Privacy Policy

2. WHAT WE COLLECT

• Account information. Your name, email address and profile image, when you create an account. Sign-in is handled by Firebase Authentication.
• Device name and notification token. When you sign up, the app sends your device's name (as set on the device) and a push notification token, so we can deliver notifications to that device.
• Content you enter. Transactions, holdings and goals you record yourself, the preferences you choose (such as persona, experience level, currency, exchange, topics and interests), and messages you send to Penny, the in-app AI assistant.
• Wallet credentials. If you connect a centralized exchange account (Coinbase, Binance, Kraken, OKX, KuCoin), you provide an API key and secret. You must create read-only keys. Where the exchange lets us check a key's permissions (Binance, OKX, KuCoin), we reject keys that can trade or withdraw. Keys are stored encrypted and used only to read your balances and history. The app has no way to place orders or move funds. If you add an on-chain wallet, you provide an extended public key (xPub/zPub) only, never a private key or seed phrase.
• Subscription status. Whether you hold an active paid subscription. We never receive or store your payment card details — Apple and Google handle payment.
• App analytics. We use Mixpanel for product analytics. Analytics is linked to your account ID (a pseudonymous Firebase user ID), not your name or email. It records events about how you use features, including your goal settings (not target amounts) and the ETF tickers you track. Mixpanel Session Replay records a sample of sessions, with text and images masked, so we can see where the app is confusing or broken. Analytics is not used for advertising. You can turn off Mixpanel, session replay and crash reporting with "Share usage analytics" on the Profile screen.
• Crash and stability data. Crash traces, device model, OS version and app version. No user identifiers are attached to crash reports.
• Website data. If you visit the Bitcoin Canvas website, we collect standard access information — IP address, browser type, pages visited and timestamps. See Sections 9 and 13 for cookies and website analytics.
• Camera and photo library. If you set or update your profile photo, we request camera and photo library access on your device. This access is used only for that purpose.

What we don't collect

Several of these are unusual for an app in this category:

• No location data. We don't request, collect or infer your location.
• No advertising identifiers. The Android Advertising ID permission is explicitly removed from the build.
• No cross-app or cross-site tracking. We don't track you across other companies' apps or websites, and we don't participate in advertising networks or data brokerages.
• No contacts or microphone access.
• No private keys or seed phrases. We never ask for them, and the app has no facility to accept them.
• No payment card details. Apple and Google handle all billing — we receive subscription status only.

3. HOW WE USE IT

• To create and maintain your account and sign you in
• To display the portfolio, market data and metrics you’ve asked to see
• To operate the AI assistant and editorial features
• To determine which features your subscription unlocks
• To understand which features are used and where the app breaks
• To diagnose crashes and improve stability
• To send notifications you’ve enabled
• To respond to support requests
• To detect abuse, prevent fraud and enforce our Terms

We do not sell your personal information. We do not share it for cross-context behavioural advertising, and we do not use it for advertising of any kind.

4. WHO WE SHARE IT WITH

We also work with service providers who help us build, host and maintain the app. Where any such provider has access to production systems, that access is contractually limited to what’s required to deliver the service and is revoked when it’s no longer needed.

We disclose information where required by law, to protect our rights or the safety of others, and in connection with a merger, acquisition or sale of assets — in which case we’ll notify you.

5. AI FEATURES

Bitcoin Canvas includes AI-generated content and an AI assistant, Penny. The AI model is Google Gemini, which we call through our own data service (see Section 4).

Penny. When you send Penny a message, we send: your message, your first and last name, your persona and experience level, preferred currency and exchange, daily brief frequency, achievement stats, and earlier messages in the conversation for context.

Insights and daily briefs. To personalise these, we send: your first name, personas, currency, topics, interests and subscription tier.

Personalized briefs (Pro). If you choose a personalized brief, we also send summary figures about your Bitcoin: the total BTC you hold, its value in your currency and how that value changed over the past day, week and month; your BTC accumulation goal (target amount, target date and progress); and the names of the public wallets you follow in the app. Free daily briefs do not include any of this. These figures apply from October 26, 2026.

What is not sent: your email address, profile image, individual transactions, wallet addresses or xpubs, exchange names and exchange credentials.

Our AI provider. Google processes these requests under its API terms.

