Security model
The chip decides. The glass shows it.
Quantumicy is a hardware wallet. The private key is created on the device, stored on the device, and used on the device. The computer prepares a request. It does not hold the key.
Where the key comes from
Setup asks the chip to create the key. You do not import that secret by typing it on a laptop. The laptop does not receive a spare copy to store for later. What you keep, besides the slab itself, is the paper record of the recovery phrase.
What the glass is for
A window on a computer can be rewritten by software on that computer. The tall screen cannot. The chip draws the amount, the destination, and any warning it wants you to see. If those lines do not match what you expect, you leave the yellow ring alone. The top or bottom button can dismiss the request.
The press that signs
The middle button is a physical control on the slab. Pressing it tells the chip to produce a signature for the request on the glass. The signature can leave over the cable. The key does not. Without that press, the chip does not sign.
The PIN
The PIN is entered with the three buttons on the device. It is a local check before the chip will work with you. It is not a copy of the key, and it is not sent to this website.
The phrase
The recovery phrase is 18 words, shown once on the glass during setup. Write them on paper, in order, and store that paper away from the computer and away from the slab. RAD CAMP INC does not ask for those words. A message to the office should never include them. If the slab is lost, the paper is the record that can restore the keys onto a new Quantumicy.
What stays off
The slab has no radio. It does not join a wireless network, and it does not advertise itself to nearby phones. Power for a computer session comes from USB-C. The sealed cell is only there so the glass can stay readable for the length of a check.
Read the hardware page for the object, or the note on the glass for why the screen belongs to the chip.