Short answer first, the details under it. Last reviewed 8 October 2026 · app version 5.0.23.
On your own computer, encrypted. It is never sent to Uurly or to anyone else.
When you add a wallet, Uurly stores the key encrypted in the app's own data folder:
~/Library/Application Support/Uurly%APPDATA%\UurlyThe encryption is Fernet (AES-128 with an integrity check). The key that unlocks it sits in the same folder and only your own user account can read it. That protects against casual exposure — a shared screen, a synced folder, someone browsing your files. It does not protect against someone who already controls your computer and user account.
Trades are signed on your computer and sent straight to the blockchain. Keys are never logged and never included when you export your settings. Uurly Trial has no wallet at all.
No. The Uurly server has no wallet and no key, so it cannot move your funds. Only the app on your computer can sign a trade.
You never deposit anything with Uurly. The server finds and measures new coins; your app judges them with your own settings and — with a Pro license — buys and sells from your wallet. In the European Economic Area every buy waits for your confirmation.
If you turn on the phone dashboard, you can ask your app from your phone to pause, resume, buy or sell. The server only passes that request on; your app carries it out on your computer. That makes your uurly.io sign-in worth protecting: turn on two-step sign-in on your account page, and never share your license key.
Your keys and your settings stay on your computer. Our server keeps what it needs to sign you in and check your license — and, only if you turn on the dashboard, your live trading data while your app is online.
Never stored by Uurly: private keys, seed phrases, or anything that could sign a transaction. The license check sends only your license key and a hashed device fingerprint. Full details in the Privacy Policy.
Your app keeps running on your computer, and open positions keep their stop-loss and take-profit as long as it runs. What stops first is finding new coins.
Live status of our services: status page →
Before every buy, the app checks the coin against your own limits and refuses it when one fails — with the reason. Checks lower the risk. They cannot rule out a rug pull.
The limits, honestly:
Tell us privately — send a direct message to a Uurly team member on Discord. Please don't post it in public.
Useful to include: what you found, the steps to reproduce it, your app version and your operating system. Never send us your private key or seed phrase — we don't need them, ever.
Download Uurly only from your account page on uurly.io. The Uurly team never DMs you first and never asks for your private key, seed phrase or license key.
Our official channels:
Anyone who does any of these is not us:
The app itself only updates from uurly.io and checks every update's fingerprint before installing it. Uurly is not yet signed by Apple and Microsoft, so your computer warns you the first time you open it.
Every installer has a SHA-256 fingerprint. Your account page shows the fingerprint of each download; if yours matches, nothing changed on the way.
Fingerprints are shown on your account page once you're signed in. The in-app updater does this check for you automatically.