In short
BitTool Signer, published by BITTOOL PTE. LTD. ("we", "us"), collects nothing. It has no accounts, no servers and no networking code at all. Everything you see in the app is produced on your device, and this page is stored inside the app rather than on a website.
1. What we collect
Nothing. We run no servers and receive no data from the app. There is no sign-up, no telemetry, no analytics, no crash reporting, no advertising and no tracking. The app does bundle open-source libraries for cryptography and encoding (listed in Settings › Fully Open Source › Third-Party Notices), but none of them can reach the network or collect anything.
The app does not request Android's Internet permission, so Android itself refuses every network connection it could try to open: it cannot send or receive anything, on any network.
2. What the app stores on your device
- Wallets: your recovery phrase and optional passphrase, encrypted with your wallet password and with a key held in this device's Android Keystore. They are only ever decrypted in memory, after you type that password.
- Public wallet data: account public keys, addresses, the master fingerprint and the wallet name, saved with an authentication tag so tampering is detected. This is what the app reads to show addresses and build pairing QR codes.
- Activity: up to 100 recent signing records — the date, network, title, summary, risk level, request fingerprint, and which wallet signed (its name, identifier and master fingerprint) — encrypted with a key held in the Android Keystore. Use Clear Activity in the Activity tab to erase them. They are kept when you delete a wallet, shown as "Deleted wallet", until you clear them.
- Preferences: appearance, App Lock setting, and whether the introduction has been shown.
- A small counter of failed password attempts per wallet, used for the retry delay.
All of this stays in the app's own private storage, which no other app can read, and is excluded from cloud backups and from device-to-device transfers: nothing the app stores is backed up anywhere. Your recovery phrase is never written anywhere in readable form.
3. Camera
The camera turns on only while the scanner is open, and only to read QR codes. Frames are processed on the device and are never stored or sent anywhere. You can withdraw the permission in Android Settings; the app still works with pasted or imported requests.
4. Fingerprint and face unlock
If you turn on App Lock, Android performs the fingerprint or face check and tells the app only whether it succeeded. Biometric data stays in the device's secure hardware and is never available to BitTool Signer.
5. Clipboard
When you copy an address, QR text or payload, it goes to this device's clipboard, marked as sensitive so Android does not show it in previews, and the app clears its own copy after two minutes. Some keyboards and clipboard apps keep their own history; the app copies no secret, ever.
6. Screenshots and the Recents screen
BitTool Signer asks Android to keep its screens out of screenshots, screen recordings, casting and the Recents screen, so wallet data does not appear in them. It also hides its content when it leaves the foreground and while Android reports that the screen is being recorded, and hides other apps' windows drawn over it on Android 12 and later. None of this can stop a camera pointed at the screen.
7. What leaves your device
Only what you deliberately show or export: a pairing or signature QR code you display, text you copy, or a file you save. These contain public keys, addresses and signatures — never your recovery phrase, passphrase, password or private keys.
Two things you control are different. The backup screen can show your recovery phrase as a plain-text QR code, which you must reveal yourself and which the app warns you about: anyone who scans or photographs it has your wallet. And when you save or open a file, you choose the location in Android's file picker: if you pick a cloud folder, that service receives it. Where exported data goes afterwards is up to the app or person you give it to.
8. Deleting your data
Deleting a wallet erases its encrypted file, its public data and its device key. Uninstalling the app removes all of its files and its Android Keystore keys. Because we hold nothing, there is nothing for us to delete and no request to make.
9. Children
BitTool Signer is not directed at children under 13, and collects no data from anyone of any age.
10. Google Play and direct download
If you installed it from Google Play
Downloads and updates happen through Google Play, which may collect its own data about them under Google's privacy policy. We receive no personal data from Google.
If you downloaded the APK from bittool.com
You download BitTool Signer as an APK from https://bittool.com/signer, outside the app: the app itself never connects to anything and has no updater. We receive no personal data from the app's installation or use.
11. Changes to this policy
Any change ships as part of a new app version, with a new version number at the top of this page. Nothing changes retroactively, because no data was collected under the earlier version either.
12. Contact
BITTOOL PTE. LTD.
BitTool Signer has no networking code, so nothing here can send a message for you. Write to that address from another device.