The two‑factor authentication layer for self‑custody

The second factor isn't another secret. It's the real world.

An approval app and a protected Vault. Nothing protected moves without your approval, and where you are decides how quickly it can.

Keep your wallet.GeoSafe adds a Vault underneath it. You move in whatever you want protected.
One thing isn't enough.A copied phrase or a stolen phone can't move money on its own.
Nothing to write down.Approvals and recovery run on zones you choose, not words you keep safe.
The problem

Whoever holds the key is the owner.

The blockchain solved ownership: your key, your money. Anyone holding those twelve words is you, as far as the chain can tell. What it never solved is permission.

GeoSafe adds the permission. The chain checks the key. GeoSafe checks it's you.

A phrase can be copied. You can't.

158,000personal-wallet theft incidents in 2025
$713Mtaken from individuals, not exchanges
80,000unique victims affected
How it works

A Vault under the wallet you already have.

Connect your wallet and GeoSafe deploys your Vault, a smart-contract account you own. Every withdrawal asks your phone first.

01 · Protected

Choose what to protect.

Funds in your Vault are protected. Anything you leave in your wallet moves as normal and isn't protected. You can secure more at any time, and withdrawals only ever return to the wallet you linked.

02 · In your zone

Recognised, and straight through.

Inside a Safe zone your phone and Face ID are enough: approve, and the money moves like any other send. You can turn that off for any zone, if you'd rather every withdrawal waited.

03 · Away

Time is on your side. You decide how long.

If you're not in a Safe zone, the withdrawal waits. You never have to rush back to one. Once the wait ends, you can approve from anywhere.

If it isn't you

Someone else tries. Nothing moves.

Someone holding your seed phrase can ask for a withdrawal. They can't complete one. The request arrives on your phone, and if it isn't you, deny it.

If you lose your phone

Your zones bring it back.

Pick your recovery zones on the map from wherever you are. After a fixed wait, the Vault is yours on the new phone. If you can't find your zones again, nobody can get you back in.

9:41
VaultProtected
Protected in your Vault
12,400 USDC
Linked wallet0x7a4e…c4d1
Safe zonesSafe zone 01 · Safe zone 02
Away wait7 days
Everyday wallet
1,730 USDC
Unchanged. Spend as usual.
Withdraw to my wallet
WithdrawAt your zone
To your linked wallet
250 USDC
Your phoneFace ID ✓
Your zoneIn a Safe zone ✓
WaitNone
Sent
Recognised: your phone, your zone. Straight through.
Done
WithdrawAway
To your linked wallet
2,400 USDC
Your phoneFace ID ✓
Your zoneOutside Safe zones
6d 23hAPPROVE AFTER
Waiting. Walk into a Safe zone and it's ready now.
Deny request
RequestNot your phone
Withdrawal request
2,400 USDC
FromA different phone
Your zoneUnknown
StatusWaiting for you
Denied. Nothing moved.
They had your seed phrase. Not your phone, not your zone.
ApproveDeny
RecoverNew phone
Recovery zones
Zones matched
Zone one
Zone two
Delay48‑hours
Nothing to type in.
No phrase, no documents. Your zones and a wait you can see.
Start recovery
Why it waits

Time is the thing nobody gives you.

If a withdrawal isn't coming from your phone in a Safe zone, it waits instead of going through. You're notified straight away, and one tap stops it. You never have to explain yourself or raise a support ticket.

REQUESTDAY 0 YOU'RE NOTIFIED · YOU CAN DENY IT YOU APPROVEDAY 7 7d
A request to move 2,400 USDC.Not from your phone, and not in a Safe zone.
It waits.For the time you set. 7 days by default.
You're notified.On your phone, in the app. Never by email.
You decide.Deny it now, or approve it when the wait ends.
Waiting · 6d 23h remaining
The wait is yours to set · A withdrawal is never held for good
Try it

A thief with your seed phrase still can't move your money.

They try from their phone. The request lands on yours. Try it.

A thief's phone · with your seed phrase
WALLET
Send 2,400 USDC
Status · Waiting for the owner
Not your phone, not your zone. Nothing moves.
Your phone · wherever you are
GEOSAFE
now
Withdrawal request
Open GeoSafe to review. This wasn't from your phone, so it waits until you decide.
One tap, Face ID or PIN.
What we can't do

Trust comes from what a security product can't do.

Whatever your settings say, a stolen seed phrase stops at your wallet. It can start a withdrawal. It can never approve one, and it can never put your Vault on another phone. That part isn't configurable.

