Frequently asked questions

No. TROCOZY is watch-only: we read only the public addresses you give us, the same way any block explorer user does. We never touch your private keys. And all the data you enter in the app — addresses, contacts, codes — is encrypted on your phone with a key only you hold. Even we cannot read it.

Thanks to the zero-knowledge architecture, an attacker compromising our servers would find nothing useful: not your addresses, not your contacts, not your codes. Everything is encrypted on your phone. At worst the service would be interrupted for a time; your data would stay intact.

You have three mechanisms.

• The duress code — type it instead of your normal code. The app opens, and a silent alert goes to your contacts. It is the most reliable of the three: it asks nothing extra of you at the moment you are under pressure.
• The system button — a TROCOZY button you place yourself on your Lock Screen, in Control Centre or on your Action button. It fires the alert without unlocking, and without a sound.
• The Siri phrase — an innocuous phrase you configure, which fires the alert; but you have to say it out loud.

On MAX, Code-Verify adds a trap: if the attacker forces you to "cancel" the alert, type any code at all — the alert is escalated, not cancelled.

No, provided you wrote down your twelve-word recovery phrase, created when you signed up. With that phrase and your optional encrypted backup, you restore your data on a new phone.

Lose the phrase and the phone, and yes — it is final. That is the price of zero-knowledge: nobody, ourselves included, can help you recover.

A court can compel us to hand over data. Here is what we are able to provide:

• the list of active subscriptions, as opaque tokens with no link to your identity;
• anonymised technical logs.

And here is what we cannot provide, because we do not have it:

• your monitored addresses;
• your contacts;
• your codes;
• your alerts.

Our text-message provider, on the other hand, could be compelled to disclose the numbers you alerted. That is the irreducible limit. You can switch the text-message channel off and use calls only, to narrow that exposure.

Our server continuously watches the chains — Bitcoin, Ethereum, Solana and the rest — for the addresses you registered, in anonymised form. As soon as a transaction goes out, a signal is sent to your phone.

Your phone, and only your phone, knows which address that signal belongs to. It is the one that checks the rule you wrote — amount threshold, unusual pattern — and decides whether to raise the alarm.

• ESSENTIEL — 5 addresses, 5 contacts, 1 duress code, unlimited rules
• PRO — 25 addresses, 20 contacts, 2 codes, unlimited rules
• MAX — 50 addresses, 30 contacts, 5 codes, unlimited rules

Beyond that — family office, multiple entities — a custom quote will be available.

In all three plans: Bitcoin, Ethereum, Solana, Base, Arbitrum, Optimism, Polygon and BNB Chain — the eight major ones.

On MAX, and as an option for PRO: Avalanche, Linea, Scroll and Cosmos are added.

ESSENTIEL and PRO — you can cancel the alert from the app for as long as the cascade is still running.

MAX — Code-Verify gives you twenty minutes after each alert to confirm or cancel. Confirm that it was a false alarm and a stand-down message goes out to your contacts automatically.

Partly.

• Offline: opening the app, reviewing your wallets, contacts and rules, changing any setting.

• Needs the network: on-chain detection, and sending text messages.

One special case: fire a manual alert with no connection and the phone queues it, then sends it the moment the network comes back.

By card, monthly or yearly, or in crypto — Bitcoin, Ethereum, USDC or Monero — with a discount on the yearly plan.

Pricing for the three plans will be published when sign-ups open. While the app is unreleased, naming a price would mean promising something that cannot yet be honoured.

Yes. Cancellation happens where you paid, in your payment account. You keep access until the end of the period you paid for. No minimum term.

⚠️ Not to be confused: the app has a "Delete my data" screen that erases everything on your phone. That is not a cancellation — deleting without cancelling would leave the billing running. The screen says so, and gives you the management link.

No free trial at launch. The service carries a fixed cost per subscriber — watching the chains, sending the messages and the calls — that a self-funded project cannot give away.

The European right of withdrawal does apply, though: fourteen days to change your mind and be refunded.

• On the unlock screen, enter five wrong codes. A "Recover my account" button appears.
• Enter the twelve words of your recovery phrase, in order.
• If they are right, you set a new unlock code and get your data back.
• Get the phrase wrong three times and the app locks for one hour.
• On the fifth cumulative wrong attempt, local data is wiped — for your own safety.

Yes, that is final. It is the zero-knowledge trade-off: we cannot recreate access for you without those. If we could, it would mean a back door exists — and an attacker could walk through it too.

So, from the day you sign up:

• Write your twelve-word phrase on paper, keep it in a safe, and leave a duplicate with someone you trust.

• Never store it in the cloud — synced notes, online backups: that breaks zero-knowledge.
• Never store it on your phone, as a photo, a screenshot or a note.