Privacy Policy

Effective Date: March 1, 2026 | Last Updated: March 1, 2026

Vigil ("we," "us," or "our") is a mobile application operated from South Carolina, United States. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Minimal by Design

Vigil is designed to collect as little data as possible. We do not collect your name, email address, phone number, or any personal identification documents.

Data	Purpose	Stored Where
Anonymous device ID	Rate limiting, abuse prevention	Supabase (cloud database)
Watched wallet addresses	Whale alert feature — shared cache for all users watching the same address	Supabase (cloud database)
Slippage preference	Swap configuration	On-device only (AsyncStorage)
Connected wallet public address	Fetch on-chain balances, portfolio data, transaction history	On-device only (memory)

We use anonymous authentication (Supabase Auth) — no email or password is required. A random session token is generated on your device to authorize API requests.

2. Information We Do NOT Collect

Private keys, seed phrases, or wallet passwords
Personal identity information (name, email, phone, address)
Location data or GPS coordinates
Contacts, photos, or device files
Browsing history or activity outside the app
Advertising identifiers or analytics/tracking SDKs

3. Non-Custodial Architecture

Vigil is a non-custodial application. We never have access to your private keys or the ability to move your funds. All transactions are signed locally in your wallet app (such as Seed Vault, Phantom, or Solflare) via the Solana Mobile Wallet Adapter protocol. We cannot initiate, approve, or reverse any blockchain transaction on your behalf.

4. Third-Party Services

Vigil uses the following third-party services to provide functionality. API calls to these services are proxied through our backend servers — your device IP address is not shared directly with them.

Service	Purpose	Data Shared
Helius	Solana RPC, transaction data, token information	Wallet public addresses, transaction signatures
Jupiter	Swap routing and execution	Token mints, amounts for swap quotes
DexScreener	Token prices, market data, feed content	Token mint addresses
Supabase	Authentication, database, edge functions	Anonymous device ID, watched wallet addresses

Each third-party service has its own privacy policy. We encourage you to review them:

5. Data Retention

Watched wallet data is retained in the shared cache as long as at least one user is watching that address. When all users remove a wallet, it is deleted.
Anonymous device IDs are retained for rate-limiting purposes and have no personally identifiable information linked to them.
Cached market data (token prices, feed data, scan results) is refreshed frequently and old entries are overwritten automatically.

6. Data Security

We implement the following security measures:

All API communications use HTTPS/TLS encryption
API keys are stored server-side and never exposed to client devices
RPC calls are proxied through authenticated edge functions with method whitelisting
Rate limiting is applied to all endpoints to prevent abuse
Database access is restricted via Row Level Security (RLS) policies

7. Children's Privacy

Vigil is not directed at individuals under the age of 18. We do not knowingly collect information from minors. If you believe a minor has provided data through the app, please contact us and we will delete it.

8. Your Rights

Since we collect minimal, non-personal data, most traditional data rights (access, correction, deletion of personal data) do not apply in a meaningful way. However:

You can remove watched wallets at any time within the app, which decrements the shared reference count and may trigger deletion.
You can disconnect your wallet at any time — we retain no record of the connection.
You can uninstall the app to remove all locally stored preferences and session data.
You can contact us to request deletion of any data associated with your anonymous device ID.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date at the top. Continued use of the app after changes constitutes acceptance of the updated policy. Material changes will be communicated via an in-app notice.