**HivePoly does not collect personal data.**
We do not operate user accounts. We do not collect your name, email address, location, device identifiers, advertising identifiers, or any other information that could identify you as an individual.
Specifically, we confirm:
- No account registration — the app works without any sign-in
- No analytics tied to individuals (TelemetryDeck receives only aggregated, anonymised signal counts)
- No advertising identifiers (IDFA not accessed)
- No location data
- No camera, microphone, or contacts access
- Sign In with Apple is not active in this version — no authentication data is transmitted
The app stores the following data **on your device only**. This data never leaves your device and is not accessible to us.
| Data | Storage | Purpose |
|---|---|---|
| Alert threshold preferences | UserDefaults | Saves your chosen DiverScore alert level |
| Watchlist items | SwiftData (local) | Saves the events you have bookmarked |
| Cached market data | FileManager (local cache) | Reduces network requests; auto-expires after 45 minutes |
| Kalshi API last-fetch timestamp | UserDefaults | Rate-limiting to protect app performance |
**Retention:** All locally stored data is retained until you delete the app. Uninstalling the app removes all locally stored data from your device.
If you purchase a HivePoly Premium subscription, your payment is processed by Apple through the App Store. Apple is the merchant of record. We receive only a non-identifying subscription status confirmation (active / inactive) from Apple. We do not receive your payment card details, Apple ID, or billing address.
Apple's privacy policy: https://www.apple.com/privacy/
We use RevenueCat to manage subscription status. RevenueCat receives an anonymised subscriber identifier and subscription status from Apple. RevenueCat does not receive your name, email, or payment details.
RevenueCat's privacy policy: https://www.revenuecat.com/privacy
RevenueCat is a data processor under a Data Processing Agreement (DPA) with us, as required by GDPR Article 28.
### Polymarket and Kalshi
The app fetches publicly available market probability data from the Polymarket and Kalshi APIs. These are read-only API calls. No user information is sent to Polymarket or Kalshi. No cookies or session tokens are used.
### TelemetryDeck
We use TelemetryDeck for anonymous usage analytics. TelemetryDeck receives aggregated, anonymised signal counts (e.g., "app launched", "feed viewed"). TelemetryDeck is designed to be GDPR-compliant by design — it does not receive personal data or device identifiers.
TelemetryDeck's privacy policy: https://telemetrydeck.com/privacy/
Even though we do not collect personal data, you have the following rights under GDPR Articles 15–22. You may exercise these rights by contacting us at hivepoly.support@gmail.com:
- **Right of access (Art. 15):** Request confirmation of whether we process personal data about you
- **Right to rectification (Art. 16):** Request correction of any inaccurate data
- **Right to erasure (Art. 17):** Request deletion of your data ("right to be forgotten")
- **Right to restriction (Art. 18):** Request that we restrict processing of your data
- **Right to data portability (Art. 20):** Request your data in a machine-readable format
- **Right to object (Art. 21):** Object to processing of your data
- **Right to withdraw consent:** Where processing is based on consent, you may withdraw at any time
Because we do not collect personal data, the practical response to most requests will be confirmation that no personal data is held about you.
We will publish any material changes to this policy at this URL with an updated effective date. We recommend checking this page periodically.
For privacy questions: hivepoly.support@gmail.com