Who we are
bagfolio is an iOS and Android app that tracks the value of crypto you already own. This policy covers the app and this website. Questions: iambatoan@gmail.com.
Information we collect
There is no bagfolio sign-up, login or user profile, and we do not keep a database containing your portfolio. We do not add a general-purpose analytics or crash-reporting service. The app and its service providers do process the limited data described below when you use network features.
What leaves your device, and why
| Data | Sent to | Why |
|---|---|---|
| Public wallet addresses you add | Our stateless proxy (Google Cloud Functions) → Alchemy; Bitcoin addresses → blockstream.info, or mempool.space if that is unavailable | To read on-chain balances. The proxy holds no database and keeps nothing beyond ordinary short-lived server request logs. |
| Addresses derived from a Bitcoin extended key (xpub / ypub / zpub) | The same Bitcoin services as above | An extended key is the root of a whole wallet, so the app works out that wallet's addresses on your phone — both the ones you receive on and the change addresses your own spending creates — and looks each one up to read its balance. The first scan checks roughly 40 addresses; later refreshes check far fewer. The key itself is never sent anywhere. |
Ticker symbols you hold (e.g. BTC, ETH) | Alchemy Prices API via the same proxy | To fetch current prices. Symbols alone do not identify you. |
| Selected currency code | open.er-api.com | To fetch daily exchange rates. The request contains no personal data. |
| App-integrity token and standard request metadata | Firebase App Check / Google, then our proxy | To confirm that protected proxy requests come from a genuine app installation and reduce abuse. It is not tied to a bagfolio account. |
| IP address, app interactions, diagnostics and device/account identifiers available to the SDK | Google AdMob on the free plan | To serve and measure non-personalised or limited ads, diagnose the SDK and prevent fraud. Android advertising-ID permissions are blocked, but Google says its SDK can still process identifiers such as App Set ID. |
| Standard network information (such as IP address and device type) | Every internet service above; Firebase Hosting and Google Fonts when you visit this website | Needed to deliver network requests and web content. Providers may retain ordinary security and request logs under their own policies. |
Manual holdings never include an address. Amounts you type are used on the device only and are never sent anywhere, except inside a backup you create yourself.
What never leaves your device
- Seed phrases and private keys — the app never asks for them, and pasting one into the address field is refused by name rather than accepted.
- Bitcoin extended public keys (xpub / ypub / zpub). The key stays on your phone; only the individual addresses worked out from it are looked up.
- The amounts in your manual holdings, your labels, and your settings.
- Your backup passphrase, and the key derived from it (kept in secure operating-system storage on this device).
- Biometric data — Face ID, Touch ID and Android biometrics are handled by the operating system, which tells the app only "pass" or "fail".
Stored on your device
Wallet addresses, manual holdings and preferences are stored in the app's own storage on your phone. Deleting the app removes them. Settings → Clear all data wipes them immediately.
Advertising (free plan only)
The free plan shows up to two ads supplied by Google AdMob. Before requesting an ad, the app uses Google's User Messaging Platform (UMP) to show any privacy message required for your region and checks whether ads may be requested. A visible Ad privacy choices entry appears in Settings when UMP requires one.
Every ad request is marked non-personalised. The app does not request Apple's IDFA, and its Android manifest blocks advertising-ID and Privacy Sandbox ads permissions. Google states that the Mobile Ads SDK nevertheless collects and shares IP address, product interactions, diagnostic information and available device/account identifiers for advertising, analytics and fraud prevention. See Google's privacy policy. Pro users are not shown ads and the app does not request ads for them.
Subscriptions
bagfolio Pro is an auto-renewable subscription sold through the Apple App Store on iOS and Google Play on Android. The applicable store handles payment, renewal and purchase records under Apple's privacy policy or Google's privacy policy. The app reads store entitlement information needed to unlock Pro. bagfolio has no purchase account system and does not receive your full payment-card details.
Backups
On iOS, if you turn on iCloud backup, the file is written to your iCloud Drive under your own Apple ID. We have no access to it. Optionally it is encrypted with a passphrase you choose (PBKDF2-SHA256 and AES-256-GCM, performed on the device). If you lose that passphrase, nobody — including us — can open the backup. On either platform, exported CSV, PDF and backup files go only where you choose through the operating-system share sheet.
Children
bagfolio is intended for adults aged 18 and over and is not directed to children.
Your rights
Your portfolio is on your device: you can view, change or erase it in the app at any time. We do not have a bagfolio profile or portfolio database to retrieve for you. If you have a question about limited service logs or a privacy request, contact us below; we will handle it under applicable law.
Changes
If this policy changes we will update the date above and, for anything significant, note it in the app's release notes.
Contact
Questions about any of this?
Ask a real person — no ticket system, no chatbot.
iambatoan@gmail.com