Privacy approach

Privacy, not secrecy. Here is the difference in one table.

Secrecy would mean nobody can ever see anything. That is not what this is, and anyone selling you that in a payments app is selling you a problem. What ShyPay claims is narrow and checkable: it does not collect what you buy, and payments are not routed through card networks.

Who sees what

Every party in the payment, and what each one actually learns.

Compare a card payment at a shop with the same payment made in ShyPay. The rows are the parties. The cells are what they end up holding.

What each party learns about a single in-store purchase.
Party	Paying with a card	Paying with ShyPay
Your bank	The merchant, the amount, the time, the location, and a spending category, attached to your name.	The funding transfer to the payments provider. Your individual purchases are not reported to it, because they do not run on card rails.
The card network	The same merchant-and-amount feed for every purchase you make, across every merchant.	Nothing. Payments are not routed through card networks.
Processors and data partners	Copies of that feed, under terms you did not individually negotiate.	Nothing.
The merchant	Your name, your card details, and often an identifier that follows you back on your next visit.	A confirmed payment, a unique reference for matching it to the sale, and the paying wallet address.
The person you paid	Not applicable — cards are not designed for paying a friend.	Your ShyPay display name, the amount, and any note you wrote.
The regulated on and off ramp	Not applicable.	Your identity, your funding instrument, and the amounts you convert. This is required and it is deliberate.
Anyone reading the Solana ledger	Not applicable.	That one address paid another address a given amount at a given time. Permanently, and without a name attached.
ShyPay	Not applicable.	The minimum needed to run the app. Not your keys, not your identity file, not what you bought.

What ShyPay collects, and what it will not collect.

This is the product commitment. The legally operative version for this website lives in the privacy policy.

Designed to collect

The wallet address your device holds, because the app has to show you your own balance
A display name you choose, so a friend can recognise a request from you
A contact address for support and for security notices you would want to receive
Diagnostic records needed to keep the app working and to investigate abuse

Never collected

Any share of your signing key, your private key, or recovery material — ShyPay has no place to put them
Your identity documents — those go to the regulated provider, which is required to hold them
Line items, receipts, merchant category codes, or loyalty identifiers
Your contacts book, your location history, or advertising identifiers
A spending profile sold or shared with data brokers — there is no such product here

The honest caveat

Solana is a public ledger. Say it out loud.

Every USDC transfer ShyPay makes is written to a public blockchain and stays there. Anyone can read it. Anyone can graph the flow between addresses. If a wallet address is ever linked to you somewhere else — on an exchange, in a forum post, by a counterparty who knows you — that link can be carried back onto the ledger by someone determined enough.

ShyPay does not publish the connection between an address and a person, and does not build one for advertisers. But a public ledger is public, and a product that told you otherwise would be lying to you.

On-chainAddresses, amounts, timestamps — permanent and public
Not on-chainYour name, your bank, what you bought
Held by the regulated providerYour verified identity, under its own policy
Held by ShyPayThe minimum needed to run the app

Structure

Two companies, one owner, no shared systems.

ShyPay is the consumer wallet. ProxyPay is the merchant payment system. ShyPay and ProxyPay are separate companies under common ownership, and that relationship is disclosed to our providers and partners. They are built to run on separate systems, and ShyPay does not receive merchant records or what you bought.

Identity checks happen where the law puts them: at the regulated provider handling cash-in and cash-out. More about the structure.

Early access

The boring promise: we will not build the profile.

ShyPay is in development, which means the privacy claims on this page are commitments we are building to, and you can hold us to them.

Join early access Read the FAQ