What stays on your device. What gets sent.

Stored on your device

• We don’t hold the keys that move your money or your recovery words. Storage and locking differ by app and device. Your wallet address is a public receiving number, not a recovery secret.
• Wallet names, settings, files and messages are stored on your device. Sharing, ordering or connecting a service can send the required data outside it. Automatic Android device backup is disabled for this app’s data.

Sent outside your device, and why

• Balance and history requests send your public wallet addresses to the lookup server at ravenvault.ex.erci.se. Transactions you approve for sending are delivered there too. The server uses a connected Ravencoin server or the lookup service at blockbook.ravencoin.org.
• Game purchases (direct RVN pay, currently Ravi Story): to confirm a purchase, your wallet reads the transaction IDs and the game's receiving address directly from blockbook.ravencoin.org, and compares them with a second lookup at the Zelcore explorer (explorer.rvn.zelcore.io) relayed through ravenvault.ex.erci.se/api/chain-b. Both services see these requests and the IP address they come from; the relay does not forward your IP, cookies or headers to Zelcore. Each payment also carries this wallet's public game ID on the ledger.
• Ravencoin transactions stay on a public ledger. Anyone can look up an address’s history; clearing the app does not remove that record.
• Vercel hosts this website and API. Handling requests may produce access logs such as IP addresses and request times. These are separate from your wallet’s secret keys.
• Shop membership registration sends the customer’s name, phone number or last four digits as required by the shop, optional notes, ticket number and consent confirmation to /api/scan/member on the connected shop server. Check the shop’s displayed consent notice and retention period. Orders and payments also send the required information to the connected shop or order server.
• If you post in the neighborhood second-hand market, the post (title, price, description and the other details you write), your neighborhood cell (about 5 km) and the public part of a signing key used only for these posts are published to public relays (relay.damus.io, nos.lol, relay.primal.net) where anyone can read them. Photos are not uploaded; only a fingerprint (hash) of each photo goes into the post. We do not run these relays, so a post may not be removable everywhere.
• If you send a problem report, the app sends what you wrote, the app name and version, the platform (Android or web), screen size and language, a random report ID made by the app, and recent error text with addresses and long values masked, to the playx.ex.erci.se report server. On Android a screenshot is attached only on the More, Settings, Network status and Official notice screens; screens with balances, addresses or recovery words are never captured. If you report one of Ravi's AI answers with "Report this answer", the app sends only that AI answer (shown to you before sending, with values such as addresses and amounts masked), the time it was received, any note you add, the app name and version, the platform, screen size and language, and a random report ID. Your question, AI key, wallet address, balance, recovery words, screenshots and recent error text are not sent.
• When first choosing a neighborhood, the app may try location once automatically; you can also use the location button. It reads location only after permission. Coordinates are converted on-device to a five-character area cell about 5 km across, then discarded rather than saved or sent. The cell stays on your device and is sent in relay queries for nearby shops and used-item listings. You can choose an area manually instead.
• The web app can connect to Claude (Anthropic), OpenAI, Gemini (Google), Groq or OpenRouter. Lock your wallet before testing or asking an online AI. You can also choose a local AI on this computer. The phone uses the provider address you configure.
• Computer connections, file sharing and conversations may send required requests through the connected server or relay. AI connection tests and questions send your own AI key and request to your chosen provider. Web keys stay in browser storage if you choose to save them; the phone uses secure storage. Check the provider’s pricing and data terms.

Device permissions

• The camera scans QR codes. This scanning feature processes frames on-device without saving or sending them.
• Bluetooth and nearby-device permissions support transfers between nearby phones where available. Android 11 and earlier require location permission for Bluetooth scanning; that is separate from neighborhood location use.
• On supported devices, the operating system checks biometrics. The app does not receive your fingerprint or face data.
• Android prefers on-device speech recognition. If unavailable, it asks for consent before using the phone’s recognition service, such as Google. The web also asks before first using browser recognition. These services may send audio off-device to turn it into text. The app does not save recordings or send them to our servers. Consent stays on-device and can be withdrawn on the Ravi screen; typing is always an option. Recognized text enters the input box. If you send it to AI, your chosen provider receives it.
• Background audio keeps your chosen file playing and provides lock-screen controls.

Your choices and deletion

• Deleting the app or clearing site data removes local data. Save your 12 recovery words and required backups first; we cannot restore them. This does not erase public-ledger records or data held by outside providers.
• No sign-up or ads are required. See the sections above for shop membership, neighborhood search, AI, voice and access-log data.
• RavenVault is not designed for children under 14.

Get in touch

Operated by PLAY X (Moosong Kim)

Email us at playx@ex.erci.se

Last updated: 2026-10-11. Changes are posted here.