Privacy Policy

Who we are

The Chad App ("we", "us") is a memecoin research and trading app on Solana and Robinhood Chain, operated by The Chad App. This policy covers the website at thechadapp.com (and its old address, trenchos.xyz) and Chad App for iPhone and Android, which opens the same site. It explains what we collect, why, who else handles it, and how to have it deleted.

Most of Chad App is a private beta for members. One tool, Copy Influence, is open to anyone on the website: a public account ("Copy account") can copy the trades of well-known Solana traders, or of other wallets it picks, from its own wallet, and nothing else. This policy covers both kinds of account; where something applies to only one, it says so.

What we collect

Your Account

• Email address and password. You sign up with an email and a password. The password is stored only as a one-way hash, never in readable form.
• Your name on the desk. The handle other members see, and the invite you joined with.
• Copy accounts. The handle you pick, that you confirmed you are 18 or older, which version of the Terms you accepted and when, and whether you confirmed your email with the 6-digit code we sent. For a sign-up on the website, a security check by Cloudflare Turnstile runs in your browser first.
• Profile picture, if you add one. It is shrunk to a small square on your device before it is uploaded.

Your Wallets

• Public wallet addresses on Solana and Robinhood Chain, and the id of your wallet at our wallet provider, Turnkey.
• Passkey public keys. When you approve with a passkey (Face ID, fingerprint or your device PIN), your device keeps the private half. We and Turnkey only see the public half, which is enough to check an approval. Your face or fingerprint never leaves your device.
• We do not store your wallet's private keys. See "How your wallet works" below.

What You Do in the App

• Copies. Which traders and wallets you copy, the limits you set (amount per copy, daily limit, speed and the rest), and every buy, sell and skip a copy made, with its result and the fees it paid.
• Your trades, withdrawals and the transaction ids they produced; exit orders (stop loss, take profit and similar) you set; your profit split setting, if you turn it on; and an hourly snapshot of your wallet's value for your portfolio chart.
• Requests to join the beta. If you ask to join the full beta from a Copy account, your request, when you made it, and any short note you add.
• Your watches, phone alert settings, notifications, recent coin searches and Settings choices.
• Messages. Your conversations with Chad, the app's AI agent, and what you post in crew rooms, calls and the Hangout.
• Reports and blocks. If you report a crew message or one of Chad's answers, we keep your report, the reason and note you gave, and a copy of the reported text so the owner can review it. If you block a member, we keep that so their messages stay hidden for you.

Voice

• When you start a live voice conversation with Chad, your microphone audio is streamed directly from your device to xAI, which runs the voice model, and the written transcript is saved in your chat history. Audio is only sent while the voice conversation is on.
• When you join a crew voice room, your audio is sent live to the other people in that room through LiveKit, our voice-room provider. We do not record voice rooms.
• Some voice features use your device's or browser's built-in speech recognition, which is handled by your device's maker under its own privacy terms.

Phone Alerts

• If you turn on phone alerts, we store your device's push token (an address for notifications, not a password) so we can send alerts to that phone.

Technical Data

• A sign-in cookie that keeps you signed in. Some preferences are kept only in your browser's local storage on your device.
• Our hosting provider keeps standard server logs, such as IP address, time and the page requested, to run and protect the service.
• Device and browser. The type of device, operating system and browser (or which Chad App phone app) your requests come from, as your browser or app sends them, so pages fit your screen and we can fix problems.
• Your country. Our host tells us the country (and for some countries the state or region) your connection comes from, worked out from your IP address. For Copy accounts we keep it with your account when you sign up, turn a copy on or open your wallet, because Copy Influence is closed in places under US sanctions and in places we can't tell. While your account was last seen in such a place, copies don't buy.
• Sign-up address, scrambled. When you make a Copy account we keep a scrambled (salted, one-way) form of the IP address it came from, never the address itself, so one connection can't make many accounts a day.

We do not use advertising or ad tracking, and we do not collect your precise location or your contacts.

Website analytics. On the website only (not the phone apps) we use Vercel Web Analytics and Speed Insights to count page visits and measure page speed. They set no cookies. They see the page, the site that linked you, country, device type, browser and any campaign tags in the link, identify a visit with a short-lived hashed value rather than your IP address, and don't follow you across other sites. We also count a few button presses, such as starting a copy or making an account, without your wallet or email.

How your wallet works

Your wallet's keys are created and held by Turnkey in secure hardware. The wallet belongs to you: a trade you make yourself, and every withdrawal or send you start, needs your approval with your passkey on your device.

