Privacy Policy

Effective October 27, 2026 · Applies to chaosless.app and crypto.chaosless.app

This Privacy Policy explains how BrandWorksApp LLC (“we”, “us”) collects, uses and protects personal data in Crypto Journal — a personal journal for crypto portfolios with fiat accounting, available at crypto.chaosless.app and as a mobile app (the “Platform”). It applies together with the Terms of Use.

1Who we are

The Platform is operated by BrandWorksApp LLC, a Florida company. Contact for any privacy question: support@brandworksapp.us.

2Data we collect

Account data: your e-mail address, and your name and profile photo if you sign in with Google or Apple; the language of your device. Passwords are handled by Google Firebase Authentication; we never see or store your password.

Journal data you enter: portfolio names and settings, operations (deposits, buys, sells, transfers, cash-outs, crypto payments) with amounts, prices, fees, fiat amounts and currencies, dates and notes; manual prices, favorite coins and display settings.

Trade import (optional): you can upload a CSV export from Bybit, Binance, OKX, Coinbase or Binance.US, or import spot trades from Coinbase or Binance.US with an API key. The key is used once to read your trades and is never stored. We do not keep exchange keys and cannot trade or move funds.

Wallet addresses (optional): if you add a public BTC, Ethereum (and other EVM networks), Solana, TRON or TON address, we store it and read its public balance from the blockchain. You can also add coins to a wallet manually. We never ask for private keys or seed phrases.

Technical data: Firebase keeps your sign-in session; your device keeps a local copy of recent prices and some settings (language, currencies, open sections); Google Cloud keeps standard server logs (IP address, time, request) for security and troubleshooting.

Usage statistics: for each day you use the Platform we record the number of sessions and minutes spent in it. We use this only to understand how the service is used; it is never sold or used for advertising.

Analytics (only with your consent): if you tap “Accept” in the app or on our website, Google Analytics (Firebase) records anonymous events — screens opened, sign-ins, portfolios created, the type of operation added, the number of imported trades — together with device type, browser and approximate country. It never receives amounts, coins, prices, notes or wallet addresses. Advertising features are off. You can turn it off at any time in Profile → Privacy.

3What we do not do

• We never hold, move or trade your funds. Read-only keys cannot place orders or withdraw.
• We do not sell or “share” personal data for cross-context advertising.
• We do not show ads and do not use advertising SDKs. Analytics works only with your consent.
• We do not take payments in the Platform.

4How we use data

• To sign you in and show your portfolios, balances, average prices and profit and loss.
• To calculate fiat results: how much you put in, took out and earned.
• To read the balances of the wallet addresses you added and to import the trades you choose to import.
• To send service e-mails, such as the welcome e-mail after the first sign-in.

5Legal bases (EEA/UK)

We process data to perform our contract with you (providing the Platform), on our legitimate interests (security, improving the service) and, where required, on your consent, which you can withdraw at any time.

6Service providers

We use trusted providers that process data on our behalf:

• Google LLC — Firebase Authentication, Cloud Firestore, Cloud Functions, Hosting — USA; exchange import requests run on Google Cloud in Frankfurt, Germany.
• Apple Inc. — Sign in with Apple, if you choose it.
• Resend — delivery of service e-mails — USA.
• Google LLC — Google Analytics (Firebase), anonymous usage statistics, only with your consent — USA.
• CoinGecko and Binance public market data — coin prices and charts. They receive no personal data from us; when your device loads a chart directly, they see your IP address like any website.
• Coinbase and Binance.US — when you import trades with an API key, the key is used once to read your spot trades and is not stored.
• Public blockchain data services (mempool.space, PublicNode, Solana public RPC, TronGrid, TON Center) — only the wallet address you added is sent, from our server, to read its balance.

7Retention

Your data is kept while your account exists. When you delete your account, your journal, wallets, usage statistics and profile are deleted immediately, and backups roll over within 30 days, except where we must keep data by law.

8Your rights

Depending on where you live (including California under the CCPA/CPRA and the EEA/UK under the GDPR) you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict processing, and not to be discriminated against for using these rights.

• Export your operations: Operations → Share (CSV).
• Remove a wallet address: Overview → Wallets → ⋯ → Delete.
• Delete your account in the app: Profile → Delete account and all data.
• For any other request write to support@brandworksapp.us. We reply within 30 days.

9Security

Data is transferred over encrypted connections (HTTPS/TLS) and stored on Google Cloud. Security rules let each user read only their own data; exchange keys are encrypted and can be read by our server only.

10Children

The Platform is not intended for anyone under 18. We do not knowingly collect data from children.

11International transfers

Data is stored and processed in the United States, and exchange requests in Germany. Where required, transfers rely on appropriate safeguards offered by our providers.

12Changes

We may update this Policy. The date at the top shows the current version; for significant changes we will notify you in the Platform or by e-mail.

13Contact

support@brandworksapp.us · BrandWorksApp LLC, 700 Siena Palm Dr, Celebration, FL 34747, USA.