Privacy Policy

Company identity and controller

This Privacy Policy is issued by Tronoxa LLC, a Wyoming limited liability company (Filing ID 2026-002030217; D-U-N-S Number 145077818), with its principal and mailing address at 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States. Tronoxa LLC is responsible for the off-chain processing described in this policy. Contact: office@tronoxa.com.

1. Scope and self-custody

TRONOXA is a non-custodial, self-custody software wallet for the TRON network and supported assets on BNB Smart Chain (BSC). Recovery phrases and private keys are generated or imported and transaction signing occurs only on your device. Your recovery phrase, private key, app PIN, and biometric data are not sent to TRONOXA servers. TRONOXA cannot access or recover them, sign for you, freeze a wallet, or transfer your assets.

2. Data we handle

On Android only, when you request a token swap, TRONOXA may process the public wallet address, token pair, amount, quote identifier, route, slippage setting, minimum-received amount, price impact, approval requirement, Energy requirement, fees, and related public transaction hashes needed to prepare the requested transaction. Swap is available only in the Android version. The iOS version does not provide token-swap or cryptocurrency-exchange services.

Information kept only on your device includes wallet names, wallet secrets, app PIN and security preferences, custom-token choices, the local notification log, and downloaded transaction-history pages. When you use other network features, TRONOXA may process public wallet and recipient addresses, balances, resources, token holdings, public transaction history, transfer amounts, approval requirements, Energy requirements, fees, transaction hashes, energy-order status, and address-risk results. When you use the Energy service, TRONOXA may also process the selected payment network and asset, public payer and payment-recipient addresses, payment amount, network fee, transaction hash, and order or refund status. For notifications and monitoring, we may store a randomly generated app device identifier (not an advertising or hardware identifier), wallet identifier, push token, language, monitoring settings, and alerts. Infrastructure may record IP address, request time, and error or security details. If you contact support, we process your email address and the content you provide.

Public TRON network data and savings estimates

TRON is a public blockchain. Wallet addresses, transactions, balances, token holdings, votes, representatives, delegations, account permissions, multisig transaction data, resources, fees, and similar on-chain records are publicly available through the network and independent block explorers; TRONOXA does not obtain them from a private source. TRONOXA may retrieve and process these public records to provide wallet and network features. The “Savings” figure is an estimate of network cost avoided, calculated from relevant public network records and Energy-service transaction records. It is not a wallet balance, cash value, interest, reward, yield, investment return, or promise of financial benefit.

BSC addresses and BEP20 transactions

For signing-capable wallets, TRONOXA derives the matching public BSC address locally from the same wallet secret during creation or import and stores only the public address in wallet metadata. The recovery phrase or private key never leaves your device. When you use BSC features, public BSC addresses, balances, token holdings, transaction history, transaction hashes, signed transactions, replacement or cancellation transactions, and fee or market-price queries may be processed by BSC network nodes, the authenticated TRONOXA relay, and blockchain data or price providers. Signed transactions, including speed-up or cancellation replacements, are broadcast to the public BSC network. A watch-only wallet requires a separately provided BSC address and cannot sign.

Local browser, address-book, and permission data

Address-book entries, browser bookmarks and browsing history, and the preferred TRON permission used for signing are stored on your device. Websites opened in the in-app browser cannot access wallet keys or request signatures because the browser does not provide a wallet-signing bridge. The iOS in-app browser does not provide wallet signing to websites. Public URLs and normal network metadata may still be visible to websites and network providers.

3. Camera, photos, and biometrics

Camera and photo access is used only when you choose to scan a QR code or select an image containing one. QR decoding occurs on your device. TRONOXA does not upload your photo library or selected QR image to its servers. Biometric authentication is performed by your device operating system; TRONOXA receives only the success or failure result and does not receive or store biometric templates.

4. How data is used

Data is used to display wallet information, prepare and verify transactions, estimate network costs, obtain energy, screen public addresses and counterparties for risk, deliver notifications, prevent fraud and abuse, troubleshoot failures, respond to support requests, and comply with applicable legal obligations. Depending on applicable law, processing is based on providing a service you request, your consent for optional features, legitimate interests in security, fraud prevention, and support, or legal obligations. TRONOXA does not sell personal data, share it for targeted advertising, or use wallet activity for third-party advertising or cross-app tracking.

5. Services and parties involved

On Android only, to obtain a swap quote and prepare a non-custodial swap, the public wallet address, token pair, amount, slippage setting, and related public transaction data may be sent to supported third-party decentralized-exchange smart contracts and routing services, currently SUN.io, and to related TRON nodes and data providers. Signed approval and swap transactions are broadcast to the public TRON network. The iOS version does not provide this service.

For other features, public addresses, signed transactions, transaction data, and token or market-price queries may be sent to TRON or BSC network nodes, blockchain data and price providers, risk-screening services, and Energy providers as needed to perform your request. An Energy provider may receive a public receiving address, required Energy amount, and order reference. Depending on the payment option you select, public payment addresses, the payment asset and network, amount, fee, and transaction hash may also be processed to verify payment and complete or refund the order. Push tokens, preferred language, and notification content may be processed by Expo and the notification services operated by Apple or Google. Hosting, security, and professional service providers may process limited data on our behalf. These parties do not receive your recovery phrase, private key, app PIN, or biometric data from TRONOXA. Third-party services are also governed by their own privacy terms.

Service-provider data protection

We require service providers that process data on our behalf to provide the same or equivalent level of protection described in this Policy and required by applicable law.

6. Storage, retention, and deletion

Wallet secrets, PIN data, wallet names, custom-token choices, and locally cached history remain on your device until you delete the wallet, clear app data, or remove the app. Transaction-history pages requested through TRONOXA are cached on your device; the history endpoint does not maintain a server-side account or transaction-history archive, although infrastructure and upstream providers may keep limited security logs under their policies. Monitoring subscriptions, alerts, and push identifiers are retained while active or needed to provide the feature. Energy-order, payment, transfer, provider, fraud-prevention, and security records may be retained as reasonably necessary to complete the service, resolve disputes, and meet accounting or legal obligations. Deleting a wallet removes its local secrets and requests removal of its monitoring subscription, but uninstalling the app may not notify our servers and does not erase completed order, security, or public blockchain records. Public blockchain records cannot be changed or deleted by TRONOXA. You may request deletion of eligible off-chain data at office@tronoxa.com; some records may be retained where legally required or needed to establish or defend claims.

7. Security and your choices

We use device secure storage, encrypted transport, access controls, and other reasonable safeguards. No system can guarantee absolute security. You may refuse optional notification, camera, photo, or biometric permissions. Core wallet functions remain available where technically possible, although the related optional feature may not work.

8. Age, international processing, and rights

TRONOXA is not directed to children. You must be at least 18 years old, or the age of legal majority where you live, to use it. Service providers may process data in countries other than yours, subject to applicable safeguards and legal requirements. Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, or portability, to withdraw consent for optional processing, and to complain to a privacy authority. These rights do not alter immutable public blockchain records and may be limited where retention is legally required.

9. Changes and contact

We may update this policy when the app, providers, or legal requirements change. The effective date will be updated and material changes will be communicated when required. For privacy questions, consent withdrawal, or eligible data requests, contact Tronoxa LLC at office@tronoxa.com or by mail at 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States.