We can'tmove your money. We can't sign alone, start a withdrawal or shorten a wait.
We can'tlock you out. Recovery is your own recovery zones on a map — never a phrase, and nothing from us.
You can'tbe locked out of your own settings — but you can't be rushed either. Changes to your protection take effect after a delay, including turning it off.
We don'task who you are. No KYC, no documents, no phone number.
We don'ttrack you. Location is checked the moment you tap Approve, not in the background.
We aren'ta second custodian. These are two approval roles, not two companies holding your money.
Patent pending ADGM, Abu Dhabi Enabled with WalletConnect
Early access

Be there the day it opens.

Beta on the App Store, September 2026. Leave your email and we'll send the link the day it's live — and a demo you can try first, if you'd like. Nothing else, ever.

iOS first. One email when the beta is live. No lists, no phone numbers.

← GeoSafe
For wallets

Enabled with WalletConnect. Open to partnerships.

GeoSafe is enabled with WalletConnect, so any WalletConnect-compatible wallet can connect to a GeoSafe Vault without changing anything on its side. Users keep their wallet, their keys and their habits; GeoSafe adds a Vault underneath for the assets they'd hate to lose.

Built in

For wallets that want the Vault inside their own experience, the GeoSafe SDK brings Safe zones, the away wait and zone-based recovery into your app as native screens. Users hold more where they feel safe.

Partnerships

We're looking for wallet partners ahead of public launch — integrations, co-marketing and built-in distribution. If you build a wallet and want to talk, write to hello@geosafe.ai.

← GeoSafe
Security

What GeoSafe is designed to survive — and what it can't do.

Anyone with your key can sign. Only you can spend. The chain asks "valid signature?"; GeoSafe asks "should this happen?" A GeoSafe Vault is a smart-contract account you own. It needs your wallet and your phone to sign. GeoSafe can't sign alone, can't start a withdrawal and can't shorten a wait. Recovery works without us.

What it needs from you

  • Your phone. One registered phone per Vault, with its key held in the phone's secure hardware. Face ID or PIN at every approval.
  • Your zones. Safe zones you choose. Inside one, an approved withdrawal executes now if you switched instant approval on for that zone. Outside — or with it off — it waits for the time you set, and then still needs your approval.
  • Your linked wallet. Withdrawals go only to the wallet you connected. There is no free-form address. If that wallet's seed phrase leaks, your Vault is still safe — leave it where it is and don't withdraw to that wallet; re-linking the Vault to a fresh wallet is a protection change, so it is never instant.

What it survives

  • A stolen seed phrase. The thief has your seed phrase, not your phone or your zone. It gives them your wallet, and that is where it ends: a wallet can start a withdrawal but never finish one, and connecting it to GeoSafe gets nowhere near your Vault. Reaching that takes your registered phone, or your zones.
  • A stolen phone, even unlocked. Unlocking the phone isn't enough: every approval needs Face ID or your GeoSafe PIN. If your PIN is compromised too, the wait is what buys you time — outside your zones nothing moves until it ends. You take the Vault back on a new phone with your recovery zones.
  • A faked location. A spoofed location without your phone and your face is nothing. A new phone still needs your recovery zones and the wait.
  • GeoSafe compromised, or gone. The rules live in the contract, not on our servers. Recovery uses your chosen zones and a fixed 48-hour delay, and needs nothing from GeoSafe.

What we don't claim

We don't claim prevention. We claim that one failure is never enough — including ours. An independent audit of the Vault contract is scheduled before public launch; the auditor's report, the verified contract address and the documented way to withdraw without the GeoSafe app will all be published on this page before anyone is asked to trust it with real value.

Recovery

You choose 2 or more recovery zones when you set up — more than one, because a single zone is guessable by someone who knows you, and each extra zone multiplies what an attacker would have to try. Unlike a Safe zone, you never have to be there: recovery zones are points you pick on a map, so one can be in Lagos and the next in Lisbon. Keep them well away from where you live — GeoSafe asks for at least 50km and warns you if they are closer. Spreading your zones apart from each other helps too. Neither is enforced: you can put both zones on the same street and GeoSafe will still let you. It is a weaker choice, and it stays yours to make. To restore on a new phone you reproduce those zones on the map; the key is re-derived, with a retry throttle and a fixed 48-hour delay. If someone else starts a recovery on your Vault, you are told, and you can stop it with your own zones before the delay runs out. There is no phrase to write down and none to steal. Your zones are a secret, not a location check: choose zones only you would know, guesses are throttled, and even a correct match waits 48‑hours before anything moves.

← GeoSafe
Privacy policy

Your zones are security context, not identity.

Last updated September 2026 · Issued under the ADGM Data Protection Regulations 2021

This policy explains what personal data GeoSafe Holdings Ltd ("GeoSafe", "we") collects when you use the GeoSafe app and website, why, and the rights you have. We have written it to be read, not skimmed. The short version: we collect as little as a security product can, we never ask who you are, and we never track where you are.

