nacho

Privacy Policy

Last updated: September 8, 2026

nacho (“the app”) is a self-custodial handle and identity app for the Spaces protocol, published by Impervious Inc (“we”, “us”). This policy explains what information the app handles and how. We built nacho to collect as little as possible: it has no user accounts and requires no name, email, phone number, or password.

The short version. Your private keys and data stay on your device. We don’t operate accounts, run ads, or use third-party analytics or tracking. The only information that leaves your device is what’s technically required to resolve handles, register a handle, and verify a purchase — described below.

Information stored on your device

Keys. Your cryptographic keys (and seed phrase) are generated and stored locally in your device’s secure storage (iOS Keychain / Android Keystore-backed secure storage). They never leave your device and are never transmitted to us or anyone else. Signing happens on-device.
App data. Your handles, their records, resolve history, and settings are stored locally on the device. Any backup you create is a file you control and choose where to save.

Information processed over the network

Using certain features sends limited technical data to servers so the feature can work. This is not tied to any account or personal identity:

Resolving handles. When you look up or scan a handle, the handle name is sent to Spaces-protocol relays and the operator’s resolver to fetch its public records and trust status. Standard network metadata (such as your IP address) is visible to those servers, as with any internet request.
Registering & managing a handle. Reserving or claiming a handle sends the handle name and its public key to the operator’s server. No private keys are ever sent.
Purchases. Handle registration is sold through the Apple App Store and Google Play. Those stores process your payment under their own privacy policies; we never see your payment details. After a purchase, the store’s purchase token is sent to our server only to verify and activate that purchase.

Camera

The Scan feature uses your camera to read QR codes and printed handles. Camera frames are processed entirely on your device and are never uploaded or stored. The camera is only active while the Scan screen is open.

What we do not do

We do not create accounts or collect names, emails, or phone numbers.
We do not use third-party advertising or analytics SDKs, and we do not track you across apps or websites.
We do not collect precise location or your contacts.
We do not sell or rent personal information.

Third parties

Depending on the features you use, data is handled by:

Apple / Google — app distribution and in-app purchases.
Spaces-protocol relays and the handle operator — resolving and registering handles.

Data retention

On-device data remains until you delete it in the app, erase your keystore, or uninstall the app. Requests to resolver and operator servers may be retained by those services per their own policies (for example, transient logs).

Security

Private keys are held in the operating system’s secure storage and never transmitted. Network requests use encrypted (HTTPS) connections. No method of storage or transmission is perfectly secure, but we design the app to keep sensitive material on your device and under your control.

Children

nacho is not directed to children under 13, and we do not knowingly collect information from them.

Your choices

Because there is no account, you control your data directly: delete individual handles or your resolve history in the app, erase your keystore, or uninstall the app to remove local data from your device.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with a new “Last updated” date.

Contact

Questions about this policy? Email support@impervious.com.