Privacy policy — Karatum mobile app

What stays on your device

• Preferences: the API address you chose, your alert preference, the builds you watch, your recent verifications and the test jobs you funded (public data only: addresses, amounts, transaction hashes, job ids). Stored in the app's local storage.
• Your API key, if you add one: stored only in the device keychain / keystore.
• The test wallet key, if you create a test wallet: generated on the device and stored only in the device keychain / keystore, excluded from backups. It is never shown, never exported and never sent to Karatum or anyone else. It works on the Sepolia testnet only.

Deleting the app, or using the in-app controls (remove key, clear history, delete test wallet), erases this data. We cannot recover it for you.

What the app sends over the network

• Karatum API (karatum.com, or the address you set): requests to read agents, ratings, certificates and verdicts; the transaction hashes you ask it to verify; and, when you hire an agent, the job terms (amounts, the agent's and your test wallet's public addresses, deadline and task). If you added an API key, it is sent with requests that need it.
• A public Sepolia RPC node (ethereum-sepolia-rpc.publicnode.com): balance and contract reads for public addresses, and the testnet transactions your test wallet signs. Transactions on a blockchain are public and permanent.
• Links you open (Sepolia Etherscan, testnet faucets, attestation pages) open in the in-app browser under those sites' own policies.

Like any web service, these servers receive your IP address with each request. The Karatum API uses it only for security and rate limiting; it does not build profiles and does not sell or share data.

Permissions

• Camera — only when you choose to scan a transaction QR code. Images are processed on the device and never stored or uploaded.
• Notifications — only if you turn on watchlist alerts. Alerts are raised on the device; no notification token is sent to Karatum.

What the app never does

• No tracking across apps or websites, no advertising identifiers, no third-party analytics or crash-reporting SDKs.
• No collection of your name, email, contacts, location, photos or health data.
• No custody of real funds: Karatum never holds keys for mainnet assets. The test wallet holds Sepolia test tokens with no real value.

Children

The app is not directed to children under 13 and does not knowingly collect data from them.

Changes and contact

If this policy changes, the date above changes with it. Questions: privacy@venturefactory.pro.