1. Who is responsible

The controller of your personal data is GeoSafe Holdings Ltd, a company registered in Abu Dhabi Global Market (ADGM), Abu Dhabi, United Arab Emirates. Contact: privacy@geosafe.ai.

2. What we collect, and why

  • Email address — if you join early access or write to us. Used to send the App Store link, respond to you, and tell you about material changes to the service. Basis: consent (early access) and our legitimate interest in answering you. You can withdraw at any time by replying "stop".
  • Device and push token — an anonymous identifier for your phone and a notification token, so we can deliver withdrawal requests to the phone you registered. Basis: performance of our contract with you.
  • Public wallet address and Vault contract address — needed to connect your wallet and show your Vault. These are public on the blockchain by their nature. Basis: performance of our contract.
  • Location, at the moment you act — when you approve a withdrawal or set a Safe zone, your phone checks its position. The check runs on your device. GeoSafe receives the result of the check (inside or outside a zone), not a stream of your movements. Your zones are held on your phone and never stored by GeoSafe in readable form; the app shows them as "Safe zone 01, Safe zone 02", never as an address. Basis: performance of our contract, and the location permission you grant iOS, which you can revoke in Settings at any time.
  • App diagnostics — crash reports and basic usage events (screens opened, errors), so we can fix bugs. These do not include location, amounts or addresses. Basis: legitimate interest in keeping the app working. You can disable diagnostics in the app.

3. What we do not collect

  • No name, government ID, date of birth, phone number or photograph. GeoSafe has no KYC and no identity check.
  • No background location. Location is read only at the moment you tap, never while the app is closed.
  • No zone names, addresses or map history. Lock-screen alerts show no amount, address or location.
  • No private keys, seed phrases or PINs. Your phone's key never leaves its secure hardware.
  • No advertising identifiers, no advertising trackers, no sale of data — ever.

4. Data on the blockchain

Your Vault is a smart contract on a public blockchain. Transactions to and from it, and the contract's own settings, are public and permanent by design, and are not controlled by GeoSafe. Nothing recorded on-chain by GeoSafe reveals your zones in readable form. Please treat your wallet and Vault addresses as public information.

5. Who we share data with

We use a small number of processors under contract: Apple (push notifications and App Store distribution), our hosting and infrastructure provider, and our email provider for early-access and support mail. Wallet connections are made through WalletConnect, and your chosen wallet's own privacy policy applies to it. We do not share personal data with anyone else unless the law requires it, and we will tell you if it does unless we are prohibited from doing so.

6. International transfers

Our processors may store data outside ADGM, including in the European Union, the United Kingdom and the United States. Where data leaves ADGM we rely on the safeguards permitted by the Data Protection Regulations 2021, including contractual clauses that give your data equivalent protection.

7. How long we keep it

We keep personal data for as long as we need it for the business purposes described above, and delete it when we no longer do. Data recorded on the blockchain is permanent and outside our control.

8. Security

Your phone's key lives in the device's secure hardware and is protected by Face ID or your PIN. Communication with our servers is encrypted in transit. Access to our systems is limited to named staff under confidentiality obligations. No system is perfect; if a breach affects you, we will tell you without undue delay and notify the ADGM Commissioner of Data Protection within 72 hours as the Regulations require.

9. Your rights

Under the ADGM Data Protection Regulations 2021 you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing, to receive it in a portable form, and not to be subject to a decision based solely on automated processing that significantly affects you. GeoSafe makes no such automated decisions: every withdrawal is decided by you. To exercise a right, email privacy@geosafe.ai; we will respond within one month. You may also complain to the ADGM Office of Data Protection (Commissioner of Data Protection) at adgm.com.

10. Changes

If we change this policy in a way that matters, we will tell you in the app and by email before it takes effect. Earlier versions are available on request.

← GeoSafe
Support

The questions people ask before they trust it.

