Privacy Policy

Pangea Wallet · Pangea Labs S.A.S (Colombia) · Last updated: August 25, 2026

Pangea Wallet is operated by Pangea Labs S.A.S, a company incorporated in Colombia and registered with the Chamber of Commerce, and a Money Services Business (MSB) registered with FinCEN. This page explains what data the app handles — and, above all, what it doesn’t.

The principle: your keys never leave your device

Pangea Wallet is a non-custodial wallet. Your recovery phrase and private keys are generated on your device, encrypted on your device and stored only on your device. We don’t see them, we don’t receive them, and we can’t move your funds or recover your phrase: that’s why the backup is yours.

What we do NOT collect

• We don’t use analytics or behavioral trackers.
• We don’t sell or share data with advertisers.
• The recovery-phrase mode has no accounts: we don’t ask for your name, email or phone.
• We don’t store your keys, phrases or passwords on our servers.

Phrase mode and Google mode

If you use the recovery phrase, the app works without an account: we keep no personal data of yours on our servers.

If you sign in with Google, there is an account, and with it we keep the minimum needed for the service to work across your devices:

• Sign-in is provided by Privy, which processes your Google email to create and safeguard your embedded wallet (see Privy’s policy).
• Your profile name and photo, if you set them, are stored on our server so they show the same on all your devices.
• If you set a PIN, we store a hash (a non-reversible fingerprint) of the PIN and of your security-question answers. No one — not support, not anyone who breaches the database — can read the PIN or the answers: they only serve to check that they match.

What third parties process when you use certain features

• Network queries: to show balances and send transactions, the app talks to Solana and Stellar nodes (e.g. Helius, Horizon). Those services see your public address and your IP, as with any wallet. Blockchain transactions are public by design.
• Buying with card: this runs through Privy with the Meld aggregator, which routes to third-party payment providers. Each provider runs its own identity verification (KYC) directly with you and under its own policy — that data is received and kept by the provider, not by us.
• Shop purchases (Cryptorefills): when you buy a gift card, a top-up or an eSIM in the Shop, we share with Cryptorefills (Big Dream Ventures BV, Netherlands) your email, the recipient you enter (an email address or a phone number), your IP address and browser user-agent (required by their anti-fraud checks), and the purchase details (product, amount, and the wallet address you pay from). Cryptorefills processes this as the seller of that purchase, under its own privacy policy. None of this happens unless you use the Shop.
• Infrastructure: the app is served from Vercel, which logs technical data (IP, browser agent) to operate the service.

Local-currency deposits, bank accounts and identity verification

These features are optional and only happen if you start them. Opening a bank account or depositing in local currency requires, by law, verifying your identity. Two regulated providers do this, each for its region:

• Yativo — bank accounts and local-currency deposits and payment links for Colombia and Latin America.
• Fin — bank accounts for the United States.

What is sent: your personal data (name, date of birth, email, phone, address, occupation and tax/ID document), photos of your ID, a selfie and a proof of address.

How it passes through: this data does cross our server, because it’s our server that talks to the provider. It does so in transit: it receives what you send, forwards it and discards it when the request ends. We don’t store your documents or personal data in any database of ours, we don’t write them to disk, and we don’t log them.

What stays on your device: the case identifier, so we can show you the status, and — if you leave the form halfway — a draft of what you had typed, so you can resume. That draft lives only on your device, is never sent to our servers, doesn’t include your photos, and is deleted the moment you submit or press “Discard”. When the deposit settles, it’s converted to USDC and lands in your own wallet.

Who keeps it: the corresponding provider (Yativo or Fin) and its associated entities, under their own policy and for as long as anti-money-laundering regulation requires. Pangea doesn’t custody your money.

If you want it deleted: since it’s the provider who keeps it by legal obligation, write to us at gustavo@pangeawallet.space and we’ll process your request with them. Deleting your wallet from your device does not erase a case already submitted to a provider.

When you contact support

If you use the app’s support screen, so we can reply and prevent abuse we send our team: your message, the email you leave, your wallet’s public address, your IP and approximate country, and a device identifier. In Google mode we also attach your account’s verified email. We don’t include your keys, your phrase or your password.

Deleting your account and data

Phrase mode: the “Delete this wallet from the device” option, under Profile → Account, removes the encrypted wallet from your device immediately and permanently (there is no copy on our servers).

Google mode: the “Delete my account” option, under Profile → Account, deletes your sign-in account, the wallet created with it, and the associated data (profile and PIN credentials). It’s immediate and can’t be undone. Since that account holds your wallet’s key, deleting it means losing access to any funds it held: save your private key or move your balance first. If that option isn’t available in your version of the app, write to gustavo@pangeawallet.space and we’ll process the request within 30 days at most.

This page also serves as the web resource for account-deletion requests: you can ask from here, without installing the app, by writing to that same address.

Minors

Pangea Wallet is not directed at people under 18.

Changes to this policy

If this policy changes, we’ll update this page and the date above. Significant changes will be announced inside the app.

Contact

Pangea Labs S.A.S · gustavo@pangeawallet.space

See also the Terms of Service.