Privacy Policy

We collect the following categories of information. You provide most of it directly; some is collected automatically when you use the Service.

• Account information: your email address, password, display name, avatar, and any bio you choose to add, together with sign-in and verification records such as one-time email codes.
• Exchange API keys: the API key and secret you connect for supported exchanges (Binance, Bybit, OKX and Bitget). Secrets are encrypted at rest. We ask you to create read-only keys; we do not need, and you should never grant, withdrawal or trading permissions.
• Exchange trading data: balances, positions, orders, trade history and profit-and-loss figures retrieved from your exchange accounts through the API keys you connect.
• Content you create: posts, comments, likes, follows, images you upload, reports you submit, and messages you send in the help chat.
• Device and usage data: IP address, device model, operating system and app version, language and time zone, push-notification token and notification preferences, crash and performance diagnostics, and the screens or pages you view.
• Website cookies and analytics: on mycoindeck.com we use cookies and Google Analytics to understand website traffic. This is separate from the diagnostics collected in the mobile apps.
• Support correspondence: the content of emails and chat messages you send us, and the account details needed to answer them.

• To provide the Service: display your portfolio, calculate analytics and keep your trading data in sync.
• To power social features: show your profile, posts and, where you choose to share them, your trading statistics to other users.
• To send notifications: push notifications and emails about your account, followers, market events and security.
• To support you: answer questions and resolve problems you report.
• To keep the Service safe: verify sign-ins with one-time email codes, review reports, and detect abuse, fraud and unauthorised access.
• To improve the Service: understand how features are used, fix crashes and develop new functionality.
• To comply with law: meet our legal obligations and enforce our Terms of Service.

We do not sell your personal information.

Your display name, avatar, bio, posts, comments and follower counts are visible to other users of the Service. Trading performance statistics shown on Explore, the Leaderboard and trader profiles are derived from the exchange accounts you connect, according to the applicable visibility settings and the nature of the feature.

Please only post information you are comfortable making public. Content already viewed or independently saved by other users may remain in their possession after you change its visibility or delete it.

We share personal information only in the following circumstances:

• Exchanges: we call your exchange’s API with the key you connected in order to retrieve your data. Your use of an exchange is governed by that exchange’s own terms and privacy policy.
• Service providers acting on our instructions: cloud hosting and databases (Alibaba Cloud), image and media storage, push-notification delivery (Apple Push Notification service and Google Firebase Cloud Messaging), crash reporting (Sentry), website analytics (Google Analytics), and email delivery.
• Related services: MyCoinDeck and CoinTech2u are related services and share some technical infrastructure. CoinTech2u’s trade-execution and automation services are separate from MyCoinDeck. MyCoinDeck’s read-only connection does not authorise trading through either service. Contact [email protected] if you have questions about information shared between them.
• Other users: the public profile information and content described above.
• Legal reasons: to comply with applicable law or a valid legal request, or to protect the rights, safety and property of MyCoinDeck, our users or the public.
• Business transfers: if MyCoinDeck is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

We keep personal information for as long as needed to provide the Service and for the limited purposes described in this Policy. Retention depends on the type of information, applicable legal requirements and whether it is still needed for the stated purpose.

You can request permanent deletion of your account in the app under Settings → Privacy → Delete Account, confirmed with a one-time code sent to your email, or by emailing [email protected]. We may verify your identity. Deletion permanently removes your account, profile, connected API keys, portfolios, trading history and content. Once completed, it cannot be undone.

You can disconnect an exchange at any time in your profile; we stop syncing immediately and delete the stored API key. You can also revoke the API key directly with the exchange. Disconnecting stops further access through that connection but does not, by itself, delete your account or historical information already stored by MyCoinDeck. Deleting your MyCoinDeck account does not close your exchange account or delete records held independently by the exchange.

You can also:

• access and update your profile details at any time in the app;
• turn off push notifications in your device settings, and manage email notifications in the app;
• control cookies through your browser settings (blocking cookies may affect parts of the website).

Depending on applicable law, you may have rights to access, correct, delete or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; and complain to the relevant privacy authority. Contact [email protected] to make a request. We may verify your identity and will respond within applicable legal time limits. Withdrawing consent does not affect processing lawfully carried out before withdrawal.

We apply reasonable technical and organisational safeguards to protect personal information. All traffic to the Service is encrypted in transit with HTTPS/TLS, exchange API secrets are encrypted at rest, sign-ins and sensitive actions such as account deletion are confirmed with one-time email codes, and access to production systems is restricted to authorised staff.

No method of transmission or storage is completely secure. Please use a strong, unique password, create read-only exchange API keys, and enable IP whitelisting on your exchange where it is supported.

We send service messages needed to operate your account, such as sign-in codes, security alerts and important service notices. Where we offer optional promotional messages, we obtain any consent required by applicable law. You can unsubscribe using the link in a promotional email or by contacting [email protected]. Opting out of marketing does not stop necessary account and security messages.

When you use a feature that needs device access, the app requests the relevant permission at that time. You can change device permissions in your operating-system settings. Declining an optional permission may limit the related feature.

• Camera: to take a profile photo and to scan QR codes.
• Photo library: to choose a profile photo or attach an image to a post.
• Notifications: to deliver push notifications about your account and the traders you follow.

Your information may be processed by us and the providers identified in this Policy in countries other than the one you live in, which may have different data-protection laws. Where applicable law requires safeguards for an international transfer, we put appropriate safeguards in place, and where a specific transfer requires consent, we request it separately. Contact [email protected] for information about the safeguards applicable to your data.

MyCoinDeck is intended for users aged 13 and older, subject to any higher minimum age required by applicable law. It is not directed to children under 13, and we do not knowingly collect personal information from children below the applicable minimum age.

Users who have not reached legal adulthood must have any parent or guardian permission required by applicable law. Where parental consent is required for processing a younger user’s personal information, it must be obtained before that processing takes place. If the required consent cannot be obtained, the Service must not be used.

If you believe that a child below the applicable minimum age has provided personal information, or that required parental consent is missing, contact [email protected]. We will investigate and take appropriate steps, including deleting information or restricting the account where required.

Community posts and shared portfolio information may be visible to others. Younger users should avoid posting contact details, identification documents, account credentials or other sensitive personal information. Eligibility to use MyCoinDeck does not override an exchange’s own age, account-ownership or regional requirements.

The Service contains links to exchanges, news sources and other third-party websites and services. We are not responsible for their content or privacy practices, and this Policy does not apply to them.

We may update this Privacy Policy as our Service or requirements change. We will publish the revised Policy with its effective date and notify you of material changes through an appropriate channel. Where a change requires additional consent, we will obtain it before carrying out the relevant processing.

MyCoinDeck is responsible for the processing described in this Policy. If you have questions about this Policy or how we handle your information, or want to make a privacy request, email us at [email protected] or visit our Support page.