← LongPay Wallet

Privacy Policy

Last updated: 21 September 2026 · LongPay Wallet is published by Chatbtc Limited, Hong Kong — the company behind LongPay.

The short version: LongPay Wallet is a self-custodial wallet. There is no account, no sign-up, no analytics, no advertising and no tracking. We run no wallet server: your keys are generated on your device, stay on your device, and the app talks directly to public blockchain infrastructure. We cannot see your balances, your transactions, or your recovery words — and we never receive them.

1. Data we collect

None, by default. The wallet sends nothing to Chatbtc Limited and has no backend of its own. The only time the app contacts our infrastructure is when you use the optional LongPay features described in section 4.

2. What stays on your device

Your wallet. The 12-word recovery phrase is generated locally and stored only in an encrypted vault on your device (scrypt key derivation + AES-256-GCM). It is decrypted in memory when you unlock and is never transmitted anywhere. Device backups made by your operating system may include this encrypted vault; it cannot be read without your password.
Settings, contacts and watch-only lists you create in the app — stored locally, never uploaded.
Camera. QR codes are decoded on the device. Camera frames are processed locally and never recorded or uploaded.
Face ID / Touch ID / fingerprint. Biometric unlocking is handled entirely by your device's operating system. The app only receives a yes/no result; biometric data never reaches the app or us.
Encrypted backups you export (.lpbackup) are created at your request and saved where you choose. They are encrypted with your passphrase; we never receive them.

3. Third parties the app talks to

To show balances and send transactions, the wallet queries public blockchain services directly from your device: Bitcoin (mempool.space), Ethereum (public RPC providers such as PublicNode, Cloudflare and Blockscout), Tron (TronGrid), and CoinGecko for exchange rates. Like any wallet using public infrastructure, these providers can see your IP address and the addresses and transactions being queried. They are independent services with their own privacy policies, and we send them nothing beyond those queries. Advanced users can self-host the web app and point it at their own endpoints.

4. Optional LongPay features

Pay by @handle. When you pay a LongPay merchant by handle, the app sends the handle and the HK$ amount to longpay.hk to create the charge and fetch the merchant's payout address. This tells LongPay the charge details — but not who you are: there is no wallet account or identifier attached.
Show LongPay names (off by default). If you switch it on, the app asks longpay.hk whether counterparty addresses in your activity belong to a publicly payable merchant, which shares those addresses and your IP with LongPay. You can turn this off at any time in Settings.

These requests are covered by the LongPay Privacy Policy.

5. Blockchains are public

Transactions you send are recorded permanently on public blockchains and are visible to anyone. Addresses are pseudonymous, not anonymous. Nothing in this policy can change how public blockchains work.

6. Children

The wallet is a financial tool and is not directed at children under 18.

7. Your choices and deletion

There is nothing to delete on our side, because we hold nothing. Deleting the app (or wiping the wallet in Settings) removes the encrypted vault from your device — make sure your 12 words are safely written down first, because they are the only way to restore your funds. The optional LongPay name lookup can be disabled in Settings at any time.

8. Changes to this policy

If the wallet's behaviour changes in a way that affects privacy, we will update this page and its "Last updated" date before the change ships.

9. Contact

Chatbtc Limited, Hong Kong · support@longpay.hk. We handle personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO).