GramVault • Last updated: 25 September 2026
This Privacy Policy explains how DCOOS (“GramVault”, “we”, “us”, “our”) handles information in connection with the GramVault self-custodial wallet application (the “App”). It should be read together with our Terms of Service. By using the App you acknowledge this Policy. If you do not agree, do not use the App.
GramVault is self-custodial and account-free by design. In particular, we do not:
Because there is no phone-number step anywhere in the App, we do not collect a phone number to create, link, or use a VaultID.
The following stays local to your device and is not transmitted to us:
If you uninstall the App or wipe its data without backing up your Recovery Phrase, this information (and access to your funds) is permanently lost. We cannot recover it.
To function, the App must talk to public blockchains and third-party services. When it does, limited technical data is necessarily processed by those providers — most importantly your IP address and the wallet address(es) or data being queried. This can happen when the App:
We do not control these providers and do not receive your keys through them. Each provider processes data under its own privacy policy. Some may log IP addresses and requests and may be located outside your country.
Transactions, balances, wallet addresses, VaultID codes, and any owner-published VaultID nickname are recorded on public blockchains. This information is public (visible to anyone), permanent (it cannot be edited or deleted by us or by you), and potentially linkable (activity tied to an address may be correlated by third parties). Do not publish anything in a VaultID nickname, memo/comment, or address label that you consider private.
A VaultID is a 6-digit code held as an NFT. Its code, current owner address, and any nickname the owner chooses to publish are on-chain and public (see §4). We do not collect identity information to issue or use a VaultID. Minting occurs via a web portal and is an on-chain action; any data you enter there is governed by this Policy and the portal’s notices at the time.
Where the App offers messaging, message content may be end-to-end encrypted and readable only by the participants. We do not read the content of encrypted messages and cannot recover them if you lose your keys. Metadata strictly necessary to route messages may be processed by the relevant transport/relay.
The App does not embed third-party analytics SDKs. If you obtained the App from the Apple App Store or Google Play, the store platform may provide us with aggregated, non-identifying statistics and optional crash reports that you can control in your device/store settings. Those are governed by Apple’s or Google’s privacy policies.
To the limited extent we process any information, we use it to: operate and maintain the App and the features you request; broadcast and display blockchain data you ask for; secure the App and prevent abuse, fraud, and violations of our Terms; comply with law and respond to lawful requests; and improve reliability.
Where applicable, we rely on: performance of a contract (to provide the App you request); legitimate interests (security, abuse prevention, and improving the App, balanced against your rights); legal obligation (compliance and lawful requests); and consent where required (e.g. push notifications), which you can withdraw at any time.
We do not sell your personal data. We may share limited information: with the service providers/processors described in §3 to the extent needed to run the App; to comply with law, a subpoena, court order, or lawful government request, and to enforce our Terms or protect rights, safety, and security; and in connection with a merger, acquisition, or asset sale, subject to this Policy.
The third-party services the App uses may process data in countries other than yours, which may have different data-protection laws. Where required, we and our providers rely on appropriate safeguards (such as standard contractual clauses).
Because the App is account-free, we do not maintain profiles of users. On-device data persists until you delete it or uninstall the App. Any limited operational logs held by us or our processors (e.g. for security/abuse prevention) are kept only as long as necessary for the purpose or as required by law, then deleted or de-identified. Blockchain data is permanent and outside our control (§4).
We apply reasonable technical and organisational measures (including on-device encryption of sensitive data and optional biometric lock). However, no method of storage or transmission is 100% secure, and the security of your keys and device is ultimately your responsibility (see the Terms). Never share your Recovery Phrase; we will never ask for it.
The App is not directed to, and may not be used by, anyone under 18 (and in no event under 13, or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has used the App, contact us and we will take appropriate action.
Depending on where you live (e.g. under GDPR/UK GDPR or the CCPA/CPRA), you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data, and to non-discrimination for exercising them. Because we hold little or no personal data about you and cannot identify you from a wallet address alone, we may be unable to associate a request with an individual; where we can, we will honour valid requests as required by law.
You can also: control push notifications and biometrics in the App/device settings; delete on-device data by clearing app data or uninstalling; and manage store-level diagnostics in your Apple/Google settings. To exercise a right, contact us (§18).
The wallet apps do not use advertising cookies. Our website and the VaultID web portal may use strictly necessary cookies/local storage to function; any non-essential cookies, if used, will be disclosed and consented to on those sites.
We may update this Policy from time to time. Material changes will be indicated by an updated “Last updated” date and surfaced in the App or on our website. Continued use after changes take effect constitutes acknowledgement.
Privacy questions or requests:
DCOOS — GramVault
Email: admin@dcoos.com
Web: https://dcoos.com/gram/privacy