Privacy Policy
Last updated: August 3, 2026
1. Introduction
Compass ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use the Compass web, mobile, and desktop applications and associated services. Please read this policy carefully. By using Compass, you agree to the practices described here.
2. The Desktop App Is Different
Sections 3 through 10 of this policy describe the web and mobile apps, which are server-backed: your data is stored in our database. The desktop app is not. It has no account, no sign-in, and no database. Your financial data is written to an encrypted file on your own machine and is never transmitted to us. We cannot read it, produce it, or delete it — only you can.
The complete list of what the desktop app does send over the network:
- Your license key, a random per-install device ID, and your platform — sent to us on activation and on a silent re-verification roughly every 25 days. At purchase we also receive your email address, in order to send you your license key.
- Individual Bitcoin addresses — sent to a public block explorer (mempool.space by default) only if you use xpub tracking, to read your balance. Your xpub itself is never sent; address derivation happens on your device, and addresses go out individually so no single request links your whole wallet. The explorer does see those addresses and your IP — that is inherent to querying any public explorer. You can point Compass at your own node instead (Settings → Bitcoin Data Source), or use manual balance mode, which makes no wallet-related network calls at all.
- A Bitcoin price and exchange-rate lookup, and an update check. Neither sends anything about you.
Your transactions, accounts, goals, and balances are never sent anywhere. There is no analytics, telemetry, or crash reporting in the desktop app.
You do not have to take our word for any of this. The encryption, local storage, and xpub derivation code is open source under the MIT license at github.com/HRZN-BTC/compass-core, where NETWORK.md documents every outbound call above. You can also verify it yourself at runtime with a network monitor such as Little Snitch, LuLu, or Wireshark.
3. Information We Collect
On web and mobile, we collect information you provide directly — such as your name, email address, phone number, the financial details you enter (transactions, accounts, goals), and your Bitcoin wallet's extended public key (xpub) — as well as limited information generated automatically through your use of the app, such as usage analytics and basic device information. On desktop we collect none of this; see section 2. We do not sell your personal data to third parties, ever.
4. How We Use Your Information
Your data is used to provide and improve the Compass service, including reading your Bitcoin balance, calculating your net worth in Bitcoin, tracking spending categories, measuring your accumulation over time, and personalizing your experience. We may also use anonymized, aggregated data to improve our product features.
5. Bitcoin and Financial Data
Compass connects to your Bitcoin wallet using only your extended public key (xpub), which is strictly read-only. We can see your balance and transaction history to display it in the app, but we can never spend, move, or touch your funds — there is nothing to sign. Your private keys and recovery phrase are never requested, stored, or transmitted by Compass, and your coins remain on your own hardware wallet at all times. Where bank connections are offered, they are likewise read-only and we never initiate transactions on your behalf.
6. Data Sharing
We do not sell, trade, or rent your personal data. We may share data with trusted third-party service providers who help us operate the platform — for example, our cloud database and hosting provider (Supabase), usage analytics, and our payment partners (Stripe for card payments and BTCPay Server for Bitcoin payments) — subject to strict confidentiality agreements. We may also disclose data when required by law or to protect the rights and safety of our users.
7. Data Retention
We retain your web and mobile data for as long as your account is active or as needed to provide services. You can permanently delete your account and all associated data from within the app at any time; deletion is immediate and irreversible, and we keep no backups from which it could be restored. One record outlives the account: if you hold a desktop license, we retain your email address and license key for as long as that license is active, because it is your proof of purchase and the desktop app verifies against it — deleting it would revoke access you paid for. You can ask us to erase it too, which forfeits the license. Desktop data is stored only on your own machine, so there is nothing for us to retain or delete.
8. Security
We implement industry-standard security measures including encryption in transit (TLS) and at rest, row-level access controls so you can only ever reach your own data, and additional AES-256-GCM encryption for your Bitcoin wallet key. Compass is passwordless — you sign in with a one-time email link (web) or a one-time code sent to your phone (mobile), so there is no password to be guessed, reused, or leaked. The desktop app has no sign-in at all; its data is encrypted at rest on your own machine. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security, but we work hard to protect your information.
9. What We Store & How It's Protected
The table below applies to the web and mobile apps. The desktop app stores none of this on our servers — see section 2.
