Privacy Policy

Effective: · Version 1.0
Zero Data Collection
// summary — what we never do
No data collection
No network requests
No analytics or tracking
No iCloud sync
No third-party SDKs
No ads
No crash reporting
No iCloud / iTunes backup
01

What wordward Is

wordward is a fully-offline iOS application for storing BIP-39 mnemonic seed phrases. It is not a wallet — it performs no address derivation, sends no transactions, and connects to no blockchain RPC or any other network endpoint.

Think of it as an encrypted notebook: you store your 12 / 15 / 18 / 21 / 24-word recovery phrase, and look it up when needed. Nothing more.

02

Data We Collect

wordward collects no data whatsoever. There are no servers, no accounts, no analytics pipelines, and no way for us to access anything you enter into the app.

data_collection
none
network_requests
none — ATS globally disabled; zero URLSession calls at runtime
analytics
none
crash_reporting
none
advertising_identifier
none
third_party_sdks
none
server_side_logging
none

You can independently verify the zero-network claim by monitoring outbound connections via a firewall or proxy — wordward will show no activity.

03

Local Storage & Encryption

All data lives exclusively on your device. The following controls are enforced at the implementation level:

▸
AES-256-GCM + Argon2id — Mnemonic data is encrypted with AES-256-GCM (Apple CryptoKit). The encryption key is derived from your password via Argon2id (libsodium), making brute-force attacks computationally prohibitive.
▸
Keychain access control — Keys are stored with kSecAttrAccessibleWhenPasscodeSetThisDeviceOnly and Synchronizable=false. Keys never leave the device and are never synced via iCloud Keychain.
▸
File protection — Data files use NSFileProtectionComplete + isExcludedFromBackup=true. Files are inaccessible while the device is locked and are excluded from all iCloud and iTunes backups.
▸
Clipboard & keyboard isolation — Clipboard access is disabled throughout the app. Third-party keyboards are blocked; only the system keyboard is permitted.
▸
Screen capture protection — During screenshots, screen recordings, and AirPlay mirroring, all sensitive fields render as solid black. Mnemonic data cannot be captured visually by the OS or any external tool.
▸
Biometric authentication — Face ID / Touch ID is handled entirely by Apple's Secure Enclave. wordward never accesses or stores biometric data.
04

Vault Export

wordward provides an optional encrypted vault export (.wwbk) for device migration. This file is protected by an independent password using Argon2id + AES-256-GCM and is never uploaded anywhere.

Exports are generated locally and shared only through channels you explicitly initiate (AirDrop, Files app, etc.). wordward has no access to exported file contents and logs no export events.

05

Scope Disclaimer

wordward does not buy, sell, trade, lend, stake, or otherwise interact with any cryptocurrency or financial asset. No financial operation of any kind occurs within the app.

wordward is a loss-resistant mnemonic storage tool. The ultimate source of truth for any seed phrase remains the physical copy written on paper or engraved on steel. Please do not rely solely on any digital storage method.

06

Children's Privacy

wordward is rated 17+ on the App Store and is not directed at anyone under 17. We do not knowingly collect information from minors, nor do we have the technical means to do so.

07

Changes to This Policy

If we make material changes, we will update the effective date at the top of this page and ship a new app version referencing the updated policy. Given the offline, zero-collection architecture of wordward, significant policy changes are not anticipated.

08

Contact

Questions or concerns about this Privacy Policy:

App            wordward — Offline Seed Notebook
Bundle ID      com.mgtouzi.wordward
Email          privacy@mgtouzi.com