Privacy Policy

Who is responsible

[LEGAL ENTITY NAME], [REGISTERED ADDRESS] (“Levra”, “we”) is the controller of the personal data described here. Contact us at [SUPPORT EMAIL] [and our data protection contact at [DPO EMAIL]].

What we collect

Account and identity

• Sign-in identifiers from Google, Apple or email (for example, your email address and a provider account ID), handled through our authentication provider.
• Your chosen display name or username.
• Session data: refresh tokens (stored in your device's secure keychain, never in plain storage), session records, and the time and device of sign-in.

Wallet

• The public address of your embedded wallet. Private keys are held by our wallet provider's secure infrastructure and encrypted to your device on export. Levra does not store or have access to your private key.

Trading and account activity

• Orders, fills, positions, balances, ledger entries (fees, funding, realised P&L), and the audit trail of order events, for both paper and real accounts.
• Watchlists, price and funding alerts, and your notification history and settings.
• Competition entries, rankings and leaderboard participation.

Usage, device and attribution

• Product events (for example, screens viewed, onboarding steps completed, orders started and completed), linked to an anonymous identifier before you sign in and to your account afterwards.
• How you found Levra: referral codes, UTM parameters and referring site, captured on your first visit.
• Device and technical data such as device type, operating system, app version, language, approximate location from your IP address, and IP address.
• Crash and error reports and performance data.
• Push notification tokens, if you allow notifications, so we can send alerts you have asked for.

Communications

• Messages you send to support, and our replies.

Data from the blockchain

Activity on Hyperliquid and its blockchain is public. We read public venue data linked to your wallet address to show your real positions, balances and fills.

How we use your data

• To provide the Service — sign you in, run paper and real trading, show your portfolio, send alerts, run competitions. (Contract.)
• To keep Levra safe and lawful — detect fraud, abuse and duplicate accounts, enforce our terms, meet legal and sanctions obligations, keep audit records. (Legitimate interests; legal obligation.)
• To improve the product — understand what works, fix errors, measure how people find and use Levra. (Legitimate interests, or consent where the law requires it.)
• To communicate — service messages, security notices and, where you have agreed or the law allows, product updates. You can opt out of marketing at any time.

We do not use your data for automated decisions that have legal or similarly significant effects on you.

Who we share it with

We share data only as needed, with:

• Authentication and wallet provider (Privy), which handles sign-in and embedded wallets.
• Trading venue (Hyperliquid), which receives the orders you choose to place. Anything sent to the venue is processed under its own terms and is public on-chain.
• Infrastructure and hosting providers for servers, databases, caching, email and delivery of notifications (Apple and Google for push).
• Error monitoring (Sentry), which receives crash and performance data.
• Professional advisers, auditors and authorities where required by law or to protect our rights.
• A buyer or successor if Levra is sold or reorganised, subject to this policy.

We do not sell your personal data. Competition leaderboards show your display name and return to other users.

International transfers

Our providers may process data outside your country. Where required, we rely on safeguards such as standard contractual clauses or adequacy decisions to protect it.

How long we keep it

We keep account data while your account is open. Trading records, ledger entries and audit logs are kept as records of what happened and for the period required by law and for dispute resolution, and are not deleted on request while such a need applies. Usage and error data is kept for a limited period, then deleted or anonymised. We keep support messages for as long as needed to help you and resolve related issues.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to some processing, receive a portable copy, withdraw consent, and complain to your data protection authority. To use these, contact [SUPPORT EMAIL]. We may need to verify your identity first, and some records must be kept by law. Deleting your account does not remove public blockchain data.

California residents: you may have the right to know, delete and correct personal information, and to opt out of its sale or sharing. We do not sell personal information or share it for cross-context behavioural advertising.

Cookies and similar technologies

The website uses cookies and local storage to keep you signed in, remember preferences and record how you arrived (referral and campaign parameters), and to measure usage. The apps use equivalent on-device storage. You can clear or block these in your browser settings, though parts of the Service may then not work.

Security

We use encryption in transit, keep sign-in tokens in your device's secure keychain, limit staff access to data, and separate the systems that handle signing from the rest of our stack. No system is perfectly secure, and you are responsible for keeping your own devices and sign-in methods safe. If a breach affects you, we will tell you and the authorities as the law requires.

Children

Levra is not for anyone under 18 and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.

Changes to this policy

We may update this policy. If a change is material we will tell you in the app or by email before it takes effect. The date at the top shows the latest version.

Contact

Privacy questions and requests: [SUPPORT EMAIL].