Privacy Policy

What we collect

Browsing without an account. You can see the top pairs without signing in. We then store nothing about you, apart from the push token and server logs described below.

Account details. When you create an account we store your email address. If you sign up with a password, we store it only as a salted scrypt hash, never the password itself.

Social sign-in. You can sign in with Google, Apple or X (Twitter). Sign-in runs through Firebase Authentication, and we receive only:

• your email address, which becomes your account email;
• an account identifier, so we can recognise you next time;
• whether the provider has verified that email, so we only link the sign-in to an existing account when it has.

Firebase may also keep the display name and profile photo the provider shares, but we don't store or show them. We never receive your password for these services, and we can't post, message, or read your contacts or friends. We request only the basic profile and email permission from each provider. With Sign in with Apple, you can choose to hide your email; we then receive an Apple relay address that forwards to you.

Things you add in the app. Favourite pairs, price-level watches, and positions you log: the pair, side, entry price, size and any note you write. We use these to show your portfolio and to send the alerts you ask for.

Device information. If you allow notifications, we store your device's push token, its platform (iOS or Android), your app language, and when the device was last seen. We use these only to deliver notifications.

Server logs. Our hosting keeps standard request logs, such as IP address, time and the address requested. We use them for security and to fix problems.

What we don't collect

• Exchange API keys, wallet keys or access to your funds. The app can't place trades for you.
• Biometric data. Face ID, Touch ID and fingerprint unlock are handled by your phone's operating system; we only learn whether the check passed.
• Your contacts, photos or location.
• Advertising identifiers or third-party analytics.

Services we rely on

• Google Firebase for sign-in and push notifications.
• Google, Apple and X when you choose to sign in with them. Their own privacy policies apply to that sign-in.
• Amazon Web Services to host our servers and database.
• Resend to deliver sign-up and password-reset emails. It receives your email address and the message we send.
• Binance for market data. The app sends Binance nothing about you.

How long we keep it

We keep your account data for as long as your account exists. Server logs are kept for a limited period and then deleted.

Deleting your data

This applies however you signed in, including with Google, Apple or X. To delete your data:

• In the app: open the account menu and choose Delete account.
• By email: write to support@kryptosignal.app from your account email and ask us to delete your account. We will confirm within 30 days.

Deleting your account permanently removes your account, positions, favourites, watches and alerts, and your Firebase sign-in record. Devices you used stop being linked to you.

On iPhone, deleting an account you use with Sign in with Apple also disconnects Swing Signals from your Apple ID. Otherwise, deleting your account doesn't disconnect Swing Signals from your social account; you can do that yourself:

• Google: Google Account → Security → Your connections to third-party apps.
• Apple: Settings → your name → Sign in with Apple.
• X: Settings → Security and account access → Apps and sessions.

Security

Data travels over HTTPS. Your session token is kept in your phone's secure storage (Keychain or Keystore). No system is perfectly secure, but we take reasonable steps to protect your data.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to how we use it. You can delete your account in the app. For anything else, email us at support@kryptosignal.app.

Children

Swing Signals isn't meant for anyone under 18, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date at the top of this page. For significant changes, we'll also tell you in the app.

Contact

Questions about your privacy? Email support@kryptosignal.app.