Privacy Policy

Last updated: August 2, 2026

CryptoSage AI (“the app”, “we”, “us”) is an iOS app for tracking a crypto portfolio, reading market data and asking an AI about both. This policy describes exactly what data the app touches, what stays on your iPhone, and names the companies that receive any of it. The short version: we do not sell your data, the app shows no ads, and an account is optional.

1. What stays on your device

• Exchange API keys and secrets are stored in the iOS Keychain on your iPhone — the same system that protects your saved passwords. The app does not upload your exchange credentials to our servers.
• AI provider API keys you add yourself (see section 3) are also stored in the iOS Keychain.
• Your app-lock PIN and biometric setting never leave the device.
• Manually entered holdings, preferences and cached market data live on the device. If you never create an account, everything in section 2 stays on the device too.

We never ask for, receive or store exchange passwords, seed phrases or private keys. Wallets are tracked by public address only.

2. If you create an account (optional)

You can use CryptoSage without an account. If you sign in — with Apple, Google or an email address and password — sign-in is handled by Google Firebase Authentication, so Google processes the sign-in and we receive your email address, a display name and an account ID.

With an account, app data syncs to Google Cloud Firestore so it follows you between devices. That synced data includes:

• your watchlist and favorites,
• your price alerts, and the device push token needed to deliver them (section 7),
• your AI chat conversations,
• your paper-trading balances and simulated trade history,
• your portfolio holdings and connection settings (never the API secrets themselves), and
• your profile and any AI memory/personalization you set up.

3. AI questions go to AI companies

The AI features are not computed on your iPhone. Depending on the feature, your question and the context needed to answer it (for example a summary of your portfolio, or the coin being discussed) are sent to one of these providers:

• OpenAI — answers the built-in AI chat and related per-user AI features.
• DeepSeek, OpenRouter or OpenAI — shared AI features such as market sentiment summaries, coin insights and price predictions are generated on our backend (Google Firebase Cloud Functions), which currently uses whichever of these providers is available, in that order.
• A provider you choose — if you connect your own API key in Settings (OpenAI, DeepSeek, xAI/Grok or OpenRouter are supported), those requests go directly from your device to that provider under your own account and their terms.

What these companies do with text after it reaches them is governed by their own terms, not ours. We hold no zero-retention agreement with them, so we will not promise on their behalf that your words are discarded. Please don’t type anything into the chat you would not want processed by a third-party AI provider.

4. Market data, news and blockchains

Prices, charts, news and on-chain balances are fetched by your device directly from the services that publish them, so those services see your IP address under their own privacy policies. The main ones are:

• Market data and charts: CoinGecko, Binance, Coinbase, Kraken, KuCoin, Bybit, OKX, Gemini and TradingView.
• News: CryptoCompare, Google News and Yahoo Finance.
• Blockchain data for wallet addresses you track: public services such as Etherscan, Solscan and Ankr RPC endpoints.
• Your connected exchanges receive read-only requests for your balances and holdings.

5. Analytics and crash reports

We use Google Firebase Analytics for usage statistics (which screens and features are used, device model, iOS version, session length) and Google Firebase Crashlytics for crash and stability reports. These events do not contain your portfolio contents, chat text, keys or credentials. The data is processed by Google under Google’s terms.

Both are on by default. You can turn either off in the app under Settings › Privacy & Analytics, and the app stops sending that data.

6. Advertising: none

The app shows no third-party ads and sends no data to advertising networks. To be fully transparent: the current build contains Google’s Mobile Ads SDK, but it is switched off — it is never started, no ad is ever requested or shown, and no data flows to it. iOS may still show you Apple’s standard App Tracking Transparency prompt; in the current app, allowing it enables nothing, and we do not track you across other companies’ apps or websites either way. If ads are ever introduced, this policy will be updated first.

7. Notifications and price alerts

Push notifications are optional and controlled by iOS. If you use price alerts while signed in, the alert definitions and your device’s push token are stored on our backend so alerts can fire while the app is closed. Notifications are delivered through Apple’s push service and Google’s Firebase Cloud Messaging.

8. Purchases

Subscriptions are bought through Apple. Apple handles the payment and shares no card details with us; our backend receives the App Store receipt only to confirm which plan is active. Refunds are handled by Apple — see the support page.

9. Security

• Exchange and AI credentials are stored in the iOS Keychain, not in app files.
• Network connections use HTTPS (TLS) encryption in transit.
• Exchange connections are for read-only portfolio tracking; the app never asks for withdrawal or transfer permissions, and we recommend creating read-only API keys.
• Optional Face ID / Touch ID app lock, enforced on your device.

10. Deleting your data

• Disconnect an exchange or wallet at any time from Settings › Linked Accounts; removing a connection removes its stored credentials from your device.
• Delete conversations from the AI chat screen; if you are signed in, this also removes the synced copy.
• Delete your account from inside the app. This deletes your synced data on our servers (Firestore) and the sign-in record itself.
• Delete the app to remove its local data from your iPhone.
• Or email hypersageailabs@gmail.com and we will do it for you.

11. Your rights (California, EEA/UK and elsewhere)

Wherever you live, you can ask us what data we hold about you, ask for a copy, ask us to correct it, or ask us to delete it — the in-app tools above cover most of this instantly, and the email address below covers the rest. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of on that front. California residents may exercise CCPA rights, and EEA/UK residents GDPR rights (access, rectification, erasure, restriction, portability, objection), by emailing hypersageailabs@gmail.com with “Data Request” in the subject line.

12. Children

CryptoSage is not intended for anyone under 18 and we do not knowingly collect information from children. If you believe a child has provided us personal information, email us and we will delete it.

13. This website

This website (cryptosageai.io) is a separate surface from the app, and it does two things worth naming:

• It uses Google Analytics to count visits, which processes your IP address and browser information under Google’s terms.
• If you submit your email in the “Get Early Access” form, that email address (with the time and your browser’s user-agent string) is stored in our Google Cloud Firestore database and used only to contact you about CryptoSage. Email hypersageailabs@gmail.com to be removed.

14. Changes to this policy

If we change what the app collects or who receives it, we will update this page and its date first. Significant changes will also be announced in the app.

15. Contact

Privacy questions and data requests: hypersageailabs@gmail.com. A real person reads every message.