Privacy without
hiding money.
ONRAI protects visibility — not settlement.
What Privacy Means Here
Privacy in ONRAI means controlled visibility.
Clear Visibility Rules
User Sees
- payment amount
- merchant display name
- confirmation status
- own transaction history
Merchant Sees
- payment amount
- timestamp
- settlement confirmation
Does NOT see: user identity, user history, user balance
ONRAI System Sees
- full account IDs
- balances
- transactions
- audit logs
The ledger always knows. Participants only see what they need.
No Identity Exchange
Users and merchants do not exchange personal identity. Payments happen using system aliases.
Payment completes without identity exchange.
Every payment stands alone.
One-Time References
Each payment generates a one-time reference. The reference expires immediately after settlement.
Private Notes, Public Settlement
Private Notes
- visible only to the note owner
- never shown to merchants
- never exposed by default
Settlement Data
- immutable
- shared
- auditable
Balance Visibility Controls
Normal View
Full balance visible
Masked View
Balance hidden with asterisks
Rounded View
Approximate balance shown
Use cases: QR display, merchant counters, public environments
These modes affect UI only. Ledger values never change.
ONRAI will never support:
If the system cannot answer "who paid whom and when", it does not ship.