We want to be precise about what "encrypted" means, because it can mean two different things:
- Encrypted at rest & in transit — applies to all your data. It is encrypted on our servers' disks and travels over encrypted (TLS) connections. This protects against stolen hardware or intercepted traffic. It does not mean Compass can't read it — our systems decrypt this data to run the app (show your charts, totals, and history), the same as your bank or any other app you use.
- Only you can read it — applies to your wallet key (xpub). On mobile it never leaves your device and is never sent to us. On web it is encrypted with a separate key kept outside the database, so a database breach alone cannot read it.
Your data is also private from other users — enforced at the database level (row-level security), so no other Compass user can ever see your records. Compass is passwordless, so no passwords are ever stored, and payment card details are never held by Compass — they stay with our payment partners (Stripe and RevenueCat). In the table, "Encrypted" means the first kind above (secured, but readable by Compass to run the app) and "Only you"means the second.
| Data / Type | Stored? | Encrypted? | Notes |
|---|---|---|---|
| Account & Identity | |||
| Yes | Encrypted | Used to sign you in (web). | |
| Phone number | Yes | Encrypted | Used to sign you in (mobile). Optional on web. |
| Password | No | — | Compass is passwordless — nothing to store or steal. |
| Display name | Yes | Encrypted | The name shown across your app. |
| Profile photo | Yes | Encrypted | Viewable by anyone with the image link. |
| Age / Gender | Yes | Encrypted | Optional — only stored if you choose to share it. |
| Onboarding answers | Yes | Encrypted | Your goals and preferences from setup. |
| Your Bitcoin Wallet | |||
| Wallet key (xpub) | Yes | Only you | Encrypted with AES-256; the unlock key is kept outside the database, so even Compass can't read it and a full database leak reveals nothing. On mobile it never leaves your phone. See details below the table. |
| Bitcoin balance | Yes | Encrypted | Read-only. Compass sees your balance but can never move funds. |
| Balance history | Yes | Encrypted | Snapshots over time, so you can track how you're stacking. |
| Your Financial Data | |||
| Transactions | Yes | Encrypted | Merchant, amount, category, and any notes you add. |
| Accounts (net worth) | Yes | Encrypted | Cash, savings, investments, property, and debts you enter. |
| Exchange balances | Yes | Encrypted | Bitcoin you hold outside your wallet, entered manually. |
| Cash on hand | Yes | Encrypted | A single figure you set for your net worth. |
| Goals | Yes | Encrypted | Targets, progress, and dates. |
| Imported files | Yes | Encrypted | We keep the file name and count as a record of your imports. |
| App & Billing | |||
| Settings & preferences | Yes | Encrypted | Units, notifications, and other app choices. |
| Notifications | Yes | Encrypted | In-app messages, read or unread. |
| Push token | Yes | Encrypted | Lets us send notifications to your device. |
| Subscription status | Yes | Encrypted | Whether you're a member. No card details — held by our payment partner. |
How your wallet key is protected
Your xpub is an extended public key — it lets Compass read your Bitcoin balance and history, but it cannot spend, move, or touch your funds. There is no private key involved and nothing to sign.
- On mobile:your xpub is stored in your phone's secure hardware vault (the same iOS Keychain / Android Keystore that guards your passwords and Face ID). It never leaves your device and is never sent to Compass's servers.
- On web: since a browser has no secure vault, Compass scrambles your xpub with AES-256-GCM encryption before storing it. The unlock key lives in a separate system outside the database — so even if someone obtained a copy of the entire database, your xpub would be unreadable to them.
- On desktop: your xpub is held in the encrypted local file on your own machine and is never sent to Compass's servers. Only individually derived addresses are queried, and only against the block explorer you choose — which can be your own node.
- Any of the three: Compass can never move your Bitcoin. Your coins stay on your own hardware wallet, always.
10. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, opt out of certain data processing, and receive a portable copy of your data. To exercise these rights, contact us at hrznbtc@gmail.com. We will respond within 30 days.
11. Children's Privacy
Compass is open to users of all ages and does not impose a minimum age requirement. If you are a minor, we encourage you to use Compass with the involvement of a parent or guardian, and we ask that any personal information shared with us be provided with their consent. If you are a parent or guardian and would like us to review or delete information relating to a child in your care, please contact us and we will assist promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification at least 14 days before they take effect. Continued use of Compass after changes become effective constitutes your acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy, please contact us at hrznbtc@gmail.com.