Privacy Policy

Last updated: October 7, 2026

This policy is issued by QSEL Enterprise LLC, an Arizona limited liability company (ACC #25121622). Quantum Follis and QSEL Authenticator are products of that company. “We” means QSEL Enterprise LLC.

This policy covers the Quantum Follis wallet, the QSEL Authenticator app used to approve actions for a vault, and the services those apps call (our backend, on-chain programs, and the networks you choose).

1. What we do not hold

Quantum Follis is non-custodial. Private keys, recovery passphrases, authenticator secrets, and cold-backup contents are created and stored on your devices. We do not receive them, cannot spend your funds, and cannot restore a vault if you lose every copy of those secrets.

  • We do not ask for your recovery passphrase, seed, or private key in support email. Do not send them.
  • A recovery-factor record on our servers is an encrypted envelope. We cannot read the passphrase from it.
  • We do not sell personal information and we do not run a third-party advertising or analytics SDK in the wallet.

2. Information on your device

The apps keep the following locally so the wallet can function:

  • Vault keys and wallet keys, in the device secure store.
  • Authenticator key material, on the authenticator device only.
  • A local flag that a recovery passphrase was set, and that a recovery email was verified. The passphrase itself is not stored.
  • Session state, network mode (mainnet or devnet/testnet), and which chains you have enabled.
  • Balances and recent activity fetched for display. That cache stays on the device.

Deleting the vault in Settings removes the local vault from that device. It does not erase public blockchain history.

3. Information on our servers

Some features need a record that is not a private key. We store that so pairing, fees, recovery, and alerts can work.

  • Vault record. A vault id and the public keys and roles of wallets you create (fee reserve, trading wallets, and similar). No private keys.
  • Pairing. After a LinkingNFT mint, a cache of the vault public key, authenticator public key, and expiry. The authoritative record is on Solana.
  • Recovery contact. If you complete Set Recovery Contact Info, the verified email (and a push token if the device has one) used to warn you about a reset. This address is not our support inbox.
  • Recovery factor. A wrapped secret, a recovery id, and the salt and parameters needed to unwrap it on a device that knows the passphrase. We never see the passphrase.
  • Guardian handoff. An encrypted claim blob so another authenticator can import a guardian shard. The decryption key travels in the link or QR, not to us in usable form.
  • Fees. Records of reserve charges (sessions, sends, later LinkingNFT mints, and similar) so an operation is not billed twice.
  • Logs. Standard server logs (time, route, error) for operations and abuse prevention. We do not build a marketing profile from them.

4. Information on a blockchain

Sends, swaps, LinkingNFT mints, session NFTs, guardian NFTs, and recovery transactions are public. Anyone can read addresses, amounts, and program data on Solana, Bitcoin, Ethereum, and the other networks you use. We do not control that. Choosing devnet or a test network does not make a mainnet transaction private, and the reverse is also true.

5. QSEL Authenticator

The authenticator approves logins, transaction attestations, and recovery. Its keys stay on that device. We learn that a pairing exists and whether an approval was submitted. We do not receive the authenticator private key.

6. Other services

When you use a feature, the following parties see what they need to perform it:

  • Solana RPC providers (including Helius when configured) see the requests your app makes to read balances and submit transactions.
  • Jupiter and other DEXs or dapps you open in Q-Pass or a swap see the wallet you connect and the transaction you sign.
  • Email delivery sees the recovery-contact address when we send a verification code or a security alert.
  • Apple and Google see whatever their app stores and device services normally collect when you install an app.

Their policies govern what they do with that data.

7. Family Trader

If you turn on Family Trader Mode and invite someone, we store the invite and the dependent’s link to your vault so they can use the wallets you assigned. They do not receive your vault keys.

8. How long we keep it

On-chain data remains for as long as the network does. Server records for a vault stay while the vault is in use and as needed to prevent fraud, finish a fee, or meet law. You may email qselenterprise@protonmail.com and ask us to delete server-side vault, contact, and pairing-cache records. Public chain history cannot be deleted. Local data is removed with Delete Vault or by uninstalling the app.

9. Children

Quantum Follis is not for anyone under 18. We do not knowingly collect information from children.

10. Security and your choices

You choose whether to set a recovery passphrase, recovery email, guardians, secondary login, and a send limit. Skipping those features means we have less about you, and you have fewer ways back in if you lose a device.

11. Changes

If we change this policy, we will update the date on this page. The app links here. Continued use after the new date means you accept the update.

12. Contact

Privacy questions: qselenterprise@protonmail.com. See also the support page for what we will never ask you to send.