Privacy Policy

Market Mirror ("we," "our," or "us") operates the Market Mirror mobile application and website located at marketmirror.com (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address and authentication credentials. We support sign-in through third-party providers (Google, Apple) and collect only the information those providers share with your consent.
• Profile Information: Display name, profile photo, and any bio information you choose to provide.
• Community Content: Posts, comments, direct messages, and group chat messages you submit through the community features.
• Wallet Addresses: Public blockchain wallet addresses you voluntarily enter for portfolio tracking. We do not collect or store private keys, seed phrases, or passwords to any cryptocurrency wallet.
• Waitlist Information: Email addresses submitted through our pre-launch waitlist form.
• Support Communications: Information you provide when contacting us for support or feedback.

1.2 Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
• Usage Data: Pages viewed, features used, time spent in the app, crash reports, and performance data.
• Log Data: IP address, browser type, access times, and referring URLs.
• Push Notification Tokens: Device tokens used to deliver push notifications when you opt in.

1.3 Information We Do NOT Collect

• Private keys, seed phrases, or wallet passwords
• Social Security numbers or government-issued ID numbers
• Bank account or credit card information
• Biometric data
• Precise GPS location data

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To operate and maintain the app, display portfolio data, deliver market analytics, whale tracking, liquidation maps, and sentiment analysis.
• Authentication & Security: To verify your identity, protect your account, and prevent fraud or abuse.
• Community Features: To enable posting, messaging, group chats, and social interactions within the app.
• Notifications: To send push notifications about whale alerts, price movements, DMs, and other events you've opted into.
• Improvements: To analyze usage patterns, diagnose technical issues, and improve the Service.
• Communications: To respond to your inquiries, send service-related announcements, and (with your consent) marketing communications.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Data Sharing & Third-Party Services

We do not sell your personal information. We share data with third parties only as described below:

3.1 Service Providers

We use the following categories of service providers to operate the Service:

• Firebase (Google): Authentication, cloud database, and push notification delivery. Subject to Google's Privacy Policy.
• Market Data Providers: CoinGlass, CoinGecko, and similar APIs to provide real-time cryptocurrency market data, whale tracking, and liquidation information. These providers receive API requests from our servers — they do not receive your personal data.
• Blockchain Data Providers: Moralis, Helius, and Blockchair to retrieve publicly available on-chain data for wallet addresses you provide. Only the public wallet address is sent — no personal identifiers are attached.
• Hosting & Infrastructure: Cloud hosting providers for server infrastructure and data storage.

3.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Market Mirror, our users, or the public.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

4. Blockchain & Wallet Data

Market Mirror provides portfolio tracking by reading publicly available blockchain data. Important disclosures:

• All blockchain data we access is already publicly available on the respective blockchain networks.
• We only process the public wallet addresses you voluntarily provide.
• We do not have access to, and never request, your private keys, seed phrases, or wallet passwords.
• We do not execute, facilitate, or broker any cryptocurrency transactions.
• We are a data visualization and analytics tool — not a wallet, exchange, or financial custodian.
• Wallet balance and transaction data is cached temporarily on our servers to improve performance and reduce API calls. This cached data is automatically purged on a regular basis.

5. Data Storage & Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• JWT-based authentication with secure token handling
• Rate limiting and CORS restrictions on API endpoints
• Content Security Policy (CSP) headers to prevent injection attacks
• Input sanitization and parameterized database queries
• Regular security audits and vulnerability assessments

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Account data: Retained until you delete your account.
• Community content: Retained until you delete it or your account is deleted.
• Cached wallet data: Automatically purged within 24 hours.
• Usage analytics: Retained in aggregated, anonymized form.
• Server logs: Retained for up to 90 days for security and debugging purposes.

7. Your Rights & Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request your data in a structured, machine-readable format.
• Opt-Out of Notifications: Manage or disable push notifications through your device settings or in-app preferences.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time using the link in any marketing email.

To exercise any of these rights, contact us at privacy@marketmirror.com. We will respond within 30 days.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@marketmirror.com. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place for such transfers.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at privacy@marketmirror.com.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the rights to access, rectification, erasure, restriction of processing, data portability, and the right to object. Our legal basis for processing personal data includes your consent, contractual necessity, and our legitimate interests in operating and improving the Service.

12. Push Notifications

With your permission, we may send push notifications about whale alerts, price movements, market pulse changes, direct messages, and community activity. You can manage notification preferences within the app's settings or disable them entirely through your device's system settings. Notification delivery requires a device token, which we store securely and use solely for notification delivery.

13. Cookies & Tracking Technologies

Our website may use cookies and similar technologies to improve your experience. We use:

• Essential cookies: Required for authentication and basic functionality.
• Analytics: To understand how the Service is used and improve performance.

We do not use third-party advertising cookies or cross-site tracking. You can control cookies through your browser settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date, and where appropriate, through in-app notifications or email. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@marketmirror.com
• Website: marketmirror.com