Privacy Policy

[LEGAL ENTITY NAME — e.g. Pemp Ltd, or your full legal name] operates Pemp. For privacy questions or requests, contact [CONTACT EMAIL — e.g. legal@pemp.fun].

Depending on how you use the Service, we hold:

• Account identity. If you sign in, we store a pseudonymous account identifier from our wallet provider, the login method you used (email, Google, or X), and your email address when you sign in with email. We do not receive or store your Google or X password.
• Wallet address. The public address of the Solana wallet created for you or linked by you. A public address is, by itself, publicly visible on the blockchain.
• Activity. Practice balances, positions, and your trade history inside the Service, plus the transaction signatures of any live trades we record. Signature and transaction data is public on-chain.
• Technical data. Your IP address and basic request metadata, processed transiently for rate limiting and abuse prevention, plus error logs.
• A session cookie. If you visit without signing in, a first-party cookie holds a random anonymous identifier so that anything you do — likes, comments, uploads — stays attached to you until you log in. See section 5.

We never receive, store, transmit, or have the ability to derive your private key or recovery material. Wallet creation and signing happen inside our wallet provider's isolated environment. Our servers construct unsigned transactions and receive back only a public key and a signature. We cannot access, move, or freeze your funds.

We also do not collect your name, postal address, government identifiers, or payment card details. If you buy crypto with a card, that is handled entirely by the wallet provider's payment partner; card data never reaches us.

• to create and secure your account and wallet, and keep you signed in;
• to record the trades you make, and to store the clips, likes and comments you create;
• to build the unsigned transactions you ask for, and verify on-chain that they settled;
• to show balances, positions, and market context;
• to rate limit, prevent abuse, and debug failures;
• to comply with legal obligations we are actually subject to.

We do not sell your personal data, and we do not use it for advertising or behavioural profiling.

We use a first-party cookie only to keep you signed in or to keep anything you did anonymously attached to you. It is not used for tracking or advertising. Blocking it will break sign-in and anonymous attribution. Signing out clears the session server-side.

Your wallet provider sets its own storage inside their sandboxed window. Their handling of it is governed by their privacy policy, not this one.

We use a small number of processors to run the Service:

• Wallet & authentication provider — creates your embedded wallet, holds key material we cannot access, and handles sign-in.
• Hosting & database providers — serve the app and store the account and activity records described above.
• Swap routing and liquidity venues — receive the public details needed to build your swap (your public key, the mint, and the amount).
• Blockchain RPC and market-data providers — receive public addresses and mints to read balances, prices, and transaction status.

These providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

Solana is a public, permanent ledger. Any transaction you sign — including its amount, counterparties, and the fact that it came from your address — is visible to anyone, forever, and cannot be deleted by us or anyone else. Treat your wallet address as public information and do not link it to your real-world identity unless you intend that.

We keep account and activity records for as long as your account exists, and afterwards only as long as needed for the purposes above, to resolve disputes, or to meet legal obligations. Rate-limiting and error data is short-lived and rotates on a rolling basis. On-chain records are outside our control and cannot be deleted.

Subject to your jurisdiction, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to complain to your local data protection authority.

Email [CONTACT EMAIL — e.g. legal@pemp.fun] to make a request. Note the limit of what we can do: we cannot delete on-chain history, and where we never held your key, we cannot alter anything recorded on the blockchain.

We protect what we hold with encryption in transit, restricted access, and scoped credentials. Authentication tokens from our wallet provider are verified server-side before any write. No system is perfectly secure, so use a strong, unique login method and keep your device up to date.

The Service is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has used the Service, contact us and we will delete the account.

We may update this policy. The “last updated” date above always reflects the current version. Material changes will be made clear in the Service.

Privacy questions and requests: [CONTACT EMAIL — e.g. legal@pemp.fun].

See also our Terms of Service.