Generated content. Articles and summaries in the news section are produced with AI assistance.

AI output can be wrong. It may be inaccurate, outdated or fabricated. Nothing it produces is financial advice.

6. WHERE YOUR DATA IS HELD

Your data is stored on Google Cloud Platform infrastructure in the United States. Access to production data is limited to personnel in the United States.

7. RETENTION AND DELETION

We keep your account data for as long as your account is open. That includes your profile, transactions, holdings, goals and your conversation history with Penny, which is kept so Penny can refer back to earlier messages. You can clear your conversation history at any time from Penny (Clear conversation) without deleting your account.

Deleting your account. You can delete your account in the app (Profile → Delete account). When you do, we remove your connected exchange keys and watched on-chain wallets immediately and disable your account. After about 30 days we permanently delete everything else: your profile, transactions, goals, assistant conversation history, sign-in account and analytics profile. If you can't get into the app, see how to delete your account.

After your account is deleted, we keep pseudonymized usage events, not linked to your name or email, so we can understand how the app is used over time. They carry only the pseudonymous account ID of the deleted account, and your analytics profile is deleted.

Crash reports, which carry no user identifiers, are retained on our crash reporting provider’s own schedule. Records we must keep for tax, accounting or legal reasons are retained for the period the law requires.

8. SECURITY

We use encryption in transit and at rest, authentication controls and access restrictions on production systems.

Nothing is completely secure. If a breach affects your personal information, we’ll notify you and any required regulator without undue delay.

9. COOKIES AND WEBSITE TRACKING

The Bitcoin Canvas mobile app does not use cookies. It does use Mixpanel for product analytics and session replay, as described in Section 2. You can turn this off with "Share usage analytics" on the Profile screen.

The Bitcoin Canvas website has no accounts or sign-in. It sets analytics cookies only if you allow them: Google Analytics cookies if you allow website analytics, and Microsoft Clarity cookies if you also allow session recordings. Your choice is saved in your browser's local storage for up to 180 days. If you withdraw permission, we stop these tools and delete their cookies. You can also block cookies in your browser settings. Details are in Section 13.

10. YOUR RIGHTS

You can update your profile in the app, clear your Penny conversation history, turn off usage analytics on the Profile screen, delete your account, disable notifications in your device settings, and manage or cancel your subscription through your Apple or Google account.

California (CCPA/CPRA). You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of sale or sharing. We don’t sell or share personal information as those terms are defined, and we won’t discriminate against you for exercising these rights. You may use an authorized agent.

Other US states. Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Texas, Oregon and Montana — have broadly equivalent rights, honoured on the same basis.

Canada (PIPEDA). You may request access to your personal information and challenge its accuracy, and may complain to the Office of the Privacy Commissioner.

How to make a request. Email support@mangosteen.studio. We’ll respond within 30 days. We may need to verify your identity before acting on a request.

If we deny your request. You may appeal by replying to our decision, or by emailing support@mangosteen.studio with “Appeal” in the subject line. We’ll respond within 45 days with our decision and the reasons for it. If we deny your appeal, you may contact your state attorney general to submit a complaint.

11. CHILDREN

Bitcoin Canvas is for adults. You must be 18 or older. We don’t knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we’ll delete it.

12. CHANGES TO THIS POLICY

We may update this Policy. We’ll post the revised version with a new “Last updated” date, and for material changes give notice in the app or by email at least 14 days before it takes effect. Continued use after that date indicates acceptance.

13. WEBSITE ANALYTICS AND COOKIES

With your permission, bitcoincanvas.app uses Google Analytics 4 to measure page visits and App Store or Google Play button clicks. These clicks do not confirm an app installation. Google Analytics uses cookies and processes approximate location, device and browser type, and pages viewed. Google signals and ad personalization are disabled. You may separately allow Microsoft Clarity session recordings to help us understand clicks, scrolling and usability. Clarity uses strict text masking and advertising storage is denied. Optional measurement runs only on the public production website after your choice, never on development or preview versions. Use Privacy choices at the bottom of the page to accept, decline or withdraw permission. Your choice is stored on this device for up to 180 days. Google and Microsoft process data under their respective privacy policies at policies.google.com/privacy and privacy.microsoft.com/privacystatement.

14. CONTACT

Mangosteen Studio, LLC — support@mangosteen.studio