Privacy Policy
Effective date: [DATE OF LAUNCH]. Last updated: October 16, 2026.
The short version: we collect the minimum needed to run your account, send the alerts you ask for and process your subscription. We don’t sell your data, we don’t show ads, and we don’t track you across other apps or websites. The traders and trades you see in Edgewatch are public blockchain data, not data about you.
1. Who we are
Edgewatch (“Edgewatch”, “we”, “us”) is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS], [COUNTRY] (company number [NUMBER]). We are the controller of the personal data described here. Contact: [email protected] (or [email protected]).
This policy covers the Edgewatch mobile apps for iOS and Android (the “App”) and the website edge-watch.com (the “Site”).
2. What we collect
2.1 Account data (when you sign in)
You sign in with Sign in with Apple or Google Sign-In. We receive from Apple or Google, and store with our authentication provider (Supabase):
- Your email address (with Apple you can choose a private relay address that hides your real one);
- Your name as shared by Apple or Google, used as your display name (you can edit it);
- Which sign-in provider you used, and an internal random user ID.
We never receive your Apple or Google password.
2.2 Data you create in the App
- Tracked traders: the public Polymarket wallet addresses you follow and whether alerts are on for each.
- Settings: notification preferences (buys/sells, minimum trade size, and quiet hours and time zone if set), haptics, onboarding completion, and when you last read your alerts (for the badge count).
- Referral code you entered, if any, and whether it led to a subscription.
- Support reports: the message you write, optional screenshot, and basic diagnostics attached automatically (app version, operating system and version, device model).
2.3 Device and notification data
- If you allow notifications: a push token (via Expo’s push service, delivered through Apple Push Notification service or Firebase Cloud Messaging), your platform (iOS/Android), notification permission status, app version and when the device was last seen.
- A short log of which alerts we sent you (kept 2 days) so we can group fills and enforce rate limits.
2.4 Purchases
Subscriptions are sold and billed by Apple (App Store) or Google (Google Play). We never see your card or bank details. Our subscription provider RevenueCat receives your purchase receipts and transaction history linked to your Edgewatch user ID, and tells our servers whether your subscription is active, its product, store and expiry date.
2.5 Product analytics
We use PostHog to understand how the App is used and to run product experiments (for example, testing two paywall headlines). We record specific in-app events, such as screens viewed, onboarding steps, traders followed or unfollowed, alerts opened, paywall viewed and purchase started/completed, along with app version, platform, install week and plan (free/Pro). Events are linked to your random Edgewatch user ID, never to your email or name. We configure PostHog to discard IP addresses, so it does not store your IP or derive your location from it [CONFIRM “Discard client IP data” is on]. Analytics are not used for advertising.
2.6 Crash and error reports
We use Sentry to receive crash reports and error diagnostics: stack traces, device model, OS version, app version and your random user ID. Crash reports do not include your email or name.
2.7 Stored on your device
The App keeps your session, settings, tracked list and recently viewed traders in local storage on your device. On iOS, widget and Live Activity data (your traders and latest alert) is stored in an app group on the device. Signing out clears this.
2.8 The website
The Site uses no cookies, analytics or ads. Our hosting provider ([HOSTING PROVIDER, e.g. Cloudflare]) processes standard request logs (IP address, browser, pages requested) for security and delivery. Trader share pages (/t/…) load a trader’s public name and picture directly from Polymarket’s public API in your browser, so Polymarket receives your request.
2.9 What we don’t collect
- No precise location, contacts, photos library (except a screenshot you choose to attach to a support report), microphone or camera.
- No advertising identifiers (IDFA/AAID) and no cross-app tracking. We do not use the App Tracking Transparency prompt because we do not track.
- No crypto wallets, private keys, deposits or trading credentials. Edgewatch cannot trade for you.
2.10 Public trading data
Edgewatch displays public data about Polymarket wallets (addresses, public usernames and profile pictures, trades, positions, PnL) obtained from Polymarket’s public APIs and the Polygon blockchain. If you are a Polymarket trader and want your public profile hidden from Edgewatch, email us and we will review the request.
