Privacy Policy

Last updated: April 6, 2026

Overview

Zonp is a wallet-native commerce application built on Zcash. Privacy is not a feature we added — it is the foundation of the entire system. This policy explains what data exists, where it lives, and what we can and cannot see.

What We Do Not Collect

Zonp does not collect, store, or transmit:

Your seed phrase or private keys
Your Zcash wallet balance
Transaction amounts, senders, or recipients
Order contents or item details
Your real name, email, phone number, or any personal identifiers
Your location (unless you voluntarily enter a store location as a seller)
Analytics, tracking pixels, or advertising identifiers

What Stays on Your Device

The following data is stored locally on your device using secure storage and never leaves it unless you explicitly choose to share it:

Your 24-word seed phrase (stored in encrypted device keychain via expo-secure-store)
Your wallet address and balance
Your inventory, orders, receipts, and transaction history
Your contacts list
Product photos you add to inventory items
App settings and preferences

What Our Server Sees

Zonp operates a backend service at api.zonp.app for two purposes:

Reputation Engine: When a buyer submits a review, the following is sent to our server: seller's Zcash address, buyer's Zcash address, star rating (1-5), optional text comment, order ID, transaction ID (for on-chain verification), and transaction value in ZEC. This data is used to compute seller reputation scores and is publicly visible on the reputation dashboard.

Storefront Publishing: When a seller publishes their store, the following is sent: store name, description, location (if provided), item listings with photos, and seller's Zcash address. This data is published to IPFS and registered in our storefront directory. It is intentionally public.

Zcash Shielded Transactions

All payments in Zonp use Zcash shielded transactions. This means the sender, receiver, amount, and memo content are encrypted on the blockchain. No one — including Zonp, blockchain explorers, or network observers — can see the details of your transactions. Only the parties involved (buyer and seller) can decrypt and read the transaction data.

IPFS Storage

Published storefronts are pinned to IPFS via Pinata. Content on IPFS is permanent and publicly accessible by design. Do not publish information to your storefront that you do not want to be public.

Third-Party Services

Zcash Lightwalletd servers — Your app connects to lightwalletd servers to sync your wallet. These servers can see your IP address but cannot see your transaction details (shielded).
Pinata (IPFS pinning) — Used to host published storefronts. Pinata can see the content you publish (it is public by design).
Blockchair — Used to verify transaction existence for the reputation engine. Only transaction IDs are queried, not amounts or addresses.
CoinGecko — Used to fetch ZEC/USD price data. No user data is sent.

Data Deletion

Since most data lives on your device, uninstalling the app removes it. For data stored on our server (reputation ratings and storefront registrations), contact us to request deletion. Note that content already published to IPFS cannot be unpublished from the network, though we can unpin it from our gateway.

Children

Zonp is not directed at children under 13. We do not knowingly collect data from children.

Changes

We may update this policy as the app evolves. Changes will be reflected on this page with an updated date.

Contact

Questions about privacy? Reach out through the in-app feedback form or visit zonp.app.