Sending takes about a minute. Below is what you do, and then exactly what leaves your phone at each stage — so you can check the privacy claims rather than trust them.
Today you can send to other Prova users. Withdrawals to a bank account will follow once a licensed partner is connected.
Photograph your ID and complete a short liveness check. A member of our team reviews it. Approval puts a credential on your phone that says only that you are verified, your tier, and when it expires.
Once · usually reviewed within 24 hours
Top up your balance, then move it into your private balance. This step is public on purpose — the institution you deposited with already knows, so hiding it would buy you nothing.
A few seconds to confirm
Choose a recipient and an amount. Your phone builds the proof that the transfer is valid and allowed. This is the slow part, and it is still about two and a half seconds.
≈ 2.6 seconds to prove
The transfer settles on Stellar and the money appears in the recipient’s private balance, ready for them to send onward.
≈ 5 seconds to settle
This is the table worth checking. If any row said “your amount” or “your documents”, the rest of this site would be marketing.
| Step | Leaves your phone | Stays on your phone |
|---|---|---|
| Signing in | Your email address, to send you a one-time code | Your PIN, and every key derived from it |
| Verifying identity | An opaque identifier and which documents you captured — no images | Photographs of your ID and your face; they are read on-device |
| Adding money | A public deposit to the pool: a commitment and a proof it is well-formed | The note that lets you spend it, and its blinding value |
| Sending | A proof, a nullifier, and two commitments — no amount, no names | The amount, the recipient, your keys, your credential |
| Your history | Nothing. The Activity screen is built from your own device | Every transaction you have made |
A proof convinces the network that a statement is true without revealing why. Yours says: this money exists, it has not been spent before, I am allowed to send it, and I am within my limit. It does not say who, or how much.
Money in the pool is held as commitments — sealed values nobody can open but the owner. Spending one publishes a nullifier that proves it is now used, without ever pointing back to which commitment it was.
Approval issues your device a signed statement that you are verified. Your transfer proves it holds a valid one; it never attaches it. So the network can enforce the rules without learning who is following them.
Every transfer must include a proof that the sender holds a valid, unexpired verification credential and is inside the transfer limit for their tier. The contract rejects anything without one. So the rules are enforced on every single transfer — more consistently than a system that checks a database after the fact — without the network learning who is behind it.
If you set up cloud backup, you can restore with your PIN — the backup is encrypted on your device before it leaves, so neither the storage provider nor we can read it. Without a backup, the money cannot be recovered by anyone, including us. That is the direct cost of us never holding your keys, and it is not something we can waive for individual users.
No. A transfer confirmed on a public blockchain is final. We can decline to relay one, and we can revoke a verification so no future transfer proves valid, but we cannot claw back money that has settled.
Because the institution you deposited with already saw it. Hiding a deposit from the chain while the bank has it on record would add complexity and buy no real privacy. What matters is that the link between your deposit and your later transfers is broken — and that is exactly what the pool does.
There is no money on a test network. Balances are test assets with no monetary value, and the network can be reset without warning. Treat this build as something to try, not somewhere to keep savings.
The institutions you deposit and withdraw through, since that is where money enters and leaves the regulated system. Between those two points, what you do is not visible to us or to anyone reading the chain.