Privacy Policy
Last updated: July 1, 2026
1. Introduction
Compass ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use the Compass web and mobile applications and associated services. Please read this policy carefully. By using Compass, you agree to the practices described here.
2. Information We Collect
We collect information you provide directly — such as your name, email address, phone number, the financial details you enter (transactions, accounts, goals), and your Bitcoin wallet's extended public key (xpub) — as well as limited information generated automatically through your use of the app, such as usage analytics and basic device information. We do not sell your personal data to third parties, ever.
3. How We Use Your Information
Your data is used to provide and improve the Compass service, including reading your Bitcoin balance, calculating your net worth in Bitcoin, tracking spending categories, measuring your accumulation over time, and personalizing your experience. We may also use anonymized, aggregated data to improve our product features.
4. Bitcoin and Financial Data
Compass connects to your Bitcoin wallet using only your extended public key (xpub), which is strictly read-only. We can see your balance and transaction history to display it in the app, but we can never spend, move, or touch your funds — there is nothing to sign. Your private keys and recovery phrase are never requested, stored, or transmitted by Compass, and your coins remain on your own hardware wallet at all times. Where bank connections are offered, they are likewise read-only and we never initiate transactions on your behalf.
5. Data Sharing
We do not sell, trade, or rent your personal data. We may share data with trusted third-party service providers who help us operate the platform — for example, our cloud database and hosting provider (Supabase), usage analytics, and our payment partners (Stripe for card payments and BTCPay Server for Bitcoin payments) — subject to strict confidentiality agreements. We may also disclose data when required by law or to protect the rights and safety of our users.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us. Certain data may be retained for legal or audit purposes after account closure.
7. Security
We implement industry-standard security measures including encryption in transit (TLS) and at rest, row-level access controls so you can only ever reach your own data, and additional AES-256-GCM encryption for your Bitcoin wallet key. Compass is passwordless — you sign in with a one-time email link (web) or a one-time code sent to your phone (mobile), so there is no password to be guessed, reused, or leaked. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security, but we work hard to protect your information.
8. What We Store & How It's Protected
We want to be precise about what "encrypted" means, because it can mean two different things:
- Encrypted at rest & in transit — applies to all your data. It is encrypted on our servers' disks and travels over encrypted (TLS) connections. This protects against stolen hardware or intercepted traffic. It does not mean Compass can't read it — our systems decrypt this data to run the app (show your charts, totals, and history), the same as your bank or any other app you use.
- Only you can read it — applies to your wallet key (xpub). On mobile it never leaves your device and is never sent to us. On web it is encrypted with a separate key kept outside the database, so a database breach alone cannot read it.
Your data is also private from other users — enforced at the database level (row-level security), so no other Compass user can ever see your records. Compass is passwordless, so no passwords are ever stored, and payment card details are never held by Compass — they stay with our payment partners (Stripe and RevenueCat). In the table, "Encrypted" means the first kind above (secured, but readable by Compass to run the app) and "Only you"means the second.
| Data / Type | Stored? | Encrypted? | Notes |
|---|---|---|---|
| Account & Identity | |||
| Yes | Encrypted | Used to sign you in (web). | |
| Phone number | Yes | Encrypted | Used to sign you in (mobile). Optional on web. |
| Password | No | — | Compass is passwordless — nothing to store or steal. |
| Display name | Yes | Encrypted | The name shown across your app. |
| Profile photo | Yes | Encrypted | Viewable by anyone with the image link. |
| Age / Gender | Yes | Encrypted | Optional — only stored if you choose to share it. |
| Onboarding answers | Yes | Encrypted | Your goals and preferences from setup. |
| Your Bitcoin Wallet | |||
| Wallet key (xpub) | Yes | Only you | Encrypted with AES-256; the unlock key is kept outside the database, so even Compass can't read it and a full database leak reveals nothing. On mobile it never leaves your phone. See details below the table. |
| Bitcoin balance | Yes | Encrypted | Read-only. Compass sees your balance but can never move funds. |
| Balance history | Yes | Encrypted | Snapshots over time, so you can track how you're stacking. |
| Your Financial Data | |||
| Transactions | Yes | Encrypted | Merchant, amount, category, and any notes you add. |
| Accounts (net worth) | Yes | Encrypted | Cash, savings, investments, property, and debts you enter. |
| Exchange balances | Yes | Encrypted | Bitcoin you hold outside your wallet, entered manually. |
| Cash on hand | Yes | Encrypted | A single figure you set for your net worth. |
| Goals | Yes | Encrypted | Targets, progress, and dates. |
| Reflection cards | Yes | Encrypted | Your monthly spending and saving summaries. |
| Imported files | Yes | Encrypted | We keep the file name and count as a record of your imports. |
| App & Billing | |||
| Settings & preferences | Yes | Encrypted | Units, notifications, and other app choices. |
| Notifications | Yes | Encrypted | In-app messages, read or unread. |
| Push token | Yes | Encrypted | Lets us send notifications to your device. |
| Subscription status | Yes | Encrypted | Whether you're a member. No card details — held by our payment partner. |
| Share activity | Yes | Encrypted | When and where you share a reflection card. |
How your wallet key is protected
Your xpub is an extended public key — it lets Compass read your Bitcoin balance and history, but it cannot spend, move, or touch your funds. There is no private key involved and nothing to sign.
- On mobile:your xpub is stored in your phone's secure hardware vault (the same iOS Keychain / Android Keystore that guards your passwords and Face ID). It never leaves your device and is never sent to Compass's servers.
- On web: since a browser has no secure vault, Compass scrambles your xpub with AES-256-GCM encryption before storing it. The unlock key lives in a separate system outside the database — so even if someone obtained a copy of the entire database, your xpub would be unreadable to them.
- Either way: Compass can never move your Bitcoin. Your coins stay on your own hardware wallet, always.
9. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, opt out of certain data processing, and receive a portable copy of your data. To exercise these rights, contact us at hrznbtc@gmail.com. We will respond within 30 days.
10. Children's Privacy
Compass is open to users of all ages and does not impose a minimum age requirement. If you are a minor, we encourage you to use Compass with the involvement of a parent or guardian, and we ask that any personal information shared with us be provided with their consent. If you are a parent or guardian and would like us to review or delete information relating to a child in your care, please contact us and we will assist promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification at least 14 days before they take effect. Continued use of Compass after changes become effective constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy, please contact us at hrznbtc@gmail.com.