Zashi is a privacy-first pockets, and we take that critically. Meaning gaining access to as little information as potential, and being clear in regards to the information we have now entry to, why it issues, and how one can management it. Right here’s what you must know:
What Information We Gather
Zashi doesn’t accumulate any information. Like most software program apps, it makes use of crash reviews, enabled and generated on the working system degree, to assist our crew detect and repair bugs. However in contrast to most apps—even people who declare to prioritize privateness—Zashi doesn’t see or accumulate every other information. Crash reviews are the one information we will see, which is uncommon amongst app builders.
Crash reviews present restricted anonymized technical information the only goal of which is to watch the wholesome operate of the app. They assist make the pockets extra steady and usable, nothing extra.
Essential:
ECC and the Zashi builders don’t observe, view, or accumulate your pockets exercise. When a crash report is generated, it gives restricted information wanted to determine what triggered the crash. We don’t see or accumulate names, emails, cellphone numbers, contact lists, user-generated content material, or transaction particulars.
What Crash Report Instruments We Use
Crash reviews are saved and processed by Google (on Android) and Apple (on iOS), and like all apps on their platforms, we should comply with strict guidelines about what information is collected and the way it’s dealt with. Violating these guidelines would result in removing from their shops.
What Crash Stories Do Not Include
Crash reviews are anonymized and solely embrace technical diagnostics like machine sort, app model, time of the crash, stack hint (which a part of the code crashed), error logs, and working system model.
These reviews do not include:
Your transaction IDs or historical past
Pockets addresses
ZEC balances
Private info like title, electronic mail, or cellphone
Consumer IDs tied to Zashi
Something that might hyperlink a transaction to a selected consumer
Crash reviews inform us how and when the app broke, not who it occurred to.
Can You Choose Out?
Sure, in a number of methods:
iOS customers:
Apple permits customers to choose out of diagnostic information sharing throughout all apps. You are able to do this in your iPhone settings. iOS doesn’t permit customers to choose out for particular person apps.
Android customers:
Google doesn’t permit builders or customers to opt-out from the default Google Play Providers information assortment for Android Vitals.
To choose out, Android customers can obtain Zashi by way of F-Droid. The F-Droid model of Zashi is basically completely different from the Play Retailer model: it’s utterly freed from proprietary analytics and crash reporting instruments.
Enhancements:
We already entry far much less information than most apps, however we’ve taken extra steps to restrict information assortment even additional:
For iOS, we’ve eliminated Firebase Crashlytics utterly (Zashi iOS v1.5.2).
We’ve applied a chance to opt-out of Firebase Crashlytics for Android. Customers can choose out of sharing crash reviews in Zashi’s Superior Settings. (Zashi Android v1.5.2)
For Android, we’ve set Firebase Crashlytics to be “Off” by default. Customers can select to choose in by Zashi’s Superior Settings or the pockets’s standing widget. (Zashi Android v2.0)
We’ve up to date the F-Droid model, eradicating the inaccurate safety warning, which falsely implied that the F-droid model collects crash reviews. That was by no means the case.
F-Droid & GitHub: Full Transparency
Zashi is on the market on F-Droid, an impartial app retailer that prioritizes open-source, privacy-respecting software program. Not like conventional app shops, F-Droid doesn’t observe or profile customers, and it permits for utterly nameless downloads. The F-Droid model of Zashi is absolutely open-source and consists of no crash reporting instruments in anyway.
The F-Droid Zashi construct is totally reproducible, and we encourage our group to construct it and confirm our work. This helps determine and mitigate potential threats to our infrastructure, processes, and the third-party companies we rely on.
It’s also possible to construct the app your self from supply.
Zashi code is totally open supply and obtainable on GitHub:
Learn extra about alternative routes to obtain Zashi pockets.
Philosophy: Privateness by Design
Many wallets declare to prioritize privateness, whereas quietly gathering analytics and consumer conduct. Zashi doesn’t simply declare it—we dwell it.
We don’t see or accumulate consumer and app information. We don’t profile customers. We don’t observe their exercise. And we exit of our solution to reduce metadata leakage. Zashi is constructed by the identical crew that created and maintains the Zcash protocol—probably the most superior privateness tech within the blockchain business. We apply the identical requirements to app improvement that we do to protocol-level privateness.
We welcome scrutiny—particularly in privateness tech. However conversations about privateness and consumer security should be grounded in details, not worry or hypothesis. We encourage customers to use the identical excessive requirements to all of the apps and wallets they use, and to demand transparency and alter when these instruments fall quick.
Our dedication to Zashi customers is unwavering.
Shields up.
