Privacy Policy

This website presents app information and links for contacting us by email or phone. Visiting it sends normal connection information, such as IP address, browser details, and requested pages, to the hosting service. The website does not use an analytics script, tracking cookies, or an account form. Clicking an email link opens your email application; if you send a message, your email address and message are used to respond.

Supabase provides app authentication, database, and file storage. The app processes sign-in information, account identifiers, username, selected fiat currency, time zone, and preferences. Apple or Google sign-in can provide authentication information and, when supplied by the provider, email or name. Saved records include watchlists, portfolios, virtual balances, positions, price alerts, push tokens, notification delivery state, and AI prompts and responses. These support account access, simulation, saved activity, and notifications.

If you choose a profile photo, the app resizes and uploads it to Supabase Storage. The app uses a public URL for that photo, so anyone with the URL may be able to view it. Do not upload a photo you need to keep private. Authentication sessions, preferences, profile information, and watchlist identifiers are also cached on your device. Device caches and stored sessions have separate lifecycles from server records.

When you request AI Insights, your question and snapshots of your simulated portfolios are sent to OpenAI to generate a response. Snapshots include portfolio identifiers and titles, currencies, virtual cash, holdings, purchase prices, quantities, current market prices, and performance measures. Avoid entering sensitive information in prompts or portfolio names. Questions and generated responses are saved in Supabase. The six-hour AI cache expiry controls reuse of a response, not deletion of the saved record.

Coinranking supplies market information and receives requests containing coin identifiers, search queries, and reference currencies. Requests made directly from your device, including requests for remote coin images, expose normal network information such as IP address to the receiving service. Portfolio snapshots sent for AI analysis also include market data retrieved from Coinranking.

When notifications are enabled, Expo and Firebase push tokens are stored with your account. Trigger.dev runs background tasks that process alert and portfolio data, notification delivery state, and saved time zone information. Expo and platform notification services deliver the messages. Device permissions and per-portfolio preferences affect delivery. Notifications can display portfolio or price-alert information on your lock screen; you can control notification permissions and previews through your device settings.

The mobile app uses Firebase Analytics and Crashlytics to process usage events, app-instance or device identifiers, and crash diagnostics so we can understand use, maintain reliability, and fix errors. Expo provides app update and notification services. Backend services maintain security and operational logs. These providers may process information in countries outside your own under their applicable transfer safeguards.

RevenueCat processes subscription status and app-store purchase identifiers to provide and restore Premium access. Apple or Google processes your payment; Coin Copilot does not receive your full payment-card details. When you submit in-app feedback, your account identity, email, subject, and message are sent to our email provider so we can receive and respond to it. The account-deletion flow also receives the reason you provide for the request.

Account-linked app records remain stored while your account exists unless you remove them through an available deletion action. Settings > Delete account removes the authentication account, profile photo, and linked database records, including portfolios, watchlists, alerts, and saved AI insights. Provider logs, backups, caches, purchase records required by an app store, and previously delivered messages may remain for a limited period for security, recovery, legal, or operational purposes.

You can choose whether to upload a photo or request AI Insights, change device notification permissions, and delete your account in Settings. Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, restrict or object to processing, withdraw consent where used, and complain to a supervisory authority. Contact us using the details below to make a request.

For privacy questions or requests, email coincopilot@gmail.com or call +33 7 60 10 38 23. Do not send passwords or wallet recovery phrases.