Blitz is a self-custodial mobile trading app. This policy explains what information the app handles, why, and who else touches it. The short version: we never hold your funds or your private keys, we collect the minimum needed to run the app, and we don't sell your data.
1. What we collect
Account identifiers. When you sign in, our authentication provider (Privy) verifies your email address or Google/Apple account and gives you an embedded wallet. We store your user ID, sign-in identifier, and wallet address.
Wallet and trading data. Your wallet address, orders, positions, fills, transfers, and fees are recorded on the Hyperliquid blockchain, which is public by design. We keep copies of this venue data to show your history and reconcile fees.
Push tokens. If you enable notifications, we store your device push token to deliver alerts such as fills and liquidation warnings.
Referral data. If you use or share an invite code, we record the referral relationship to apply discounts and payouts.
Diagnostics. The app reports anonymous-by-content performance measurements (for example, how long an order takes to reach the venue) tied to your account session, used only to keep the app fast and reliable.
2. What we never collect
Private keys. Signing happens on your device. Your keys never reach our servers.
Custody of funds. Your assets sit in your own wallet and on the venue, never with us.
Payment card details. If you buy USDC through the in-app on-ramp, the card flow is handled entirely by Crossmint; we never see your card number or identity documents.
Hyperliquid — the decentralized exchange your orders are sent to. Blockchain data is public.
Crossmint — optional card on-ramp, including any identity checks it requires.
Expo / Apple / Google push services — notification delivery.
Cloud infrastructure (AWS) — where our servers and database run.
Each processes data under its own privacy policy. We share only what each needs to do its job — never for advertising, and we never sell your data.
4. Retention and deletion
We keep account and fee-ledger records while your account exists and as long as needed for accurate fee accounting. To delete your account and the data we hold, email olivier@getblitz.xyz from your sign-in address. Note that blockchain records are public and permanent by nature; deleting your account does not erase on-chain history.
5. Security
Trading keys are generated and stored on your device. Server-side we hold only scoped, non-withdrawing credentials, encrypt data in transit, and restrict production access. No system is perfectly secure — report concerns to the email below.
6. Children
Blitz is not directed at anyone under 18, and we do not knowingly collect data from minors.
7. Changes
We'll update this page when the policy changes and update the effective date above. Material changes will be announced in the app.