Is GeoSafe a wallet? Do I have to move away from mine?
No. GeoSafe is not a wallet and doesn't replace yours. It adds a Vault, a smart-contract account you own, under the wallet you already use, through WalletConnect. You choose what goes into the Vault; the rest of your wallet is untouched.
Can GeoSafe access, move or freeze my digital assets?
No. GeoSafe can't sign alone, can't start a withdrawal and can't shorten a wait. The rules are enforced by the Vault contract on the blockchain, not by our servers. Withdrawals go only to the wallet you linked.
What happens if GeoSafe shuts down?
Your Vault keeps working. The contract lives on the blockchain and recovery uses your chosen zones plus a fixed delay. It needs nothing from GeoSafe. We will also publish the documented way to withdraw without our app before public launch.
What if the wallet I linked gets compromised?
Your Vault only ever pays out to the wallet you linked, so if that wallet's seed phrase leaks, don't withdraw to it. The Vault itself is still safe: a seed phrase can't move it. Re-link the Vault to a fresh wallet from the app. Like every protection change it isn't instant, so someone holding your phone can't redirect your Vault in one go.
Do I still need my seed phrase?
Your existing wallet keeps its seed phrase. That's your wallet's business. The Vault adds no new phrase. And a leaked phrase gets someone your wallet and no further: the wallet can ask for a withdrawal, but your Vault answers only to your phone. Getting back in on a new phone takes your recovery zones and the wait.
What if I lose my phone?
Your digital assets stay where they are; nothing moves without your phone and your zones. On a new phone, install GeoSafe, reproduce your recovery zones on the map, and after a 48-hour delay the Vault is yours again. No phrase involved. Be clear about the other side of this: your zones are the only way back in. If you cannot reproduce them, nobody can. Not us, not anyone. The Vault stays shut for good.
What if my phone is stolen while it's unlocked?
Unlocking the phone isn't enough: every approval needs Face ID or your GeoSafe PIN. Keep that PIN different from your phone passcode. If it is compromised too, the wait is what buys you time, because away from your Safe zones every withdrawal waits, and you can deny it from your next phone once you've recovered.
What is a Safe zone, and how many do I need?
A Safe zone is a place you choose, where your phone usually is when you move money. Inside one, an approved withdrawal executes now if you switched instant approval on for that zone; leave it off and withdrawals wait even at home. You set an area size around it: big enough to cover where you actually move about, small enough that it still means something. One is enough to start; you can add more in the app. Safe zones are shown as Safe zone 01, Safe zone 02, never as an address and never as a position on a map.
What is a recovery zone, and how do I choose them?
A recovery zone is a point you pick on a map. It is what restores your Vault on a new phone, so you need 2 or more, and you should be able to find them again years from now. You never have to travel to one. Unlike a Safe zone, your position is never checked when you set them or when you use them, so one can be in Lagos and the next in Lisbon. Keep them well away from where you live, and ideally apart from each other: GeoSafe asks for at least 50km and warns you if a zone is closer, but nothing here is enforced. Weaker choices are still yours to make. Once confirmed, a recovery zone is never shown again, so choose somewhere you will still recognise in five years. The area size you set decides how close you need to get next time: a bigger area is easier to find again, a smaller one is harder for anyone else to guess. Recovery uses your zones up: after one, you set new zones before full protection returns.
What happens when I travel?
Withdrawals still ask you first. Outside your Safe zones they wait for the away wait you set: 1, 3 or 7 days, with 7 as the default. Then you approve from wherever you are. Step into a Safe zone sooner and it's ready then. If you want a shorter wait while travelling, change it in advance: like every protection change it takes effect after a cooling-off period, never straight away.
Can I change my away wait or my Safe zones instantly?
Changes to your protection settings are deliberately not instant, so someone holding your phone can't weaken your protection and drain it in one go. The app shows you when a change takes effect.
What if my location is off, or I have no signal?
If your phone can't confirm your location, GeoSafe treats you as away: the withdrawal waits rather than fails. Uncertainty adds time; it never takes it away. Turn location on for the moment you approve and it checks again.
Can someone fake my location with a VPN or a spoofing app?
A faked location without your registered phone and your Face ID is nothing. They still can't sign. And a new phone can't take over your Vault without your recovery zones and the wait.
Can I use GeoSafe on two phones?
One registered phone per Vault. Moving to a new phone uses recovery, your zones plus the 48-hour delay, so that nobody can quietly add a second device.
Does it cost anything? What about gas?
Deploying a Vault and moving money are blockchain transactions, so normal network gas applies. It is paid from a gas reserve held in the app, and the app shows the estimate before you confirm.
Will GeoSafe always be free?
The app is free for the beta and will stay free at launch. Fees may be introduced later as the product develops and new features arrive, and we will say so clearly before anything changes. Network gas is separate and always applies, as above.
Which chains and wallets does it support?
EVM chains first, through WalletConnect. iOS beta on the App Store, September 2026.
Is the Vault contract audited?
An independent audit is scheduled before public launch and the report will be published on the Security page. Until then the app is a beta: start with an amount you'd be comfortable testing with.
Does GeoSafe track where I go?
No. Location is read only at the moment you tap Approve or set a zone, never in the background. Your zones are held on your phone and never stored by GeoSafe in readable form. See the Privacy policy.
What happens to my Vault if something happens to me?
Whoever you trust can recover the Vault the same way you would: with your recovery zones and the 48-hour delay. That means telling them your recovery zones while you can. It is the one exception to sharing them, and only with someone you'd trust with the money itself.
How do I get help?
Email hello@geosafe.ai. We answer everything ourselves and reply as fast as a small team can. Never share your seed phrase, PIN or recovery zones with anyone, including us. We will never ask.