Privacy Policy

The short version

• We do not ask for your name, email address, phone number, or date of birth. There is no account signup form.
• Your identity in PRAXIS is your public wallet address, and nothing more.
• Your wallet's private key and recovery phrase never leave your device. No PRAXIS server accepts or stores them.
• We do not sell your data, share it with data brokers, or run advertising or ad-tracking SDKs.
• You can delete everything we hold about you at any time by disconnecting your wallet and asking us to remove the record.

What we collect

We only collect what the product needs to function. Everything below is keyed to your public wallet address.

What we do not collect

• Private keys, seed phrases, or passwords
• Name, email, phone number, or any government identifier
• Precise or approximate location
• Contacts, calendar, photos, camera, microphone, SMS, or call logs
• Health, financial account, or biometric data. Biometric checks in the Android app are performed by Android itself; PRAXIS only receives a pass or fail result and never sees your fingerprint or face data.

Server logs

Our hosting provider records standard request logs, which include IP address, user agent, and requested URL. These are used for security, abuse prevention, and debugging, and are retained on a short rolling window. We do not use them to build user profiles.

Analytics

The website uses Vercel Web Analytics for aggregate page-view counts. It is cookieless and does not track you across other sites. It does not receive your wallet address.

Wallet keys

This is the most important section, so it is stated plainly.

Signing is used only to prove you control the address. If you connect an external wallet instead, PRAXIS never has access to its key material either; your wallet app handles signing and only the resulting signature reaches us.

Notifications

Push notifications are optional. The Android app does not ask for permission on first launch; it asks after your first paper trade, when the feature is actually relevant to you.

If you allow them, we store a Firebase Cloud Messaging device token against your wallet address so we can reach your device. We use it for two things only:

• Profit milestones — when an open paper position reaches 2x, 3x, 5x and beyond
• Price alerts — targets you set yourself on a specific token

We do not send marketing or promotional pushes. Notification content includes the token and the multiple or price reached, which means it may appear on your lock screen; Android notification settings control that.

You can revoke notifications at any time in Android system settings, or turn individual alerts off from the profile page in the app. Revoking permission stops delivery; deleting the app or disconnecting your wallet removes the stored device token.

Third parties

PRAXIS reads live market data, so some requests reach services we do not operate. We share no personal data with any of them; your wallet address is not sent to any third party listed here.

PRAXIS contains no advertising SDKs and no cross-app tracking. We do not sell or rent data, and we do not transfer it to third parties except as needed to deliver the functions above or where legally compelled.

Retention

• Paper portfolio and trade history — kept while your wallet remains active, since the leaderboard is built from it
• Session tokens — expire automatically; disconnecting clears the token from your device immediately
• Push device tokens — removed when you disable notifications, uninstall the app, or when Firebase reports the token as stale
• Price alerts and milestone records — kept until the alert fires or you delete it; milestone records are cleared when the position closes
• Server logs — short rolling retention set by our host

Deleting your data

You have three levels of control, and none of them require contacting us:

Depending on where you live you may also have rights to access, correct, or export your data, and to object to processing. The same contact route covers those requests. Because we hold no identity data beyond a wallet address, proving control of the address by signing a message is how we verify a request.

Security

All traffic is encrypted in transit over HTTPS. Session tokens are signed and expiring rather than long-lived secrets. On Android, key material sits in the Keystore and is excluded from backup, and revealing a recovery phrase or signing requires passing a device biometric or lock-screen check.

No system is perfect. If you find a vulnerability, please report it privately to the contact below rather than disclosing it publicly, and we will work with you on it.

Children

PRAXIS is not directed at children and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a minor has used the product, contact us and we will delete the associated records.

Changes to this policy

If this policy changes materially, we will update the date at the top and announce it on @praxisonpons. Continued use after a change means you accept the updated policy. We will not retroactively broaden how we use data already collected without asking first.

Contact

For privacy questions, data deletion requests, or security reports:

• X: @praxisonpons
• Email: privacy@trypraxis.fun

A reminder, since it is the single most consequential fact in this document: PRAXIS trades simulated funds only, and nobody at PRAXIS can ever ask you for your recovery phrase.