Privacy Policy

At Blocnet ("we", "us", "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform, mobile application, and services.

As a Web3 platform, we prioritize data minimization, user sovereignty, and decentralization. We collect only what is necessary to provide our services and give you control over your data.

2.1 Information You Provide

• Account Information: Email address (optional), username, profile picture
• Authentication Data: Login credentials through Supabase authentication
• User Content: Updates, comments, gem submissions, tips, and other content you create
• Preferences: Followed gems, notification settings, display preferences

2.2 Blockchain and Wallet Data

• Wallet Addresses: The deposit addresses we create for you and the withdrawal addresses you enter
• Transaction Data: On-chain transaction history (publicly visible on blockchain)
• Mining Activity: Mining cycles, rewards earned, referral network data
• Wallet Balances: Your balances, deposits, withdrawals, transfers and tips, recorded in our ledger
• Identity Verification (KYC): If you verify your identity for wallet limits: full name, country, document type, the last four digits of the document number and the document image you upload

2.3 Automatically Collected Information

• Device Information: Device type, operating system, browser type, mobile app version
• Usage Data: Features used, time spent, interactions, navigation patterns
• Analytics: Aggregated and anonymized usage statistics
• Device Tokens: Push notification tokens (with your consent)
• IP Address: For security, fraud prevention, and geo-location (not stored long-term)

2.4 Information We DO NOT Collect

• Private keys, seed phrases, or wallet passwords
• Social security numbers or full government ID numbers (identity verification stores only the document type, the last four digits and the document image you upload)
• Banking or credit card information
• Detailed personal financial records

We use your information to:

• Provide Services: Enable account creation, mining, wallet functionality, and platform features
• Communications: Send notifications about updates, mining cycles, comments, and important announcements
• Security: Detect fraud, prevent abuse, ensure platform integrity
• Improvement: Analyze usage patterns to enhance features and user experience
• Compliance: Meet legal obligations and enforce our Terms of Service
• Support: Respond to inquiries, troubleshoot issues, provide customer assistance

4.1 We DO NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 When We Share Information

• Public Blockchain: Wallet addresses and transactions are public on BNB Smart Chain
• Service Providers: Trusted third-party services (hosting, analytics, authentication) under strict data protection agreements
• Community Content: Updates, comments, and profiles are visible to other users as intended by the platform
• Legal Requirements: When required by law, court order, or to protect rights and safety
• Business Transfers: In the event of merger, acquisition, or sale of assets (with user notification)
• With Your Consent: Any other sharing will require your explicit consent

4.3 Third-Party Services

We integrate with third-party services including:

• Supabase (authentication and database hosting)
• BNB Smart Chain network
• Analytics providers (anonymized data)
• Cloud infrastructure providers

These providers have their own privacy policies and data practices.

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication through Supabase with JWT tokens
• Regular security audits and vulnerability assessments
• Access controls and least-privilege principles
• Wallet keys held by a dedicated key-management provider (Turnkey), never on our application servers
• Secure cloud infrastructure with reputable providers

However, no system is 100% secure. You are responsible for safeguarding your sign-in credentials. We are not liable for losses due to compromised user credentials.

We retain your data for as long as necessary to provide services and comply with legal obligations:

• Account Data: Until you delete your account or request deletion
• Blockchain Data: Permanently recorded on public blockchain (immutable)
• Logs and Analytics: Typically 90 days, anonymized data may be retained longer
• Legal Compliance: Longer retention if required by law or ongoing disputes

After account deletion, some data may remain in backups for a limited period or as required by law. See Delete your account for exactly what is deleted and what is kept.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data we hold
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and associated data in the app under Profile › Settings › Delete account, or by email (subject to legal obligations). How to delete your account
• Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications and disable push notifications
• Object: Object to certain data processing activities
• Withdraw Consent: Revoke previously granted consent

To exercise these rights, contact us at blocnetapp@gmail.com. We will respond within 30 days.

Note: Blockchain data cannot be deleted due to its immutable nature.

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: To understand usage patterns (anonymized)
• Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may impact platform functionality.

As a global platform, your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Data processing agreements with service providers
• Compliance with GDPR, CCPA, and other privacy regulations

Our Services are not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover that a child has provided personal data, we will delete it immediately.

Parents or guardians who believe their child has provided information should contact us at blocnetapp@gmail.com.

11.1 Blockchain Transparency

Blockchain transactions are public and permanent. Wallet addresses, token transfers, and smart contract interactions are visible to anyone. Do not share sensitive information in on-chain transactions.

11.2 Pseudonymity

While wallet addresses are pseudonymous, they can potentially be linked to your identity through various means (KYC, IP addresses, transaction patterns). Consider privacy best practices when using blockchain services.

11.3 Custodial Wallet

The Blocnet wallet is custodial: we hold wallet keys through our key-management provider and keep a ledger of your balances, deposits, withdrawals and transfers. We keep these records as long as the law requires, including after account deletion. Transactions confirmed on a blockchain cannot be reversed.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through:

• In-app notifications
• Email announcements
• Website banner or notice

Continued use of the Services after changes constitutes acceptance of the updated Privacy Policy. The "Last Updated" date at the top of this page indicates when changes were made.

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

14.1 GDPR (European Users)

If you are located in the European Economic Area (EEA), you have specific rights under the General Data Protection Regulation (GDPR), including access, rectification, erasure, restriction, portability, and the right to lodge a complaint with a supervisory authority.

14.2 CCPA (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, sold, or disclosed, and the right to opt-out of the sale of personal information.

Note: We do not sell personal information.