ZeroKey Mate

ETHOnline 2026 · Physical iPhone prototype

Your companion.
Your rules.

Ask for a beer. Prove your age privately. Pay on Arc.

An iPhone companion that helps you act while keeping your identity evidence on your phone.

Native iPhone app required for card reading and proving. Testnet only; no real money or delivery.

Illustrated ZeroKey Mate phone companion on a desk stand. Local AI, local ZK and Arc payments.

What actually works

A small purchase.
A different privacy boundary.

The physical-card flow completed on a real iPhone. These supplied app captures show an order, a locally generated proof and its completed Arc payment.

Narrated project film · 3 minutes 27 seconds · Creator-recorded voice, technical slides and edited device footage at original speed. English captions are included. Card password entry is omitted. Original device walkthrough. The screenshots below are separate captures.
Mate Lager order for 0.10 test USDC in the real English iPhone app.
01 · Ask and reviewOne configured shop, product and amount.
Age verified and exact payment approval. The phone shows 12.2 seconds of local proof processing.
02 · Prove locallyThis capture shows 12.2 seconds. A single observed run, not a benchmark.
Completed test purchase with a full Arc transaction hash and explorer link.
03 · Check the receiptThe app links to an actual transaction.

Open the transaction shown in these captures ↗

How it works

Local intelligence.
Private proof. Controlled payment.

01 / UNDERSTAND

An on-device agent

Apple Speech and Foundation Models turn a voice request into a structured proposal. Mate checks the product, store, chain and amount. The model receives no card data or signing tool.

02 / PROVE

A fact from a trusted card

The physical My Number card provides a government-signed credential and signs this order's challenge. A Noir circuit checks the signatures, age of at least twenty and time limits.

03 / VERIFY

ProveKit on the iPhone

The native prover creates an order-bound ZK proof locally. The shop receives the proof and public order inputs. Its Arc Age Gate contract verifies them through two RPC providers.

04 / PAY

One exact approval

After user approval, Privy signs the exact x402 USDC authorization. The merchant sponsors gas on Arc Testnet. The app checks the receipt before showing success.

Stays on the phone

Card password, certificate, card signature, name, address, birth date and private proof witness.

Shared for the purchase

Order-bound age proof, public order inputs, buyer address and exact payment. Wallet login and chain access use network services.

Age verification is a contract call enforced by the Worker, separate from the USDC transfer. Payments remain public and linkable.

Technology stack

Every layer has a job.

COMPANION

Apple native stack

SwiftUI · Foundation Models · Speech · DockKit · CoreNFC

PRIVATE PROOF

Noir + ProveKit

JPKI / RSA · Age circuit · Native Rust bridge · Groth16 verifier

STORE

Cloudflare

Workers · D1 · Durable Object · Persistent order recovery

PAYMENT

Privy + x402 + Arc

Embedded buyer wallet · Exact USDC authorization · Sponsored gas

ProveKit is from World Foundation. This checkout uses My Number card identity; World ID authentication is not connected.

Explore the working build

See the store.
Inspect the evidence.

A compatible iPhone with the native build is required for the purchase. The website is the connected store and project overview, not a browser replacement for the phone's NFC reader or prover.

Current status and trust assumptions

Demonstrated: physical-card authentication, local age proof, Privy/x402 test payment, English checkout, explorer link and saved-order recovery. Checkout reliability and the hands-free experience are still being improved.

The prover uses a pinned experimental ProveKit Groth16 branch and a single-party test setup. Certificate revocation is not checked. Age verification relies on agreement between the two configured RPC providers. Smartphone My Number card, World ID, delegated payment permissions and a live Graph-driven decision are not integrated.

Public libraries and AI-assisted development are attributed in the repository. The cover is generated artwork; the purchase screens are actual user-supplied app captures.