← Back to Piggy

Privacy Policy

Last updated: March 10, 2026

1. Who We Are

Piggy ("the App") is operated by OrkLabs S.A.S., a company incorporated under the laws of the Argentine Republic ("we," "us," or "our"). This Privacy Policy describes how we handle information in connection with the Piggy mobile application and the website at pig.gy.

By using the App, you agree to the practices described in this Privacy Policy.

2. Self-Custody Architecture

Piggy is a self-custody Bitcoin wallet built on the Spark (spark.money) protocol. Your private keys are derived on your device from your passkey (WebAuthn) credential using the PRF (Pseudo-Random Function) extension. We do not hold, manage, or have access to your private keys, passkey credentials, seed phrases, or any key material at any time.

Your passkey is automatically synced and backed up by your device's passkey provider (e.g., Apple iCloud Keychain, Google Password Manager). We do not operate or control this backup. The App also allows you to export a recovery seed phrase — derived from the same passkey/PRF process — as an additional backup. Your seed phrase is generated and displayed locally on your device — we never receive, store, or transmit it. Anyone who obtains your seed phrase can access your funds. If you lose access to both your passkey provider account and your seed phrase, we cannot recover your funds. You are solely responsible for maintaining access to your passkey and safeguarding your seed phrase.

3. Information We Have Access To

Because Piggy operates on the Spark protocol, certain information is inherently public on the network. The information we may have access to includes:

  • Your public key — this is public information by nature on the Spark network and does not reveal your identity.
  • Transaction and invoice data — when the App creates Lightning invoices or processes transactions on your behalf, this data passes through the Spark protocol and may be visible to us and other network participants. This is publicly available information on the protocol and is not private or proprietary data.
  • Publicly available Spark network data — any information that is already publicly accessible through the Spark protocol.
  • Character and profile data — if you upgrade your Piggy, we store your Piggy's name, skin, AI personality, Lightning address, and public message feed on our servers to enable profile and messaging features. This data is not linked to your real-world identity.

We do not correlate this publicly available data with your real-world identity. We do not perform KYC or collect identifying information.

4. Information We Do Not Collect

We do not collect, store, or process:

  • Private keys, passkey credentials, seed phrases, or key derivation material
  • Government-issued identification (no KYC)
  • Personal names, physical addresses, or contact information (unless you contact us directly)
  • Financial or banking information
  • Exact wallet balances or detailed transaction history. Approximate balance context (such as balance ranges) may be shared with AI providers solely for generating personality responses, but is not stored, logged, or linked to your identity.

5. Information We May Collect

To maintain and improve the App, we may collect minimal, non-identifying data:

  • Device information — device model, operating system version, and app version for crash diagnostics.
  • Anonymous usage analytics — aggregated, non-identifiable interaction data (e.g., which screens are visited) to improve the user experience. No analytics data is linked to your identity or wallet.
  • Push notification tokens — if you opt in to notifications, we store a device token to deliver alerts. This token is not linked to your wallet or identity.

We do not use cookies or similar tracking technologies on the App or the pig.gy website.

6. Piggy Characters & Public Profiles

The App allows you to create and customize a unique Piggy character with a name, skin, and AI personality. When you upgrade your Piggy, the following data is stored on our servers:

  • Character data — your Piggy's name, skin selection, AI personality description, and generated title and biography.
  • Lightning address — your custom handle (e.g., name@pig.gy) and associated routing data for receiving payments.
  • Public profile — a publicly accessible page at pig.gy/[handle] displaying your Piggy's skin, name, and message feed.
  • Message feed — messages received from other users via Lightning payments, along with your Piggy's AI-generated responses. On the public profile, messages are displayed without sender names or payment amounts. Within the App, the Piggy owner can see sender names and amounts.

Your private keys and passkey credentials are never stored on our servers. They remain exclusively on your device.

Free-tier Piggy data (default skin, random address) is stored locally on your device. No server-side profile is created for free-tier users.

If you destroy your Piggy, all associated server-side data — including your profile, message history, name, personality, and Lightning address — is permanently and irreversibly deleted. The name and Lightning address are retired and cannot be reused.

7. Use of Artificial Intelligence

The App uses artificial intelligence (AI) to power certain features, including Piggy character interactions and personality generation. AI processing may occur on-device or via third-party AI service providers.

When third-party AI services are used, we send limited, non-identifying context to generate personality responses. This may include character traits, conversation prompts, approximate wallet context (such as account age and balance ranges), and incoming messages from other users. We do not send your private keys, passkey credentials, seed phrases, exact wallet balances, transaction history, or personal identity information to any AI provider.

AI-powered moderation is applied to incoming messages. Messages identified as toxic, harmful, or containing personal information are silently filtered and not displayed. Sats attached to filtered messages are still deposited to your wallet.

Third-party AI providers operate under their own privacy policies and data handling practices.

8. Third-Party Services

The App interacts with the Spark (spark.money) protocol and the Bitcoin Lightning Network to process transactions. These are decentralized protocols; we do not control them and are not responsible for their operation, availability, or privacy practices.

We may use third-party services for crash reporting and anonymous analytics. These services operate under their own privacy policies.

9. Data Storage & Security

All sensitive data (private keys, wallet credentials) is derived from your passkey credential and secured using platform-native encryption (iOS Keychain / Android Keystore). Your passkey is synced and backed up by your passkey provider (Apple, Google) — we have no access to this process. If you export a recovery seed phrase, it is displayed locally on your device; we do not store, transmit, or have access to it.

If you upgrade your Piggy, character metadata (name, skin, personality, Lightning address, and message feed) is stored on our servers. This data is not linked to your real-world identity and is permanently deleted if you destroy your Piggy. Server-side data is protected using industry-standard encryption and access controls.

Where we do process minimal data (such as analytics or push tokens), we implement reasonable technical and organizational measures to protect it. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Analytics and push notification data is retained only as long as necessary for its stated purpose and is periodically purged. In the event of a data breach affecting personal data, we will notify affected users and relevant authorities as required by applicable law.

10. International Data Transfers

OrkLabs S.A.S. is based in Argentina. If you access the App from outside Argentina, including from the United States or the European Union, any limited data we process (such as analytics or crash reports) may be transferred to and processed in Argentina or other countries where our service providers operate. By using the App, you consent to such transfers.

11. Your Rights

Given our self-custody architecture, we hold minimal to no personal data. Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, delete, or restrict its use.

  • United States residents: If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. Given our minimal data collection, we do not sell personal information.
  • EU/EEA residents: You may have rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, and data portability.

To exercise any of these rights, contact us at hello@pig.gy. We will respond within the timeframe required by applicable law.

12. Children's Privacy

Piggy is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We will make reasonable efforts to notify you of material changes through the App or other communication channels. Continued use of the App after changes constitutes acceptance.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Argentine Republic.

15. Contact

If you have questions about this Privacy Policy, contact us at:

OrkLabs S.A.S. — hello@pig.gy