Wallet & Merchant Directory

This section provides additional technical detail about how the THAT app and merchant directory operate. It does not change the substance of earlier sections.

Wallet: Key Management & Transaction Flow

Key creation and storage

• Wallets are created on the user’s device by generating a mnemonic (seed) phrase and deriving key material locally.

• Private keys are stored on the device in encrypted form and may use system-level secure storage where available (for example, hardware-backed key stores, passcodes or biometrics).

• Mnemonic phrases and private keys are not transmitted to, or stored by, the Company.

Reading balances and history

• The THAT app queries supported public blockchains and/or indexing services for addresses associated with the user’s wallet.

• Balances and transaction history are shown based on data from public blockchain networks (for example, asset, amount, timestamp, basic status). These views are informational only and reflect on-chain data.

Preparing and sending transactions

When a user sends THAT or another supported asset:

• The user selects an asset, specifies a destination address (for example, pasted, scanned QR code or directory entry) and enters an amount.

• The app constructs an unsigned transaction for the relevant network, including network fee or gas parameters derived from current conditions.

• The user is shown a confirmation screen and, if they approve, the transaction is signed locally on the device with the private key associated with the sending address.

• The signed transaction is then broadcast to the relevant network via standard interfaces (for example, RPC endpoints).

Transfers occur directly between the sender’s and recipient’s blockchain addresses on public blockchain networks; the Company does not receive, hold, forward, intermediate, clear or settle those assets.

Interaction with third-party protocols

• In some cases, the THAT app may surface interfaces to independent third-party protocols or services (for example, decentralized exchanges, on-ramps, off-ramps or bridges).

• Where a user chooses to interact with such a protocol, any resulting swaps, conversions or transfers are executed by the relevant smart contracts or service providers, not by the Company operating an exchange, order book or payment facility.

• Availability, configuration and supported providers may change over time.

Backups and device security

• Users are responsible for creating and maintaining secure backups of their mnemonic phrases or other recovery material (for example, writing them down and storing them safely offline).

• The THAT app may support device-level protections such as PIN codes or biometric prompts, enforced by the operating system, to reduce the risk of unauthorized access on that device.

These measures do not replace the need for a secure backup of the seed phrase, and the Company does not guarantee the security of any particular storage method, device feature or third-party backup service.

---

Merchant Directory: Structure & Behavior

Directory data

Merchant directory functionality surfaced in the THAT app, THAT Directory app or other compatible interfaces may include basic information such as:

• business name

• location and contact details (for example, address, email, website or social link)

• nominated on-chain address or tag for receiving digital assets

• high-level category or description of goods and services

• optional business imagery (for example, logo or cover image).

Listing requirements and fields may evolve over time. The Company may review or moderate submissions for completeness and basic accuracy and may decline, update, suspend or remove listings where information appears incomplete, incorrect, inappropriate, misleading or clearly out of date (for example, wrong contact details, closed venues or obvious impersonation).

Independence of merchants

Merchants listed in the directory remain independent third parties:

• Inclusion in the directory does not mean the Company endorses, recommends or has independently verified any merchant, product or service.

• Listing does not guarantee that a merchant will accept any particular asset at any time or that the listing information is current.

• The directory does not create any agency, partnership or other relationship between the Company and listed merchants beyond provision of the listing itself.

Users are responsible for checking addresses, prices and terms before sending digital assets or entering into any transaction.

Offers and promotions

• Merchants may choose to publish offers or promotions (for example, discounts or special deals) within the THAT Directory app or related interfaces.

• Such offers are configured and administered by the relevant merchant. Users may be able to view and, where supported, claim or present these offers directly to the merchant.

Claiming, viewing or displaying an offer does not create any entitlement, account or stored-value balance against the Company. Any discounts or benefits are applied, if at all, by the merchant as part of the direct relationship between the merchant and the user.

Transaction flow with merchants

When a user chooses to pay a listed merchant with digital assets, they do so by initiating a standard on-chain transfer from their own wallet to the merchant’s nominated address.

These transfers may function as payments between the parties but occur directly on public blockchains and are not processed through any account or stored-value balance operated by the Company.

The Company does not guarantee the performance of any merchant, the completion of any transaction or any outcome arising from user–merchant interactions.