TakebackSummary
Takeback is built to collect as little as possible. In short:
- Your recovery phrase, passphrase and private keys stay on your iPhone, in memory only, and are wiped after use. We never receive them.
- We don’t have accounts, analytics, advertising or tracking, in the app or on this website.
- To find and replace payments, the app contacts Bitcoin network servers (Electrum and mempool.space) with your addresses and, when you choose to, the signed transaction.
- If you email us, we use your message only to reply.
Who we are
This policy covers the Takeback iPhone app and the website at takeb.io (together, “Takeback”, “we”, “us”). You can reach us at care@takeb.io.
Your keys
When you enter or scan a recovery phrase, passphrase, WIF, hex key, mini key or extended private key, it is held only in the app’s memory on your device. It is not written to storage, the Keychain, iCloud, device backups, crash reports or logs, and it is never transmitted to us or to any server. It is cleared from memory after the replacement is broadcast, when you leave the flow, or when the app closes.
Camera images used to scan a QR code are processed on the device and are not saved.
Bitcoin network requests
To work, the app must ask public Bitcoin infrastructure about your payments. When you search, the app derives addresses from your key on the device and sends those addresses to the Electrum server selected in Settings (by default, public Electrum servers), with mempool.space used as a fallback. When you approve a replacement, the signed transaction is broadcast through those servers.
These servers are operated by third parties, not by us. They can see the addresses and transactions you look up or broadcast, and your IP address, and they may log them under their own policies. Bitcoin transactions are public by design once broadcast. You can reduce this exposure by connecting your own Electrum server or using a VPN or Tor.
Data stored by the app
The app stores only non-sensitive preferences on your device, such as your default fee speed, the server you chose, any custom search paths, and your display settings. This data stays on your device and is removed when you delete the app.
This website
takeb.io doesn’t use cookies, analytics or tracking scripts. Your light or dark mode choice is saved in your browser’s local storage and never sent to us. Fonts are loaded from Google Fonts, which receives your IP address and browser details when the page loads. Our hosting provider may keep standard server logs (such as IP address, time and page requested) for security and reliability.
When you contact us
If you email care@takeb.io, we receive your email address and whatever you include. We use it only to respond and to handle security reports, and we delete it when it’s no longer needed. Please never send a recovery phrase or private key; if you do, we will delete it and won’t use it.
Sharing and selling
We don’t sell, rent or share personal information. We don’t have advertising partners. We may disclose information we hold (in practice, only emails you sent us) if required by law.
Children
Takeback is not directed to children under 13 (or the minimum age in your country), and we don’t knowingly collect information from them.
Your rights
Depending on where you live, you may have rights to access, correct or delete personal information we hold about you. Since we don’t keep accounts or app data on our side, this usually only applies to emails you sent us. Write to care@takeb.io and we’ll help.
Changes to this policy
If we change this policy, we’ll update the date at the top. Material changes will also be noted in the app’s release notes on GitHub.