Privacy policy

Effective 28 September 2026

This policy covers the Imprest iPhone app, Imprest on the web and the optional agent service. SUPER SIMPLE LEARNING LTD is responsible for the personal data we process. Use our contact form for privacy or data requests.

Imprest can’t move your money

Your recovery phrase and the keys that approve payments stay in the device-only iPhone Keychain. They aren’t sent to us or synced through iCloud, and we can’t recover your phrase or approve a payment for you. Payments need your iPhone or your recovery phrase.

On your iPhone

Your recovery phrase is kept in the iPhone Keychain on this device only. It isn’t sent to Imprest or synced through iCloud, and Face ID or your passcode is needed to use it. Account names, account details, payment records and preferences are stored on this iPhone, and your iPhone backups may include them, but not the recovery phrase. Payment records include the approved payment itself, so an interrupted payment can be checked and safely sent again without paying twice.

Saved balances

Your last balances, exchange rates and activity are saved on this iPhone so they stay visible while refreshing or offline. This copy is protected by iPhone file protection, left out of device backups and never contains your recovery phrase. Before you approve a payment, Imprest checks your current balance.

App lock and hiding amounts

When App lock is on (the default), Imprest asks for Face ID or your passcode when you open it and after a minute away, and every payment asks again. The app switcher and screen recordings show a cover instead of your account. Hide amounts hides amounts on Imprest’s screens; notifications on your lock screen and Face ID prompts still show them.

Camera

The camera reads pay links and QR codes, and MoonPay or Transak may use it to check your identity when you add money. Imprest doesn’t save or upload camera images. Camera access is optional; you can type an @handle or paste a pay link instead.

Pay links, @handles and pictures

There’s no public list of Imprest members. Someone with an Imprest account, or an agent, can look up an exact @handle. Anyone who opens your pay link in Imprest, and any agent asked to pay it, sees your name, picture and @handle (none of these for a link without your name) and receives this account’s Base address so the money can arrive. With it they can see the account’s balance and payment history on the public record. A link without your name pays the same account as your @handle. Imprest stores your @handle, display name, picture and counts of lookups used for rate limits.

Agents

When you add an agent, Imprest stores the account’s Base address, agent names, access, limits, expiry dates, last check-in times and payment requests. Requests include who to pay, the amount, reference, purpose, status and payment reference. Access keys are stored as hashes; your iPhone keeps its own key in the Keychain. An agent can see the balance and activity of the account you give it access to, its own requests, and the Base address behind any @handle it asks you to pay. Its AI provider may receive what it sees. Every payment still needs your approval on this iPhone. Anyone you share an agent’s access key with can use it until it expires or you remove access.

Imprest on the web and phone numbers

A five-minute sign-in code signs a browser in to one account for seven days. Imprest stores the account name, a hashed browser token and sign-in dates. The browser can view the balance, activity, statements and agent requests, and manage the optional phone number. It can’t make or approve payments. Sign browsers out from Manage → Imprest on the web. The web app uses an essential, secure, HTTP-only cookie to remember your signed-in accounts, and Vercel hosts it.

Adding a phone number is optional. Twilio receives the number to send and check the code you ask for. Imprest encrypts the number and keeps a keyed hash, the verification date and rate-limit records. Codes expire after ten minutes. A verified number isn’t used to approve payments, restore your account or receive money. Remove it in Manage → Phone number. Twilio may keep operational records under its own policy: Twilio privacy.

Notifications

If you turn on notifications, Imprest stores this iPhone’s notification token for the accounts you choose. Apple delivers each notification and sees its text (amounts, @handles, agent names), the account’s Base address and a request or session ID.

Top-ups and cash-outs

MoonPay or Transak takes your payment details and checks your identity; Imprest never sees your card or ID. Imprest stores the provider, its order ID, the amount, currency and status and, for a cash-out, the provider’s deposit address, and passes your IP address to the provider.

Payments Imprest sends for you

When Imprest covers a fee, it sends the payment for you. It stores the sender, recipient, amount and fee, and the approved payment until it completes.

Statements

Statements list payments in and out of your dollar balance for the chosen month (UTC), retrieved from Blockscout, a public payment index. PDF and CSV files are made on your iPhone; copies you save or share stay wherever you put them. Ether and other holdings aren’t included.

What others can see

Imprest payments settle on Base, a public payment network. Anyone who knows an account’s Base address can see its balance and payments. People you pay see the Base address you paid from. Anyone who opens your pay link in Imprest, and any agent asked to pay it, receives this account’s Base address. Separate accounts keep balances apart on the public record until you move money between them, but Imprest, Apple and the services that load your balances can tell they’re on the same iPhone. Deleting app data or agent access can’t remove payment records.

Service providers

Base, the payment network that holds your dollars, receives balance checks and the payments you approve, with your IP address. Blockscout receives your accounts’ Base addresses and your IP address to show activity and other holdings, so it can tell your accounts are on one device. Coinbase supplies prices and Frankfurter supplies exchange rates; neither receives your account details. Conversions run through Uniswap on Base. Basescan receives a payment reference only if you open a public-record link. MoonPay and Transak handle top-ups and cash-outs, Twilio phone verification, Apple notifications and Amazon Web Services support email. Imprest’s service is hosted on Railway.

Providers may process data outside your country under their own policies and applicable transfer safeguards: Railway, Vercel, Coinbase, Blockscout.

Retention and deletion

Agent records stay until you delete that account’s service data in Privacy → Manage service data. Removing one agent’s access ends it but keeps its history. Deleting service data removes the account’s agents, requests, web sessions and phone details from Imprest’s service. Your accounts and payment records on this iPhone stay. The public payment record, copies held by agents and providers’ own records are separate and aren’t erased.

Removing the app removes its local data; device-only Keychain records can remain, so keep your recovery phrase safe. Contact us for help deleting data we control.

Our contact form sends your name, reply address and message through Amazon Web Services (Amazon SES) to our support team. Never include your recovery phrase or agent access keys; Imprest will never ask for them. Submission hashes used to prevent duplicates and abuse are deleted after 24 hours. We keep support correspondence as long as needed to resolve your request, handle disputes and meet legal obligations. Hosting logs follow the provider’s retention settings. We don’t write recovery phrases, access keys or payment request bodies to application logs.

How we use and protect information

We process service data to provide your account and agent features, and connection and security information for our legitimate interest in protecting and operating the service. Support information is used to answer you. Legal obligations may require retention or disclosure. We don’t sell personal data, show advertising, or use cross-app tracking, advertising SDKs or third-party analytics in the app.

Depending on your location, you can ask to access, correct, delete or restrict your data, object to processing, or request portability. We may need to check that you control the account; we will never ask for your recovery phrase. You may complain to the UK Information Commissioner’s Office or your local data protection authority.

Changes to this policy will appear here with an updated effective date.