Privacy Policy

Gonka Keeper browser extension & Telegram Web App · Last updated: April 21, 2026

TL;DR. Gonka Keeper is a self-custodial wallet. Your keys and passwords never leave your device. We do not run analytics, do not track you, and do not sell or share personal data. The only network traffic the app generates is what you trigger yourself: blockchain RPC calls, AI chat prompts, and dApp connections.

1. Who we are

Gonka Keeper ("the app", "we", "us") is a self-custodial cryptocurrency wallet for the Gonka.ai blockchain with a built-in chat interface to the Gonka decentralized AI network. It ships as a Chrome browser extension and as a Telegram Web App.

Contact: [email protected].

2. What data the app handles

2.1 Stored locally on your device

The following data is stored in your browser (extension: chrome.storage.local + IndexedDB; Telegram Web App: localStorage + IndexedDB) and never transmitted to us:

Wallet secrets — mnemonics and private keys, encrypted with AES-GCM using a key derived from your password. Without the password, the ciphertext cannot be decrypted by us or anyone else.
Wallet metadata — wallet names, public addresses, last-selected account.
Preferences — language, theme, active network, auto-lock timeout.
AI chat history — prompts and model responses, stored in IndexedDB (gonka-chat). You can delete sessions at any time from the chat UI.

2.2 Held temporarily in memory

Your password is held in memory only while needed to decrypt a wallet. Decrypted private keys live in the app's runtime memory and are wiped on auto-lock, reload, or close.
Selected page text and "Attach page" context are held briefly in session storage so the chat can read them, and are cleared when you close the tab or session.

2.3 Sent over the network

Network traffic is generated only in response to explicit user actions:

Trigger	Destination	What is sent
Opening the wallet, sending/receiving tokens, staking	Gonka RPC endpoints (`node1/2/3.gonka.ai`) or an RPC you configure	Standard blockchain queries and signed transactions (public data)
Sending a message in AI chat	Gonka inference nodes and the proxy `node.gonka.lat`	Your prompt text, selected model, a signed request header
Clicking "Attach page" or the "Send to Gonka AI" context menu item	Same AI endpoints as above	The page title, meta description, and visible body text you chose to attach
A dApp site asks for your wallet address or a signature (extension only)	Only the dApp page itself (via `window.gonkaKeeper`)	Your public address and/or a signature, only after you approve the prompt
Fetching token price	Public price API	Ticker symbol only (no wallet data)

3. What we do not do

We do not collect analytics, telemetry, crash reports, or usage metrics.
We do not fingerprint the browser or device.
We do not sell, rent, or share personal data with third parties.
We do not transfer data for advertising, credit scoring, or lending.
We never read or exfiltrate page content without an explicit user action.
We do not load or execute remote code. All JavaScript and WebAssembly ship inside the app package.

4. Permissions and why they are needed

Applies to the Chrome extension build:

storage — persist encrypted wallets, preferences, and chat history locally.
alarms — run the auto-lock timer so keys are wiped after inactivity even if the popup is closed.
sidePanel — render the AI chat in the browser's side panel.
contextMenus — provide the "Send to Gonka AI" right-click action on selected text.
activeTab — read the current tab's content only when you click "Attach page".
scripting — run a one-shot script on the active tab to extract title, meta, and visible text for the AI context, triggered by your click.
Host permissions (https://*/*) — allow the content script to inject the Keplr-compatible window.gonkaKeeper provider into dApp sites and to read page content on your explicit request.

5. Third-party services

The app relies on the following third-party infrastructure. We do not control their privacy practices; please review their policies independently.

Gonka.ai network nodes — receive your signed AI prompts and blockchain transactions. They see your prompt text and your public wallet address (used as the signer of the request).
Public price API — receives token ticker queries only.
dApp websites — only when you visit them and approve a connection. They see your public address after approval.

6. Security

Mnemonics and private keys are encrypted client-side with AES-GCM before storage.
Keys are never transmitted off your device.
All network calls to Gonka endpoints use HTTPS.

Self-custody means you are responsible for safeguarding your password and seed phrase. We cannot recover lost wallets.

7. Children

Gonka Keeper is not directed at children under 13 and we do not knowingly handle data from them.

8. Your choices

Clear chat history at any time from the chat sidebar.
Remove or reset a wallet from Settings.
Uninstall the extension or close the Telegram Web App to erase all local data; because we store nothing on our side, this is equivalent to full data deletion.

9. Changes to this policy

If we make material changes we will update the "Last updated" date above and, where appropriate, surface a notice in the app. Continued use of the app after the change constitutes acceptance of the updated policy.

10. Contact

Questions or requests regarding this policy: [email protected].