TronVault is non-custodial: BIP39 mnemonic (coin type 195) generated on-device, DEK-wrapped with Android Keystore keys, PIN + biometric gates, and local signing of Tron transactions (secp256k1 over sha256 of raw data). No key material ever leaves the device.
Blockchain access: TronGrid HTTP API (balances, dry-runs, broadcast). History: TronScan public API. Market data: CoinMarketCap and CoinGecko public endpoints.
Fees are computed from live chain parameters (getchainparameters), the dry-built transaction byte size, simulated energy usage, your account resources, and account-creation status — recalculated on every send screen. No hardcoded rates.