;
- cached balances, prices, token metadata, and transaction history;
- swap quotes, status records, transaction receipts, and duplicate-submission safety records; and
- local migration and transaction-database state.
If Face ID convenience unlock is enabled, Mane stores the wallet’s six-digit PIN in iOS Keychain, restricted to the device, a configured device passcode, and the current enrolled biometric set. Apple performs biometric matching; Mane does not receive or store biometric templates.
When the user explicitly creates a backup, Mane creates an encrypted backup blob and copies it to the system clipboard. The user controls where it is pasted or stored. The backup contains wallet metadata, settings, contacts, and history; it does not contain the recovery phrase.
Blockchain and market-data providers
Wallet views may transmit public addresses or account keys, public transaction identifiers, chain and asset identifiers, token contracts, and the request metadata needed to return balances, history, prices, fees, nonces, blocks, token information, or transaction status. RPC, indexer, explorer, market-data, token, and API providers can observe the requesting IP address and may keep request records under their own policies.
Market-data behavior differs by product surface. In Mane for iPhone, Mane requests public market data from providers including CoinGecko and the Binance market-data API (api.binance.com). Depending on the selected asset and chart, either service may provide current or historical market data, and one may be used when another source is unavailable or incomplete. These iPhone requests use Mane’s allowlisted native HTTP client. In the Mane browser extension, CoinGecko remains available through ordinary web CORS, while the Binance market-data API is disabled. The BNB Smart Chain RPC service at bsc-dataseed.binance.org is a blockchain RPC endpoint and is separate from the Binance market-data API. Requests to an enabled service may expose the device’s IP address and request metadata to that service.
Mane also uses the LeoKit API and asset delivery service for supported asset metadata, prices, public-address balance and history requests, network-fee information, swap quotes, transaction construction, and transaction status. For optional swaps and AnyPay, LeoKit, a routing API operated by Kit Capital, Inc., aggregates quotes from independent third-party services and supplies route, quote, transaction-construction, and status data. Mane presents that information for review and enables the user to authorize and sign the resulting blockchain transfer using keys stored locally on the device. Kit Capital does not operate or control the third-party services that execute swaps, never takes custody of funds, and never receives recovery phrases or private keys. LeoKit receives the asset, network, public address, transaction, and request metadata required for the requested operation, together with ordinary network information such as the requesting IP address.
Sends and swaps
When a user confirms a send, Mane submits a signed transaction to the selected blockchain service. The transaction can reveal public inputs, sender and destination addresses, token contracts, amounts, fees, memos, and signatures according to that network. Private keys and recovery phrases are not included.
Quote and swap requests may send source and destination networks, assets, token contracts, amounts, public source or destination addresses, deposit or refund addresses, slippage, route identifiers, fees, expiry data, signed public transactions after approval, and public transaction or provider-order identifiers. Swap and AnyPay requests are sent to the independent third-party services that execute them — NEAR Intents, THORChain, Maya Protocol, Chainflip, Relay, Rango, and ChangeNOW — under each provider’s terms; each service receives only the request data listed above, never a recovery phrase or private key. Mane has no user accounts, and no account is created with any of these services. The providers, their operators, and their terms are listed on the Third-party services page, and the Mane Wallet Terms of Use apply. Availability, timing, status, refunds, recovery, and data retention may depend on the selected provider, the route, and the relevant blockchain networks.
Optional feedback and diagnostics
Mane sends feedback only after the user chooses to submit it. Every report includes the selected report type and the message the user enters. After a separate confirmation, an iPhone bug report may also include the current screen, selected asset, theme, platform, user-agent information, Mane version, up to 40 recent warning or error log entries from the current app session, and one screenshot of the current app window.
Secret-marked screens disable feedback screenshots, and Mane applies best-effort address, transaction-like text, and log redaction. Automated redaction cannot guarantee that arbitrary displayed or user-entered content contains no personal, financial, or secret information. Users must never submit a recovery phrase, private key, PIN, one-time code, or signing request.
The mobile app sends the report over HTTPS to a Kit Capital-controlled relay. The relay validates and sanitizes the report, temporarily uses the apparent IP address as an in-memory rate-limit key, and forwards accepted reports through a dedicated webhook to Discord for support and engineering review. The rate-limit key is not intentionally written to the feedback report.
Kit Capital keeps accepted feedback reports in its organization-controlled support systems for up to 90 days. A report may be kept longer only while it is necessary to investigate an unresolved security incident, resolve an unresolved transaction or funds issue, or satisfy a legal obligation, legal claim, or preservation requirement. Access is limited to people working on support, security, or the reported issue, and the report is deleted when the applicable need ends.
Camera, screenshots, clipboard, and app switching
- The camera is opened only after the user invokes QR scanning. Frames are decoded locally, the stream is stopped when scanning ends, and manual entry remains available.
- Mane does not request Photos-library access. A consented feedback screenshot captures the app window, not the photo library.
- Clipboard reads and writes happen through explicit copy or paste actions. Recovery-phrase copies use a best-effort clearing timer if the copied value is unchanged; not every clipboard value is automatically cleared.
- Mane attempts to place a privacy curtain over protected content while inactive, backgrounded, or when capture is detected. This reduces accidental exposure but cannot guarantee prevention.
Retention and deletion
Mane has no user accounts. Apart from feedback you choose to send us, Mane stores no user data; feedback is deleted on request via the support address. Deleting a wallet in Settings erases the wallet, its keys, and all local data from the device, and there is nothing server-side to delete.
Local wallet information remains on the device until it is removed through an eligible wallet-removal flow or the app’s container is deleted. Removing an eligible secondary wallet deletes its local vault and metadata and attempts to delete associated Keychain items. Deleting the app removes app-container data, while Keychain behavior is controlled by iOS and may persist across reinstall. Users must verify a safe recovery backup before deleting wallet data.
To request access to or deletion of a feedback report or other information controlled by Kit Capital, email contact@leofinance.io with the subject “Mane privacy request.” Do not include a recovery phrase, private key, PIN, or other wallet secret. Because Mane does not create a user account, include only the non-secret details needed to locate the record, such as the approximate submission date, report type, and public transaction or provider reference. Kit Capital may request additional non-secret information to verify and complete the request.
Public blockchain records cannot be changed or deleted by Mane. Kit Capital also cannot delete records controlled independently by a blockchain, RPC, indexer, market-data service, swap provider, Apple, or another provider, including provider-level logs maintained separately by Discord; those services handle requests under their own policies. Kit Capital will delete a requested feedback report from its organization-controlled support channel unless it must retain the report for an unresolved security or funds matter or a legal obligation, claim, or preservation requirement, and will delete it when that need ends.
Tracking, security, and third parties
Mane contains no advertising. Kit Capital does not sell personal information and does not use Mane data to track a user across apps or websites owned by other companies. Mane does not share information for cross-context behavioral advertising. Third-party services receive information only as needed to perform the wallet, network, market-data, swap, or support action the user requests and process that information under their own terms and security practices.
Mane uses encrypted local storage, iOS security controls, HTTPS, transaction review, and fail-closed validation for supported signing paths. No security control eliminates every risk. Users are responsible for protecting the device, PIN, and recovery phrase and for verifying the network, token, destination, amount, fees, and route before approval.
Changes and contact
Kit Capital may update this policy when Mane’s behavior, providers, or legal requirements change. The effective date above will be updated when a revised policy takes effect.
The monitored support, privacy, and security contact for Mane is contact@leofinance.io. Support information is also available on the Mane support page.