Privacy Policy
Last updated: July 14, 2026
Sobre is a shared family wallet built on the Stellar blockchain. This page explains what data we collect, why, and who we share it with. Plain English, no legal fluff.
Who we are
Sobre is a hackathon-stage project built for the Rise In × Stellar APAC Hackathon (Philippines track, 2026). We do not yet operate as a licensed commercial financial service. Questions or requests about your data can go to clarencekyl3@gmail.com.
What we collect
From Google, when you sign in
- Your name, as it appears on your Google account
- Your email address
- A Google-issued account ID (used to link you back on return visits)
From your device, when you set up your wallet
- A passkey credential ID — a reference to a signing key stored on your device. The private key itself never leaves your device; we only see the public ID.
- Your Stellar wallet address — the on-chain smart contract that holds your envelopes.
When you deposit money (via PDAX)
- The amount, in PHP and USDC
- The deposit status (pending, confirmed, failed)
- Stellar transaction hashes for the deposit and the auto-split
When you cash out (via PDAX)
- The amount and which envelope it came from
- The beneficiary bank code, account name, and account number for the payout
- Transaction hashes for the withdrawal and the bank transfer
When you log an expense
- A short note describing the expense (up to 200 characters)
- Optional: amount, vendor, category, receipt image, timestamp
What we don't collect
- Analytics or behavior tracking (no PostHog, Mixpanel, or session recording)
- Location data
- Your contacts
- Anything from third-party services beyond what's listed above
Where the data lives
- Account fields, wallet metadata, deposit and cash-out records, expense logs — stored in a Supabase-hosted PostgreSQL database.
- Your passkey private key— stays on your device (iCloud Keychain, Google Password Manager, or the device's secure enclave). We never see it and cannot recover it.
- On-chain data(wallet address, balances, transfers, envelope splits) — recorded on the public Stellar blockchain. Anyone can look up transactions on a Stellar explorer; they're pseudonymous (linked to your wallet address, not your name), which is how blockchains work.
Who we share it with
- PDAX — when you deposit or cash out, we send PDAX the amount, your wallet address, and (for cash-outs) your beneficiary bank details, so they can move fiat pesos on your behalf. PDAX has its own privacy policy.
- MoneyGram (roadmap) — same shape as PDAX, for international cash pickups.
- Google — sign-in flows through Google OAuth. We receive your profile fields from them; they see that you used Google to sign in to Sobre.
- Supabase — hosts our database and handles auth sessions. They process data on our behalf.
- The Stellar network — on-chain transaction data is public by design and validated by network nodes worldwide.
We don't sell your data. We don't share it with advertisers.
How long we keep it
We keep your account and transaction history for as long as your wallet is active. If you want it deleted, email the address above: we can remove your Supabase records, which erases the joint-wallet metadata and expense logs. On-chain transactions on Stellar cannot be erased — that's true of every public blockchain.
Your rights
- Sign out at any time from the wallet menu.
- Ask us to delete your Supabase records (email above).
- Ask us what we've stored about you (email above).
Because Sobre is a hackathon project and not yet a licensed financial institution, we don't offer the formal data-subject workflows of a regulated bank. If Sobre becomes a commercial service, this page will be updated to reflect the applicable regulations (the Philippines Data Privacy Act of 2012, and other frameworks that apply where you live).
Children
Sobre is designed for adult members of a family household. Please do not use it if you are under 18.
Changes to this page
If we make changes, we'll update the "Last updated" date at the top. Material changes will be flagged in the app.