Non-custodial by design, on-device key encryption, and clearly documented security practices.
RVA Wallet aims to comply with applicable data-protection laws and follows GDPR principles such as purpose limitation and data minimisation. For details see our Privacy Policy and the payment partner’s policy for on-ramp KYC.
privacy@rva.ltdSecurity is foundational to RVA Wallet. From architecture to user interfaces, every element is reviewed, tested, and audited to safeguard assets and personal information. Transparency means we publish certificates, audits, and policies openly.
Every release undergoes comprehensive security audits by third-party experts
All security decisions and policies are documented and publicly available
User data is protected with encryption and strict privacy controls
Your private keys are created, encrypted, and stored on your device. RVA cannot access or recover them.
Passcode, biometric login, and auto-lock protect the app and signing screen.
Restore access with your 12-word Secret Recovery Phrase or exported private key. Keep them offline and never share.
Add an extra step for sensitive actions with Google Authenticator codes. 2FA complements but does not replace your recovery phrase.
RVA Wallet is designed with secure defaults for individuals. Biometric authentication, encrypted storage, and transaction confirmations protect user accounts.
Face ID, Touch ID, and fingerprint recognition for secure access
Additional security layer with SMS, email, or authenticator apps
Private keys encrypted and stored securely on your device
Complete audit trail of all wallet activities and transactions
All wallet releases undergo external audits. Results and certificates are published. Vulnerabilities are tracked, disclosed, and resolved in line with RVA governance.
Largest Blockchain Security Auditor
Security is a continuous program at RVA. SmartChain undergoes independent audits, follows rigorous secure-development practices, and employs layered defenses across infrastructure and application surfaces. Findings and remediation are tracked, and material updates are communicated transparently.
Proposed intro paragraph RVA Wallet is non-custodial. We do not store your Secret Recovery Phrase or private keys. If you choose to buy or sell crypto inside the app, the identity checks are completed with the integrated payment partner. That provider handles your KYC documents under its own policy. RVA Wallet does not store those documents. We apply data-minimisation and security controls to the limited account and usage data we process for app functionality.
Sensitive keys never leave your device. Private keys are created locally, encrypted at rest, and used only to sign transactions on your device. We cannot access or recover them.
When you buy or sell through the in-app payment flow, identity verification is completed with the provider. KYC documents are handled by that provider. RVA Wallet does not store your ID files. Availability, fees, and limits depend on the provider and location.
We only collect data needed to run the app and deliver features like notifications and price alerts. Examples include device identifiers for push notifications and basic usage metrics. Keys and recovery phrases are never collected.
Protect access with passcode, biometric login, and auto-lock. You can export or delete local data inside system settings at any time. Network traffic uses encryption in transit.
Our monitoring systems detect anomalies, flag unusual activity, and enforce automated protective actions. Incident response is rehearsed and documented
Continuous surveillance of network traffic and system activities
Advanced algorithms detect and prevent unauthorized access attempts
Documented procedures for rapid response to security incidents
All major wallet security updates follow governance approval. Policies, remediation steps, and version histories are published for accountability
Download RVA Wallet today and experience a platform built for security, transparency, and institutional-grade custody