Privacy Policy

1. Who we are and scope

BLYPO is operated by FLAP SIGMA TECHNOLOGY LIMITED (符號擺動技術有限公司), Hong Kong. This policy covers the BLYPO mobile app, blypo.xyz and our related account, trading and support services. It replaces the previous website-only privacy notice.

This policy explains our handling of information. External services and public networks may also process information under their own policies when you use them through BLYPO.

2. Information we process

Account and login: your email address is processed by Privy to send login codes and authenticate you. We process authentication tokens, your Privy user identifier, account status and account creation and login timestamps to provide and secure your account.

Wallet and trading: wallet addresses and identifiers, wallet authorizations, balances, positions, orders, fills, fees, transaction hashes, and deposit and withdrawal details. Depending on the operation, we receive this information from you, wallet providers, Hyperliquid or public networks. Funding instructions can include amounts, networks, assets, recipient and refund addresses, quotes and provider request identifiers.

Preferences: your watchlist, language, appearance and other app preferences. Some preferences and cached account data are stored on your device; account features such as watchlists are also stored by our backend.

Technical and usage information: IP addresses and request metadata needed to deliver and protect services; app and operating system information, error reports and performance data; and limited usage events described below. If you contact us, we receive your email address and the information you include.

3. Why we use information

We use information to authenticate you, connect your wallet, show markets and account activity, submit and track actions you request, synchronize account features, and respond to support enquiries. We also use relevant information to diagnose failures, improve usability and reliability, prevent misuse and duplicate requests, resolve disputes, and meet applicable legal obligations.

Where applicable law requires consent, we seek it for the relevant processing. Depending on the activity and applicable law, processing may also be necessary to provide the services you request, comply with legal obligations, or protect legitimate interests in service security and reliability.

4. Wallets, authorizations and public networks

BLYPO uses Privy for embedded wallet functionality. Signing operations use wallet software and authorization mechanisms. The app also stores a trading agent key on your device using operating-system secure storage to sign authorized trading actions. Do not send private keys, recovery phrases, login codes or authentication tokens to our support team.

Wallet addresses and activity published to public networks can be visible to others and linked to other information. Public blockchain records generally cannot be changed or deleted by BLYPO. Deleting an account or uninstalling the app does not reverse transactions, close positions, transfer funds or necessarily revoke existing authorizations. Manage your positions, funds and authorizations before discontinuing use.

5. Service providers and disclosures

Privy provides login and embedded wallet services and processes the login, account, device and wallet information needed for those services. Hyperliquid receives wallet addresses, account queries and signed trading or account actions needed to provide market, account and execution services. Relay processes relevant wallet addresses, networks, assets, amounts, quotes and signed requests when you use supported funding routes.

PostHog provides limited product analytics, and Sentry provides error and performance monitoring as described below. Vercel provides website and backend hosting. Database, network infrastructure and email providers process information needed to store account records, deliver requests and handle correspondence.

We share information needed for these purposes and require service providers handling information on our behalf to protect it consistently with this policy and applicable law. Public protocols and services you use directly may act independently and apply their own privacy policies. We may also disclose information when legally required, to protect rights and security, or in connection with a corporate transaction subject to appropriate confidentiality and data protection safeguards. We do not sell your personal information.

6. Analytics, diagnostics and local storage

In configured production versions, PostHog receives selected screen-view, language-change and appearance-change events, with platform, language and theme context and an SDK-generated identifier. Our event definitions do not include your email address, wallet address, order details or trading amounts. Session replay and location enrichment are disabled in this integration.

In configured production versions, Sentry receives crash, error and sampled performance information. Our integration disables screenshots and view-hierarchy capture and removes user, request, breadcrumb and extra fields from outgoing events. Technical metadata may still be processed by providers to deliver their services.

The app uses local storage and secure storage for preferences, sessions, caches and trading authorization information. The current informational website does not include advertising scripts or analytics cookies. Website hosting still processes technical requests, including IP and browser information. This policy page does not load third-party scripts.

7. Retention and deletion

We retain account records and preferences as needed to provide an active account. Funding instructions, security and audit records, support correspondence and diagnostic information are retained for the periods needed for their purposes, including resolving transactions or disputes, preventing abuse and meeting applicable legal obligations. Retention depends on the data type, account status, provider settings and applicable requirements; it is not a promise of a single fixed deletion period.

You can request account or personal-data deletion at ruby@blypo.xyz. We may need to verify your identity. We will assess and process the request under applicable law, delete or de-identify information that is no longer needed, and explain any information we must retain and why. Copies in backups may remain until the relevant backup lifecycle ends. Public network records and information independently held by other services are outside our ability to erase.

8. Your choices and requests

Contact ruby@blypo.xyz to request access, correction or deletion, or to raise questions about analytics or other processing. Depending on applicable law, you may also have rights to object, restrict processing, receive a portable copy, withdraw consent or complain to a competent privacy authority. Withdrawal does not affect processing already lawfully carried out. We will explain the options available and any effect on services you request.

You can change language and appearance in the app and manage permissions through your device settings. Logging out or uninstalling the app is not an account-deletion request and does not itself erase server records.

9. International processing and security

We operate from Hong Kong and use service providers that may process information in other locations, including Singapore and the United States. Applicable privacy laws can differ from those in your location. Where required, we use appropriate contractual and other safeguards for international transfers.

We use measures such as encrypted network connections, access controls and device secure storage for relevant credentials. No system is completely secure. Keep your device and account access secure and contact us if you suspect unauthorized access.

10. Age requirements

BLYPO is intended for people aged 18 or older and is not directed to children. If you believe a person under 18 has provided personal information to us, contact ruby@blypo.xyz so that we can investigate and take appropriate action. This statement does not mean that the app verifies every user's age.

11. Policy updates and contact

We may update this policy as our services or information practices change. The current version and effective date will be published on this page. Where required, we will provide additional notice or obtain consent for material changes.

For privacy questions and requests, contact FLAP SIGMA TECHNOLOGY LIMITED (符號擺動技術有限公司), Hong Kong, at ruby@blypo.xyz. This policy is available in English, Traditional Chinese and Simplified Chinese.