Public by design
Your switch lives on the Solana blockchain, which is public. Anyone can see your wallet address, your heirs' addresses and shares, the assets and amounts you approved, your interval and when you checked in. Do not use Perpetua if that is a problem for you.
What we never see
- Your private keys or seed phrase. Wallets sign on your device.
- The words of a two-part sealed letter. It is encrypted in your browser and we cannot open it.
- Heir labels such as "Mom". They stay in your browser.
What we store
- Reminder contacts you choose to add (an email address or a Telegram chat), linked to your switch, used only to send reminders.
- Sealed letter envelopes (ciphertext only) and their Arweave locations, so heirs can find them. The ciphertext is also stored permanently on Arweave, which cannot be deleted.
- Letter public keys created by heirs, so owners can seal letters to them.
- Service health records such as when the keeper last ran.
Service providers
We use a hosting provider, a database provider, a Solana RPC provider, a wallet connection provider, Arweave storage, and, only if you opt in, an email provider and Telegram to deliver reminders. They process data only to provide those services.
No tracking
We do not use advertising trackers or sell data. Basic server logs are kept by our hosting provider for security and are not used to identify you.
Your choices
You can remove reminder contacts at any time in the app. To delete anything else we hold that is linked to your wallet, email support@perpetuaprotocol.xyz from a request signed in the app. Onchain data and Arweave data cannot be deleted by anyone.