Multax / Privacy

Privacy policy

This policy describes how LEGAL I.T DEVELOPMENTS LTD (“Multax”, “we”) handles information in the Multax Wallet Android app and on this website. Multax is a self-custody wallet. There is no Multax account and no Multax cloud backup of your secret phrase or vault.

1. Who we are

The developer and controller for this policy is:

LEGAL I.T DEVELOPMENTS LTD
3 The Old Church, St. Matthews Road
Norwich
NR1 1SP
United Kingdom

Multax Wallet (top.multax.wallet) lets you create or import a secret phrase, view balances, send and receive, swap along a route you confirm, and connect to websites you approve. Support and privacy questions: help@multaxwallet.app.

We cannot restore a lost phrase or password. Anyone who asks you to type the phrase into a webpage or email is not Multax.

2. Scope

This policy covers:

• The Multax Wallet app for Android.
• This public website, multax.top, including the privacy and support pages.

It does not control how a blockchain, a public RPC operator, a swap router, a price source, WalletConnect, or a website you connect to handles data. Those parties publish their own policies.

3. What we do not collect

The developer does not collect, store on Multax servers, or sell:

• Secret phrases, private keys, or unlock passwords.
• Name, email, phone, government ID, or a Multax login. There is no Multax account.
• A cloud copy of the vault. Android backup of app data is turned off.
• Advertising identifiers, precise location, contacts, SMS, or analytics events from the wallet.
• Camera images. The camera, if you use it, reads a QR code on the device and does not upload the picture.

We do not show ads. We do not use wallet data for advertising. We do not sell personal information. There are no in-app purchases and no subscription.

4. What stays on your phone

After you create or import a wallet, the following stay in app storage on that phone:

• The vault: secret material wrapped with PBKDF2-SHA256 (600,000 iterations) and AES-256-GCM.
• Settings, language, custom networks and tokens, and a local price cache.
• Local send and activity history that Multax shows in the wallet.
• Connected-site permissions you approve or revoke.

The unlock password is used in memory to decrypt the vault. It is not written to storage in plaintext. While the wallet is unlocked, that session stays in memory until auto-lock (1, 5, 15, or 60 minutes; 15 by default). If you forget the password or lose the phrase, Multax cannot recover the wallet.

A new wallet creates a 12-word BIP39 phrase. Import accepts a phrase you already keep. Importing a single EVM private key opens EVM addresses only.

Reset wallet in Cabinet erases this local data on that phone. It does not erase a phrase you wrote down. Anyone who has the phrase can import it again.

5. What third parties may see when you use the wallet

Blockchains are public. Multax does not operate a backend that stores your wallet. When you take an action that needs the network, the service that answers that request can see what the request contains, plus your IP address, as with any HTTPS call. Those calls do not include the secret phrase or the lock password.

Balances, fees, and sends

Looking up a balance, estimating a fee, or broadcasting a transaction uses HTTPS JSON-RPC, or the public API for that chain. If one endpoint does not answer, Multax tries another public endpoint. A custom RPC you add is contacted only for the network you point at it.

Those operators can see the wallet address, the method, and the amounts in that call.

Swaps

Quotes and routes use LI.FI for EVM, Tron, and Sui, and Jupiter for Solana. Those services receive the assets, amounts, and addresses needed to build a quote. You read the route and sign in Multax. Bitcoin and several other native coins have no in-app swap. LI.FI and Jupiter have their own privacy policies.

Prices

Fiat display values come from public price sources. Those requests include asset identifiers, not your secret phrase.

WalletConnect

Connect pairs the app with a website through WalletConnect. You scan a QR code or paste a wc: link. The relay at wss://relay.walletconnect.com carries the session messages. After you approve, the site receives the address you shared and can ask you to sign. It does not receive the phrase. Disconnect in Cabinet. The site’s own policy applies to anything you do there.

Email support

If you write to support, we see the address and message you send. Do not paste a secret phrase, private key, or unlock password. We keep mail only as long as needed to answer the ticket.

6. This website

multax.top is static files. It does not set first-party analytics cookies, does not run an advertising pixel, and does not require an account. Your browser and the host that serves the files can see an ordinary connection (IP address, user agent, requested path, time) as with any HTTPS site. We do not use those records to build a marketing profile, and the site does not run a tracker.

7. Android permissions

• Internet. Required. Balances, fees, broadcasts, quotes, prices, and WalletConnect.
• Camera. Optional. Used only when you tap Connect and scan a WalletConnect QR code. The image is not saved and is not uploaded. You can paste a wc: link instead. The app can be installed on a phone without a camera.

The app does not request location, contacts, SMS, phone state, microphone, notifications, or broad access to files on the device.

8. Legal bases

The company is established in the United Kingdom. Where UK GDPR or a similar law applies to a residual processing activity:

• Contract / requested service: providing the wallet you installed, including the network calls you trigger.
• Legitimate interests: answering support email you send, securing the site, and keeping this policy accurate. Those interests are limited to the message you chose to send and to operating the site.
• Consent: not used for tracking cookies on this site. We do not set them. Camera access is a device permission you can deny.
• Legal obligation: if a lawful request requires a limited disclosure of support correspondence we still hold.

On-device vault data is processed on your phone under your control. We are not the host of that vault.

9. International requests

RPC operators, quote services, price sources, the WalletConnect relay, and websites you approve may be outside the United Kingdom. When you start one of those actions, the request goes to that provider under its own policy. We do not transfer a secret phrase or lock password, because we do not hold them.

10. Retention

• The vault and local settings remain on the phone until you reset the wallet in Cabinet or uninstall the app.
• Support email is kept only as long as needed to handle the request, then deleted.
• We do not build a marketing file from website connections.

11. Security

The vault is encrypted before it is written to local storage. Unlock happens in the app. We will not ask for the phrase by email or on a website. Report a vulnerability to help@multaxwallet.app. Do not include a phrase, private key, or password in that message.

Self-custody means you are responsible for the phrase. Multax cannot freeze an account or reverse a confirmed send.

12. Children

Multax is a financial app intended for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child sent personal information to support, write to us and we will delete that message.

13. Your choices and rights

• Do not create a wallet if you do not accept this policy.
• Uninstall the app, or use Reset wallet in Cabinet, to delete the local vault from that phone.
• Revoke a connected site in Cabinet.
• Deny the camera permission and paste a WalletConnect link instead.
• Switch or add RPCs in network settings. Those operators then see the requests you send them.
• Write to support to access, correct, or delete personal information that may exist in email we hold. There is no phrase to export from our servers. We do not have it.

If UK GDPR applies, you may have rights to access, rectification, erasure, restriction, and objection, and you may complain to the Information Commissioner’s Office at ico.org.uk. Contact us first at help@multaxwallet.app.

14. Changes

If this policy changes, we will update this page and the “Last updated” date. The current version is the one published at https://multax.top/privacy/.

15. Contact

Privacy and product questions: help@multaxwallet.app.

LEGAL I.T DEVELOPMENTS LTD
3 The Old Church, St. Matthews Road
Norwich
NR1 1SP
United Kingdom

Do not send a secret phrase, private key, or unlock password. We cannot use them to help you, and you should treat any such request as hostile.