QBit Wallet 隐私政策
1. 我们是谁与适用范围
本《隐私政策》（以下简称“本政策”）适用于由 QBit Chain 团队开发并维护的 QBit Wallet 移动端应用（iOS 与 Android 客户端，App ID: io.qbitwallet.app）、Chrome 浏览器扩展程序以及官方 Web 接入端。
我们深知去中心化精神的核心是用户数据主权（Self-Sovereign Identity）。本政策旨在公开透明地向您说明我们在您使用 QBit Wallet 过程中对数据的处理机制。
2. 非托管私钥免责与零资产收集声明
与传统的中心化托管钱包或银行系统截然不同：
- 非托管私钥（Non-Custodial Private Keys）：当您在本应用中创建或导入钱包时，由 BIP39 算法生成的助记词（Mnemonic Seed Phrase）和由 BIP44（Coin Type 766）派生的私钥，仅在您的本地设备上使用行业标准的 AES-256 高级加密算法在端侧安全加密存储。
- 私钥永不上云：您的助记词、私钥与本地解锁密码永远不会通过互联网传输至 QBit 团队或任何第三方云端服务器。
- 无中心化访问权：QBit 团队在任何情况下都无法访问、冻结、划扣或恢复您的私钥与资产。
3. 我们不收集的信息 (Zero PII Policy)
在设计和运行 QBit Wallet 时，我们严格奉行“数据最小化”原则。我们明确不收集以下任何个人信息：
| 信息类别 | 收集情况 | 具体说明 |
|---|---|---|
| 个人身份信息 (PII) | ❌ 零收集 | 不收集真实姓名、身份证件号、护照、居住地址、手机号码等。 |
| 中心化账户凭证 | ❌ 零收集 | 无需注册中心化账户，无需邮箱或社交账号绑定。 |
| 私钥与助记词 | ❌ 零收集 | 私钥在设备端本地生成与加密，开发者无法接触。 |
| 个人资产与交易记录 | ❌ 零中心化存储 | 链上余额与交易历史由公共区块链账本记录，本地仅做临时展示缓存。 |
| 网络浏览追踪与广告画像 | ❌ 零追踪 | 不嵌入任何第三方追踪 SDK、行为分析工具或广告广告联盟代码。 |
4. 设备本地存储的数据
为了保障钱包的基础运行与离线体验，以下非敏感配置仅在您的设备本地受保护存储（如 iOS Keychain、Android EncryptedSharedPreferences 或端侧本地数据库）：
- 加密的钱包数据：经过您设置的本地应用密码派生密钥加密后的私钥/助记词密文；
- 用户应用偏好：界面语言（中文/英文等8国语言）、展示法币币种（USD、CNY、EUR 等）、自动锁定超时时长；
- 本地地址簿：您手动在本地添加的常用收款地址备注；
- 本地代币与网络配置：自定义添加的代币合约地址（SPL Mint）、自定义 RPC 节点端点。
这些数据仅保存在您的当前物理设备中，卸载应用或清除本地缓存即可永久销毁。
5. 网络通信与去中心化交互透明度
为了使 QBit Wallet 实现区块链转账与 DeFi 交互，应用会向去中心化网络发起必要通信：
- RPC 节点交互：钱包连接到 QBit Chain 验证节点（如
https://api.devnet.qbitchain.io或https://api.mainnet.qbitchain.io）以查询链上账户余额、代币列表与交易状态。所有转账均在您的设备本地完成数字签名后，才将广播数据包（Raw Transaction）推送至 RPC 节点。 - 实时行情数据：钱包请求公开的市场汇率接口以显示折算价值，该请求为纯匿名公共 HTTP 查询，不包含任何钱包地址或设备标识。
- 第三方 DApp 交互：当您使用内置 DApp 浏览器或外部 WalletConnect 协议连接第三方应用时，仅在获得您明确授权后向 DApp 披露您的公钥地址。DApp 无法获取私钥，任何合约调用均需经您逐笔弹窗确认签名。
6. 移动端设备权限调用说明
QBit Wallet 遵循严格的按需申请权限原则：
- 相机权限 (Camera)：仅用于扫描收款二维码或 DApp 授权连接二维码，扫描完成后即刻释放，绝不抓取相册照片或上传至任何服务器；
- 生物识别权限 (Face ID / Touch ID / 指纹)：用于设备端本地快速解锁钱包，生物识别计算完全由系统底层的 Secure Enclave 处理，应用本身无法触碰任何生物特征数据；
- 剪贴板权限 (Clipboard)：仅当您主动点击“粘贴地址”按钮时读取一次剪贴板内容，绝不进行后台轮询或监听。
7. 用户权利声明 (User Rights & Control)
根据全球数据保护法规（包括 GDPR、CCPA 以及去中心化主权标准），您享有以下完全权利：
- 完全导出权：在输入正确安全密码后，您可随时在应用内导出助记词或私钥，迁移至任何兼容的钱包工具；
- 完全清除权（Data Deletion）：您可在设置中一键“重置/删除钱包”或卸载应用，所有本地加密数据和偏好将立即彻底擦除；
- 选择网络权：您可自主配置、切换不同的区块链网络或私有 RPC 节点，不依赖任何特定中继服务器。
8. 未成年人隐私保护
QBit Wallet 专为具备民事行为能力的法定成年人设计，不针对且不故意面向 13 周岁（或您所在国家/地区适用的法定年龄）以下儿童。我们不会有意收集儿童的任何个人信息。
9. 政策修订与官方联系方式
随着区块链技术更新或合规监管要求，我们可能会适时更新本政策。最新政策将始终直接公布于官方网址 https://qbitwallet.io/privacy.html。
如果您对本隐私政策、数据安全实践或去中心化交互有任何疑问或合规咨询，请通过以下官方渠道与我们联系：
- 官方技术支持邮箱：support@qbitwallet.io
- 隐私与法务合规邮箱：privacy@qbitchain.io
- 官方网络门户：https://qbitwallet.io/
QBit Wallet Privacy Policy
1. Who We Are & Scope
This Privacy Policy applies to the QBit Wallet mobile applications (iOS & Android, App ID: io.qbitwallet.app), Chrome browser extension, and official Web interfaces provided by the QBit Chain core team.
