Privacy Policy

1. Who we are

Blockto ("we", "us") operates the Blockto mobile app and blockto.io ("the Service"), registered in the Netherlands. Data Protection contact: privacy@blockto.io

2. What data we collect

Account data: email address and authentication details, and (optionally) the display name and profile picture you provide when you register. Accounts are optional and used to sync your watchlist and saved articles.

Usage data: pages visited, articles saved, watchlist coins, reading progress.

Notification data: when you enable alerts in the mobile app, a device push notification token, used only to deliver breaking-news and price notifications.

Technical data: IP address, browser type, device type, cookie identifiers.

We do NOT collect financial data, payment information, government IDs, your phone number, precise location, contacts, or device photo library, and we do not use advertising identifiers.

3. How we use your data

To provide the Blockto service (account, saved articles, watchlist).

To send our daily market brief (if subscribed — unsubscribe at any time).

To measure and improve the platform using analytics (see section 4).

To maintain security.

We do not sell your personal data to third parties.

4. Analytics & service providers

Our web content uses Google Analytics to measure usage and improve the Service. This runs on our website and inside the app's in-app content views.

We rely on the following providers, who process data only to provide their service to us: Supabase (authentication & data storage), Expo and Google Firebase Cloud Messaging (push notification delivery), Google Analytics (usage measurement), and WordPress (news content delivery).

All data is transmitted over encrypted (TLS) connections.

5. Legal basis (GDPR)

Processing is based on: (a) contract performance — providing the service you signed up for; (b) legitimate interest — platform security, abuse prevention, and analytics; (c) consent — newsletter subscription.

6. Data storage & retention

User data is stored in the EU (Supabase Frankfurt region), encrypted at rest and in transit. Backups are retained for 30 days. We keep account data while your account is active; push tokens are removed when you disable notifications or uninstall the app.

7. Deleting your account & data

You can permanently delete your account and all associated data at any time, directly in the app: Menu → My Profile → "Danger Zone" → Delete account.

You can also request deletion by emailing privacy@blockto.io. Deletion removes your account and the data associated with it.

8. Your rights

Under GDPR you have the right to: access your data, correct inaccurate data, delete your account and associated data (see section 7), export your data (portability), object to processing, and withdraw consent at any time.

To exercise these rights: privacy@blockto.io. We respond within 30 days.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect data from them.

10. Cookies

See our Cookie Policy for details on how we use cookies and how to manage them.

11. Changes

We may update this policy. Material changes will be notified by email or in-app notification, with a new "Last updated" date. Continued use of Blockto after notification constitutes acceptance.