Privacy Policy
Last updated: April 12, 2026
Witty Inventions Digital, LLC ("we", "us", "our") operates chainTraQR, a blockchain-based supply chain tracking platform. This Privacy Policy describes how we collect, use, and protect your information when you use our mobile application and website (collectively, the "Service").
1. Information We Collect
Account Information. When you create an account, we collect your email address and authentication credentials. If you use Apple Sign-In, we receive the identifiers Apple provides.
Shipment Data. Information you enter about shipments, including shipment IDs, descriptions, origin and destination locations, handler names, condition assessments, notes, and photos.
Location Data. With your permission, we collect GPS coordinates when you log shipment events. You can deny or revoke location access at any time through your device settings.
Photos. Photos you attach to shipments or events are uploaded to IPFS (InterPlanetary File System) via Pinata. Once uploaded, photos are stored on a decentralized network and cannot be deleted by us.
Blockchain Data. Hashed shipment identifiers and event metadata are recorded on the Polygon blockchain. Blockchain records are permanent and publicly verifiable by design. We hash shipment IDs with keccak256 before recording them on-chain to preserve privacy — raw shipment IDs are never written to the blockchain.
Device Information. We may collect device type, operating system version, and app version for diagnostics and support.
2. How We Use Your Information
- To provide and maintain the Service
- To create tamper-proof chain-of-custody records on the blockchain
- To authenticate your identity and secure your account
- To generate and verify QR codes linked to your shipments
- To process subscription payments via Stripe
- To communicate with you about your account or the Service
- To comply with legal obligations
3. How We Share Your Information
We do not sell your personal information. We may share information with:
- Supabase — cloud database and authentication provider
- Stripe — payment processing
- Pinata/IPFS — decentralized photo storage (Pinata privacy policy)
- Polygon Network — public blockchain for immutable record-keeping
- Apple — if you use Apple Sign-In
We may also disclose information if required by law, court order, or to protect the rights, property, or safety of our users or the public.
4. Blockchain Transparency
chainTraQR is built on the principle of verifiable, tamper-proof records. Data written to the Polygon blockchain is permanent and publicly accessible. While we hash shipment IDs for privacy, the existence and timestamp of records are publicly verifiable. This is a core feature of the Service, not a side effect.
5. Data Retention
Account and shipment data stored in our database is retained as long as your account is active. You may request account deletion by contacting us. Note that blockchain records and IPFS-hosted files cannot be deleted due to the decentralized nature of these systems.
6. Security
We use industry-standard measures to protect your data, including encrypted connections (TLS), secure authentication, and encrypted key storage on your device. Wallet private keys are stored locally using XOR-based secret splitting and your device's secure enclave — they are never transmitted to our servers.
7. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal information. To exercise these rights, contact us at support@chainOpus.pro.
8. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy, contact us at:
Witty Inventions Digital, LLC
support@chainOpus.pro