What "non-custodial" means here
The phrase gets used loosely, so it's worth being precise. When you link a wallet, you approve a spending connection — a scoped permission that lets the card draw up to a limit you set. You are not transferring your balance to us to hold. If the platform disappeared tomorrow, your funds would still be in your wallet, reachable with your seed phrase, exactly as they were before you ever connected.
A custodian holds your money and gives you a claim on it. This isn't that. The card is a permission to spend, and permissions can be revoked from your side at any time.
How your keys are protected
- Nothing to type. There is no screen anywhere in the product that asks for a seed phrase. If you ever see one, you're being phished.
- On-device signing. Connection approvals are signed inside your wallet — Trust Wallet, Exodus, SafePal, or whatever WalletConnect brings — not in our app.
- Hardware-friendly. If your keys live on a hardware device, they stay there. The card works the same way.
- Scoped allowances. The card can only draw within the allowance you approved, and only for card authorisations.
Card-level protection
| Layer | What it does |
|---|---|
| Tokenisation | Apple Wallet and Google Pay use a device token, so the real card number is never handed to a merchant. |
| 3-D Secure | Online payments are confirmed in-app, which blocks card details used somewhere they shouldn't be. |
| Instant freeze | One tap stops every future authorisation, reversible just as fast. |
| Per-transaction limits | Anything above your ceiling is declined at the network, before it reaches your wallet. |
| Live alerts | Every authorisation notifies your phone as it happens, so a stranger's spend is visible in seconds. |
| Revocation | Disconnecting the wallet ends the card's access permanently, from either side. |
Your part of the deal
Self-custody is a genuinely better security model, and it comes with an obligation: nobody can restore your wallet for you. A few habits cover almost every real-world loss.
- Write your seed phrase down offline and never photograph it or paste it into anything.
- Treat every message asking for a phrase, a code, or "verification" as a scam — including ones that look like us.
- Keep your card allowance close to what you actually spend, not to your whole balance.
- Turn on device-level biometrics; they gate the app and the wallet both.
- Review your transaction feed regularly — it's the fastest way to spot something wrong.
Support that can't hurt you
Because the platform never holds your keys, no support agent — real or impersonated — can move your funds. There is no recovery flow to socially engineer, and no request we could ever make that would justify sharing your seed phrase. That constraint is a feature.