3. How we use it
| Purpose | Data | Legal basis (EU/UK GDPR) |
|---|---|---|
| Create and secure your account, sync across devices | Account data, settings, tracked traders | Contract |
| Send the trade alerts you turned on | Push token, tracked traders, notification preferences | Contract; consent for notifications (OS permission) |
| Provide and verify Pro, apply referral discounts | Purchase status, referral code | Contract |
| Answer support requests and fix bugs | Support reports, crash reports | Legitimate interests |
| Improve the App and run experiments | Pseudonymous analytics events | Legitimate interests (you can object, see §7) |
| Legal, tax and fraud prevention | Transaction records | Legal obligation; legitimate interests |
We do not sell personal data or share it for cross-context behavioural advertising, and we do not make decisions with legal or similarly significant effects about you by automated means.
4. AI features
Trader style summaries and the weekly brief are generated server-side by Anthropic’s Claude API. We send only structured facts computed from public on-chain trading data (for example a trader’s categories, typical entry prices and holding times). We do not send your name, email, user ID or any other personal data. Under Anthropic’s commercial terms, API inputs are not used to train its models.
5. Who processes your data
| Provider | Role | Location |
|---|---|---|
| Supabase | Authentication, database, file storage, server functions | EU (Frankfurt) |
| Apple, Google | Sign-in, app stores, billing, push delivery | Global |
| Expo (650 Industries) | Push notification relay | US |
| RevenueCat | Subscription management | US |
| PostHog | Product analytics, feature flags | US |
| Sentry (Functional Software) | Crash reporting | US |
| Anthropic | AI summaries of public data (no personal data) | US |
| Fly.io | Background worker reading public blockchain data | [REGION] |
| [HOSTING PROVIDER] | Website hosting | Global |
Each provider processes data on our instructions under a data processing agreement. Where data is transferred outside the EEA/UK, we rely on the EU Standard Contractual Clauses, the UK Addendum or an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified). We may disclose data if required by law, or to a successor in a merger or acquisition, with notice to you.
6. How long we keep it
| Data | Retention |
|---|---|
| Account, settings, tracked traders, push tokens | Until you delete your account |
| Alert send log | 2 days |
| Support reports and screenshots | Up to 24 months; unlinked from your account when you delete it [CONFIRM] |
| Analytics events | Up to 24 months, then deleted or aggregated [CONFIRM PostHog retention setting] |
| Crash reports | 90 days [CONFIRM Sentry retention] |
| Purchase and transaction records | As required by tax and accounting law (typically up to 7 years) |
| Database backups | Rolling, up to [7] days |
7. Your choices and rights
- Delete your account in the App: Account → Delete Account. This immediately and permanently deletes your login, profile, tracked traders, settings, push tokens and alert history. Details and an email alternative: edge-watch.com/delete-account.
- Subscriptions are not cancelled by deleting the account or the App; cancel in your App Store or Google Play settings.
- Notifications: turn off per trader, by type in the App, or entirely in your device settings.
- Access, correction, portability, restriction, objection (including to analytics), and erasure: email [email protected]. We respond within 30 days and may need to verify that the request comes from the account owner.
- Complaints: you can contact your local data protection authority (in the EU/UK) or, in Israel, the Privacy Protection Authority.
- California residents: you have the right to know, delete and correct personal information and to not be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA/CPRA.
8. Security
Data is encrypted in transit (TLS) and at rest by our providers. Access to production data is restricted to staff who need it. Database row-level security ensures each user can only read their own account data. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as required by law.
9. Age
Edgewatch is intended for adults 18 and over. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, contact us and we will delete it.
10. Changes
We will post changes here and update the date above. If a change materially affects how we use your data, we will tell you in the App before it takes effect.
11. Contact
[LEGAL ENTITY NAME], [ADDRESS]. Email: [email protected]. [EU/UK representative, if required: NAME, ADDRESS.]