> ## Documentation Index
> Fetch the complete documentation index at: https://docs.peach.technology/llms.txt
> Use this file to discover all available pages before exploring further.

# Self-custody overview

> Peach is non-custodial by design — only you can move your funds.

Every wallet you create with Peach is yours, and yours alone. Peach is designed so that the people behind the app cannot move funds out of your wallet, sign transactions on your behalf, or recover access to your account from a compromised credential.

This page explains what that means in practice.

## What "non-custodial" means in Peach

<Info>
  A custodial wallet is one where a company holds the keys (and therefore the funds) on behalf of users. A non-custodial wallet is one where the user holds the keys — and only the user can authorize movement of funds.
</Info>

Peach is the second kind. Specifically:

* The private key tied to your wallet is generated and stored inside hardware-isolated infrastructure that **Peach itself cannot read** (see [Key management](/security/keys)).
* Every signature is produced only after you authenticate from your own device.
* Peach has no admin path, master key, or override that would let it move user funds.

## What Peach cannot do

<Warning>
  These limits are intentional. They are what makes Peach non-custodial.
</Warning>

| Action                                                | Can Peach do this? |
| ----------------------------------------------------- | ------------------ |
| Read your private key                                 | No                 |
| Move crypto out of your wallet                        | No                 |
| Sign a transaction on your behalf                     | No                 |
| Reverse, cancel, or modify an on-chain transaction    | No                 |
| Recover a wallet without the original sign-in account | No                 |
| Freeze or seize your funds                            | No                 |

If anyone claiming to be Peach support ever offers to do any of the above, treat it as a phishing attempt.

## What Peach **does** do

Peach is the **interface** between you and on-chain protocols. That includes:

* Generating an embedded wallet for you when you first sign in.
* Showing balances, prices, positions, and history.
* Composing transactions that you can review and sign.
* Routing swap quotes through aggregators, displaying vault terms, and relaying perp orders to the venues where they execute.

In other words: Peach prepares and presents — you authorize.

## Your responsibilities

Because you control your wallet, a few things are also up to you:

<Steps>
  <Step title="Keep your sign-in account safe">
    Your wallet is bound to the social account you signed in with (typically Google or Apple). Treat that account like the keys to a safe — enable strong 2FA, and do not share access.
  </Step>

  <Step title="Review every transaction before signing">
    The signing screen tells you what is about to happen. Read it. If anything looks wrong, cancel — Peach cannot reverse a signed transaction.
  </Step>

  <Step title="Do not share signing prompts">
    No legitimate Peach support flow will ever ask you to sign a transaction or paste a code coming from a stranger.
  </Step>
</Steps>