We strictly adhere to the decentralized ethos of self-sovereign user identity and data autonomy. This policy outlines how information is handled when you interact with the QBit Wallet client.
2. Non-Custodial Keys & Asset Disclaimer
Unlike traditional custodial financial institutions or centralized cryptocurrency exchanges:
- Non-Custodial Private Keys: When you generate or import a wallet, your BIP39 mnemonic seed phrase and BIP44 (Coin Type 766) private keys are stored strictly locally on your device, protected with industry-standard AES-256 hardware-backed encryption.
- Zero Cloud Transmission: Your private keys, seed phrases, and passwords are never transmitted across the network to QBit servers or third-party cloud infrastructure.
- No Centralized Custody: The QBit team has no technological capability or legal authority to access, control, freeze, confiscate, or recover your private keys or blockchain assets.
3. Information We Do Not Collect (Zero PII Policy)
We rigorously enforce data minimization principles. We explicitly DO NOT collect or retain:
| Data Category | Collection Status | Details |
|---|---|---|
| Personally Identifiable Information (PII) | ❌ Zero Collection | No real names, government IDs, physical addresses, or phone numbers. |
| Account Credentials | ❌ Zero Collection | No centralized registration, email logins, or social account linkages. |
| Private Keys & Seed Phrases | ❌ Zero Collection | Generated locally; never leaves your device's secure enclave. |
| Asset Holdings & Transaction Records | ❌ Zero Central Storage | Transaction histories exist solely on public blockchain ledgers. |
| Behavior Tracking & Ad Profiling | ❌ Zero Tracking | No third-party trackers, telemetry spyware, or advertising identifiers. |
4. Data Stored Locally on Your Device
To enable offline capability and smooth user experience, only minimal non-identifiable configuration is stored in your device's secure local sandbox (e.g., iOS Keychain, Android EncryptedSharedPreferences):
- Encrypted Vault Data: Mnemonic seed phrases and private keys encrypted with your local app passcode;
- App Preferences: Preferred interface language, display fiat currency (USD, EUR, GBP, CNY, etc.), and auto-lock timeout duration;
- Local Address Book: Recipient wallet addresses manually saved by you for recurring transfers;
- Custom Network & Token Lists: Custom SPL token mint addresses or custom RPC node URLs specified by you.
All local data can be permanently erased at any time by resetting the wallet or uninstalling the app.
5. Network Communications & Blockchain Interaction
To perform decentralized blockchain interactions, QBit Wallet interacts directly with decentralized protocols:
- RPC Node Queries: The app connects to QBit Chain validator nodes (e.g.,
https://api.devnet.qbitchain.io) to query account balances and broadcast signed transactions. Cryptographic signatures are completed locally before raw transactions are submitted. - Market Price Feeds: The app queries public pricing endpoints to display fiat estimations. These queries are anonymous and contain no wallet addresses or device telemetry.
- DApp Browser Connectivity: When connecting to third-party Web3 DApps, only your public address is exposed after explicit user approval. DApps never receive private keys, and all transactions require on-screen confirmation.
6. Device Permissions
QBit Wallet requests only minimal permissions strictly necessary for core functionality:
- Camera: Used solely to scan QR codes for wallet addresses or DApp connection requests. Never accesses existing photo libraries or transmits camera feeds.
- Biometrics (Face ID / Touch ID / Fingerprint): Used strictly for local device-level unlocking via the OS Secure Enclave. Biometric data is never accessible to the application.
- Clipboard: Accessed only when you explicitly tap the "Paste" button to input an address.
7. User Rights & Data Control
In accordance with global privacy frameworks (GDPR, CCPA) and Web3 standards, you maintain absolute control over your digital identity:
- Right to Export: You can export your mnemonic seed phrase or private key at any time using your local authentication passcode.
- Right to Erase: You can execute a complete local data purge via "Reset Wallet" in settings or by uninstalling the application.
- Network Sovereignty: You have the freedom to configure any custom or private RPC endpoint to route your blockchain traffic.
8. Children's Privacy
QBit Wallet is designed for adult users of legal age. We do not knowingly solicit or collect data from children under the age of 13 (or applicable local age threshold).
9. Policy Updates & Official Contact
We may update this Privacy Policy to reflect technical advancements or regulatory guidelines. Updates are posted directly at https://qbitwallet.io/privacy.html.
For questions or privacy inquiries, please contact our dedicated team:
- Official Support Email: support@qbitwallet.io
- Privacy & Compliance Email: privacy@qbitchain.io
- Official Website: https://qbitwallet.io/