A few optional features let something act for you, with no tap, within limits you turn on:

• Copy Influence and Auto-Trade. Copies (and, for members, Auto-Trade) trade from one wallet of yours, the Auto-Trade wallet. When you turn them on, you approve a limited trading key for that wallet. A Turnkey policy only lets that key make swaps from that one wallet, up to a set amount per buy, and pay Chad App's fee from those swaps; it can't send your money anywhere else. With it, copies buy and sell on their own, with no tap from you, inside the limits you set and ours (for Copy accounts, 0.25 to 1 SOL a copy and 5 SOL a day). Its secret part is stored encrypted on our server. You can stop any time, and turning the key off revokes it.
• Exit orders. If you turn them on, you approve a limited helper key for your wallet. A Turnkey policy only lets that key make swaps from your own wallet, so your stop loss and take profit orders can run while you are away. Its secret part is stored encrypted on our server. You can turn it off, which revokes the key.
• Profit split. If you turn it on, after a sell that closes in profit the share you chose is sent, in SOL, to the one wallet address you entered.

You can export your wallet's private key at any time. The key is encrypted to Turnkey's secure export window and shown only on your screen; our server never sees it.

Trades go through public blockchains. A transaction is public and permanent: anyone can see it on the chain, and nobody, including us, can delete it.

How we use it

• To run your account, show your wallet, portfolio and history, and carry out the trades you approve.
• To show your handle, picture, calls, watches and messages to the other members of your crew.
• To run the copies you turned on: watch the traders you picked and buy and sell for you within your limits.
• If you ask to join the full beta from a Copy account, Robert holders who can invite people see your handle, any note you added, and a copy activity score with what it is made of: days active, traders copied, copies on, whether your wallet is funded and how many trades paid a fee. Never your email, your balance or your profit. Nobody sees this unless you ask to join.
• To keep Copy Influence within the law: the age and Terms you confirmed, and the country check above.
• To answer you as Chad, by text or voice.
• To send the alerts you asked for.
• To keep the service secure and fix problems.

We do not sell your personal data, we do not share it for advertising, and we do not use it for advertising.

Who else handles it

We use these providers to run Chad App. Each gets only what it needs for its job:

• Vercel: hosts the app and its server, can route Chad's AI requests, and runs our website analytics.
• Neon: our database, where your account and app data are stored.
• Turnkey: creates and secures your wallet keys and checks your passkey approvals. We give Turnkey your account id, and your email address only where your wallet uses Turnkey's own email code to unlock.
• AI providers: xAI (Grok), and Moonshot (Kimi) as a backup, receive the messages and voice you send to Chad so they can answer. xAI and ElevenLabs receive the text of Chad's replies to turn into speech.
• LiveKit: carries crew voice rooms.
• Cloudflare: runs the Turnstile check on website sign-ups. It sees your browser and IP address for that check.
• Resend: sends our emails, such as password reset links and sign-up codes, to your email address.
• Apple and Google push services: deliver phone alerts to your device.
• Blockchain and market data services, such as Helius, public Solana and Robinhood Chain nodes, Blockscout, Jupiter, pump.fun, RugCheck, DEX Screener and GeckoTerminal. They receive public wallet and coin addresses to read balances, prices and coin checks, and to build the swaps you approve.

We do not sell your personal data. We may also share information if the law requires it, or to protect our members and the service.

Security

All traffic to Chad App is encrypted in transit (HTTPS). Passwords are hashed, and the exit order helper key and the trading key are stored encrypted and can only swap from your own wallet; you can revoke them at any time. Your wallet's private keys stay with Turnkey, never on our servers. No system is perfectly secure, so please keep your passkey devices and password safe, and tell us at once if you think your account was used by someone else.

Deleting your data and your account

You can ask us to delete your account and the data tied to it at any time. In the app, go to Settings, then Account, then "Delete account". Or email 0xfxnction@gmail.com from the address you signed up with, with the subject "Delete my account". We will confirm and complete the deletion within 30 days.

Before you ask: withdraw your funds or export your private key. Once your account is deleted we can no longer show you that wallet or help you reach it.

What is deleted: your account, email, password hash, handle, profile picture, chats with Chad, crew messages, watches, alerts, push tokens, orders, copies, reports, blocks and settings, and your exit order helper key and trading key are revoked. What stays: transactions already on a blockchain, which are public and cannot be removed, and records we must keep by law or to prevent fraud, kept only as long as needed.

You can also clear the data kept in your browser at any time from Settings.

How long we keep it

• Your account and app data: while your account is open. When you ask us to delete your account, it is deleted within 30 days (see above).
• Server logs: a short time, by our hosting provider.
• Records we must keep by law, or to prevent fraud and abuse (such as the scrambled sign-up address and the Terms you accepted): only as long as needed for that.
• Blockchain transactions are public and permanent; nobody can delete them.

Children

Chad App is for adults. Do not use it if you are under 18. We do not knowingly collect data from anyone under 18; if we learn we have, we close and delete the account.

Your choices and rights

You can see and change most of your data in the app. Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal data, or to object to how we use it. Email 0xfxnction@gmail.com and we will help.

Changes

If we change this policy, we will update this page and the date at the top. If a change is significant, we will tell you in the app.

Contact

Questions about privacy: 0xfxnction@gmail.com.