CryptoBeam Privacy Policy
Who we are
CryptoBeam is developed and published by Christopher Lassiter ("we," "us," or "the developer"). You can reach us at: ops@caffeinateddad.dev.
The data CryptoBeam handles
CryptoBeam works by reading information you provide and information that is already public on the blockchain. Here is everything the app touches:
Exchange API keys
To display your exchange balances, you can enter read-only API keys for supported exchanges (such as Kraken and Coinbase). These keys are stored locally in the macOS Keychain on your device. They are never transmitted to the developer and are never synced off your device by us. The app uses them only to request your balances directly from the exchange you provided them for.
Public wallet addresses
You can add public blockchain addresses (and extended public keys) to track on-chain balances. These are public identifiers, not secrets. They are stored locally on your device and, if you enable iCloud sync, in your personal iCloud account so your wallet list is available across your own devices.
Third-party data API keys
You may enter your own keys for blockchain data and pricing providers (such as Helius, Alchemy, and CoinGecko). These are stored locally in the Keychain and used only to fetch the data you requested.
Your app settings
Preferences such as refresh intervals, display options, dust threshold, and view modes are stored locally on your device.
CryptoBeam does not ask for, store, or transmit your private keys, seed phrases, or recovery phrases. The app never needs them and will never request them.
What we collect
Nothing.
We do not operate any servers that receive your data. We do not use analytics, advertising, tracking, or crash-reporting services that send your information to us. We have no ability to see your balances, your API keys, your wallet addresses, or your activity. We do not build user profiles, and we do not sell or share data, because we do not have your data to begin with.
Where your data goes
CryptoBeam communicates directly from your device to third-party services that you choose to configure, in order to show you your own portfolio. Specifically:
- Cryptocurrency exchanges you connect (e.g., Kraken, Coinbase) — to retrieve your account balances using the read-only API keys you provide.
- Blockchain data providers (e.g., Helius for Solana, Alchemy for Ethereum, and public blockchain APIs for Bitcoin, XRP, Stellar, Dogecoin, TON, and Tron) — to read balances for the public addresses you add.
- Pricing providers (e.g., CoinGecko and GeckoTerminal) — to retrieve current market prices and token information.
These requests go directly from your device to those providers. The developer is not a party to and cannot see these communications. Each of these providers has its own privacy policy and terms, which govern their handling of any request data. We encourage you to review the policies of any service you connect.
iCloud sync (optional)
If you enable iCloud sync, your list of public wallet addresses and labels is stored in your personal iCloud account (via Apple's iCloud Key-Value Storage) so that it stays consistent across your own Apple devices. This data resides in your iCloud account under your control and is governed by Apple's Privacy Policy. The developer has no access to your iCloud data.
Your exchange API keys and other secrets are never synced via iCloud by the app — they remain in the Keychain on each individual device. iCloud sync covers only your non-sensitive, public wallet list. You can disable iCloud sync, and you can remove wallets at any time within the app.
Data storage and security
- API keys and other credentials are stored using the macOS Keychain, the operating system's secure credential store.
- Wallet addresses, settings, and cached data are stored locally in the app's storage on your device.
- All network requests to exchanges and data providers are made over encrypted connections (HTTPS/TLS).
Because your sensitive data never leaves your device (except optional public wallet data via your own iCloud), the primary safeguards for that data are the security of your device, your macOS account, and your Apple ID. We recommend keeping your device secured and your operating system up to date.
Data retention and deletion
You are in control of all data in CryptoBeam:
- Remove a wallet at any time using the delete control in Settings.
- Clear an API key at any time using the Clear control in Settings, which removes it from the Keychain.
- Delete all data by deleting the CryptoBeam app, which removes its local storage. Keychain items and any iCloud-synced wallet list associated with the app are removed according to macOS and iCloud behavior; you may also remove iCloud data through your Apple ID settings.
We retain no copies because we never receive your data.
Children's privacy
CryptoBeam is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect information from children. The app is intended for adults managing their own cryptocurrency holdings.
Third-party services
CryptoBeam lets you connect to third-party exchanges and data providers of your choosing. We do not control and are not responsible for the privacy practices of those services. Any data you send to them (for example, by configuring an API key) is subject to their respective privacy policies and terms of service.
Changes to this policy
We may update this policy as the app evolves (for example, if new features are added). When we make material changes, we will update the "Last updated" date above and, where appropriate, note the change in the app or its App Store listing. Continued use of the app after an update constitutes acceptance of the revised policy.
Contact
If you have questions about this privacy policy or how CryptoBeam handles data, contact us at: ops@caffeinateddad.dev