Use OffChain
responsibly.

These terms apply whenever you install, open, or interact with the OffChain wallet, across our mobile apps, browser extension, website, and SMS relay. If you don't agree with any part, stop using OffChain and uninstall it.

• You must be at least 18 years old (or the age of majority in your jurisdiction).
• You must not be located in, or a resident of, any country subject to a comprehensive embargo by the United States, United Nations, or European Union.
• You must have the legal capacity to enter into a binding contract.

OffChain is non-custodial. Your wallet's private keys are generated and stored on your device in encrypted secure storage (Android Keystore / iOS Secure Enclave). We never see them in normal mode.

• Back up your seed phrase. If you lose it and uninstall the app, your funds are unrecoverable. Not by us, not by anyone.
• Your PIN is hashed locally. We cannot reset it or read it. Lose it and the only recovery is your seed phrase.
• Transactions are final. Blockchains do not have a refund button. Triple-check the address before sending.

If you enable SMS mode so you can transact without internet, you explicitly authorise OffChain to:

• Hold an encrypted copy of your private keys on our server so we can sign and broadcast transactions you initiate via SMS or voice approval.
• Send and receive SMS and voice calls to and from your registered phone number via Twilio for transaction authorisation, OTP delivery, and confirmation receipts.
• Verify your PIN against a server-stored hash before executing any SMS-initiated transaction.

Carrier rates may apply for SMS and voice calls. You can withdraw this authorisation any time from Settings → Delete Wallet, which removes the server-side copy of your keys.

You agree not to use OffChain to:

• Fund or facilitate any illegal activity in your jurisdiction.
• Launder proceeds of crime, finance terrorism, or evade economic sanctions.
• Send transactions to or from addresses on the U.S. OFAC SDN list or any equivalent sanctions list.
• Attempt to reverse-engineer, decompile, or extract source code from the apps beyond what local law permits.
• Abuse the relay infrastructure (mass spam to the SMS endpoint, denial-of-service attacks, rate-limit evasion).
• Impersonate another user or register with a phone number you do not control.

We may revoke access to the SMS relay and delete server-side records for any account that violates these rules.

By sending transactions through OffChain you acknowledge and accept the inherent risks of using cryptocurrency and decentralised networks:

• Price volatility. Token values can swing wildly. We are not a financial advisor and nothing in the app is investment advice.
• Irreversibility. On-chain transactions cannot be cancelled or reversed once broadcast.
• Network risk. Blockchains may suffer congestion, forks, reorgs, or downtime outside our control.
• Smart-contract risk. Third-party tokens (SPL, ERC-20, BEP-20) may be malicious, buggy, or rugged. We do not audit them.
• Wrong-chain transfers. Sending an asset to an address on the wrong network usually means the funds are lost.
• Phishing. Anyone asking for your seed phrase or PIN, including someone pretending to be OffChain, is trying to steal your funds.

• We operate the SMS relay, voice-approval call infrastructure, and balance/history APIs on a best-effort basis. Uptime is not guaranteed.
• We may modify, suspend, rate-limit, or discontinue any feature at any time, including the SMS relay, with or without notice.
• On-device wallet functions (key generation, signing, address display) work independently of our servers and will keep functioning even if our backend is offline, provided you have your seed phrase.
• We may impose per-account daily limits on OTP requests, SMS sends, and AI agent calls to protect the relay from abuse.

OffChain is provided AS IS and AS AVAILABLE, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the app will be uninterrupted, error-free, secure against all attacks, or that any transaction will confirm within a particular timeframe.

To the maximum extent permitted by law, OffChain's total liability for any claim arising out of or relating to your use of the app is limited to the fees you paid us in the twelve months preceding the claim, which, for almost all users, is zero. We are not liable for lost funds caused by user error (wrong address, lost seed phrase, weak PIN), third-party tokens, blockchain malfunctions, carrier outages, or actions of third-party services (Twilio, RPC providers, etc.).