AldenWallet privacy policy

Last updated 8 September 2026. This policy is for the AldenWallet mobile app (iOS and Android), bundle id / applicationId com.aldenburg.wallet.

Who we are

AldenWallet is a demonstration EUDI-style holder for the Aldenburg identity ecosystem. It is not a certified EUDI wallet and does not provide a wallet secure cryptographic device (WSCD).

No accounts

The app does not create cloud accounts, does not require an email address, and does not have a password reset or account-deletion flow for an online profile — there is none. Uninstalling the app, or clearing app data, removes the on-device wallet.

What stays on the device

Holder keys and credentials (SD-JWT VC) in encrypted local storage (Askar).
The Askar store passkey, wrapped by the OS keychain / Android Keystore via Expo SecureStore. That wrap is not a certified WSCD.
Your app PIN (salted hash) and optional biometric-unlock flag.
An activity log of issuance, presentations, sign-ins, and refusals.

We do not operate a backend that stores your credentials or PIN.

What the app sends over the network

Only when you confirm an action in the UI:

Trust list and Root CA from the Registry you type (default https://registry.aldenburg-id.com).
OpenID4VCI credential requests to a trusted issuer after you accept an offer.
OpenID4VP / SIOP responses to a listed verifier after you present or sign in.
Revocation status lookups for a credential you are about to present or store.

Untrusted issuers and unlisted verifiers are refused locally. Nothing is posted on those paths.

Permissions

Camera — scan credential-offer, presentation, and sign-in QR codes only. The app does not access the photo library and does not record audio.
Face ID / biometrics — optional app unlock only. Biometrics do not protect holder keys.

Analytics, ads, tracking

None. The app does not include advertising SDKs, analytics SDKs, or App Tracking Transparency prompts.

Children

The app is not directed at children under 13 (or the age required in your country). Do not store a child’s credentials in it.

Contact

Questions about this policy: use the Aldenburg project contact on wallet.aldenburg-id.com.