Privacy Policy

Polydict ("Polydict", "we", "us") operates a prediction-market and perpetual-futures (perps) trading application available as a Telegram Mini App, a Farcaster and Base Mini App, and on the web at polydict.app. This policy explains what data we process when you use Polydict and the choices you have. By using Polydict you agree to this policy.

1. Information we collect

• Telegram account data. When you open Polydict inside Telegram, Telegram provides signed launch data (initData) containing your Telegram user ID, first/last name, username, language, and profile photo URL. We verify this signature server-side to authenticate you.
• Farcaster / Base profile. If you sign in with Farcaster, we receive your FID, username, display name, and avatar.
• Google or X (Twitter) account. If you sign in with Google we receive your name and email address; if you sign in with X we receive your username, display name, and profile photo. We use this only to create your Polydict profile — we do not read your Gmail, post to X, or access your timeline.
• Wallet & on-chain data. A blockchain wallet address (an embedded wallet created for you by our auth provider, or an external wallet you connect) and the public on-chain transactions you make.
• Usage data. Basic, largely aggregated analytics about how the app is used (pages viewed, approximate performance) to keep the service running.

We do not collect your Telegram phone number, contacts, or message history. The keys to your wallet are managed by our authentication provider and are never sent to us. The one exception is a separate trading key you may choose to create for an automated strategy, described in section 2.

2. Trading keys for automated strategies

Automated strategies are optional. If you turn one on, we generate a separate trading key (a Polymarket "session key") on our server, and you authorize it for your Polymarket deposit wallet with a signature from your own wallet.

• What it can do. Place and cancel orders on Polymarket's order book for that wallet, and nothing else. It cannot withdraw or transfer your funds. It can trade them, though, so anyone holding it could lose money for you through bad trades. That is why we encrypt it, and why pausing deletes our copy at once.
• How we store it. Encrypted (AES-256-GCM), with the encryption key kept apart from our database. It is never sent to your browser, and we use it only to place and cancel the orders your strategy's rules call for.
• How long it lasts. Up to about 180 days from when you authorize it, unless you end it sooner.
• Pause. Cancels the strategy's open orders and deletes our copy of the key immediately. The key itself stays valid on Polymarket until it expires or you revoke it.
• Revoke. Ends the key on Polymarket itself. It needs your wallet's signature, so only you can do it; we cannot revoke it for you.

After a key is paused, revoked or expired, we keep its public address, status and dates as a record, but not the key itself.

3. How we use your information

• Authenticate you and keep you signed in across sessions.
• Create or link a self-custodial wallet and display your profile.
• Let you view markets and place, track, and settle trades.
• Run the automated strategies you turn on, with the trading key you authorize.
• Operate, secure, debug, and improve the service.
• Comply with legal obligations and prevent abuse.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Service providers

We share the minimum data needed with providers that help us run Polydict:

• Privy — authentication and self-custodial embedded wallets.
• Polymarket & the Polygon network — prediction-market and perps data and on-chain trade settlement.
• Hyperliquid — perpetual-futures market data and trade execution when you trade perps there.
• Telegram and Farcaster — the platforms the app runs inside.
• Google and X (Twitter) — sign-in (OAuth) when you choose those login options.
• Vercel — hosting and basic analytics.

Each provider processes data under its own privacy policy.

5. On-chain data is public

Polydict is built on public blockchains (Polygon). Wallet addresses, balances, trades, and settlements are recorded on-chain, are visible to anyone, and are permanent — they cannot be edited or deleted by us or by you. Do not use Polydict for activity you need to keep private.

6. Data retention

We keep account and profile data for as long as your account is active and as needed to provide the service or meet legal requirements. On-chain data persists on the blockchain indefinitely and is outside our control.

7. Security

We use reasonable technical measures to protect data, including server-side verification of Telegram launch data, encrypted transport (HTTPS), and encryption at rest for trading keys. No method of transmission or storage is perfectly secure, and you are responsible for safeguarding access to your wallet and devices.

8. Children

Polydict is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has used the service, contact us and we will take appropriate action.

9. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to certain processing. To make a request, email us at the address below. Note that on-chain data cannot be deleted.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and continued use of Polydict after an update constitutes acceptance of the revised policy.

11. Contact

Questions about this policy or your data? Email polydict55@gmail.com.