Privacy Policy
The PipAI Team (“we”) operates the PipAI (锦锂) iOS app and the website pipai.org (together, the “Service”). We care about your personal information and collect only the minimum needed to provide the Service. This policy explains what we collect, why, how we protect it, and how you stay in control.
1. Scope
This policy covers every way you use the Service through the PipAI app and this website. Third-party sites and services linked from the Service (such as Binance or X) are governed by their own privacy policies.
2. Information we collect
| When | Information | Required? |
|---|---|---|
| Receiving alerts | Apple push token, push environment (sandbox / production), and the alert toggles you set on the Me tab | Only if you allow notifications |
| Sign in with Apple | The user identifier Apple provides; the email Apple may share (possibly an Apple private relay address) | Optional; nothing is collected if you don’t sign in |
| Profile | The username, email and phone you choose to enter, and your avatar choice | Optional; all can be left blank or changed |
| Linking Binance API | The Binance API key and secret you provide | Optional; only when you link one |
| Sessions | A server-generated session token (the server stores only its hash) and its expiry | Created when you sign in |
We do not collect precise or approximate location, contacts, photos, the advertising identifier (IDFA) or your trading history. Alerts, statistics and the lab use Binance public market data that has nothing to do with you personally.
3. How we use it
We use the information above only to:
- send whale-order alerts to your device, filtered by your alert toggles;
- identify your account and show and save your profile;
- after you link a Binance API key, read your USDⓈ-M futures balance and positions on your behalf and show them to you. We never use your API to place orders, transfer or withdraw;
- keep the Service secure and troubleshoot problems.
We do not use your personal information for automated decision-making, profiling or personalised advertising.
4. Third parties and sharing
We do not sell or rent your personal information. To provide the Service, the following third parties process what is necessary:
| Third party | Purpose | Information involved |
|---|---|---|
| Apple | Sign in with Apple; delivering alerts through Apple Push Notification service (APNs) | Apple sign-in credential; push token and alert content |
| Binance | Public market and trade data; reading your futures account after you link it | Your API key and signed requests (only if linked) |
| Tencent Cloud | Server hosting | The information above stored on our servers |
| Cloudflare | Hosting and delivering this website | Standard request information when you visit (such as IP address) |
Smart Money whale and trader statistics come from our own PipAI data gateway; those requests carry only the trading-pair name and no personal information. Beyond the above, we disclose information only when required by law or when necessary to protect the safety of you or others.
5. Storage and cross-border transfers
Our servers are in Tokyo, Japan (Tencent Cloud Tokyo region). If you use the Service from mainland China or any other country or region, your information is transferred to Japan for storage and processing. By using the Service you acknowledge and agree to this transfer; we protect your information to the same standard described here.
6. Retention
- Profile, Binance API key and sessions: kept until you delete your account (or unlink Binance), then deleted from our servers immediately;
- Push tokens: kept until Apple reports the token invalid (for example after you delete the app), then deleted automatically;
- Sessions stop working when they expire or you sign out.
7. Security
- All traffic between the app and our servers uses HTTPS, and the app pins the server certificate’s public key against man-in-the-middle attacks;
- Binance API secrets are encrypted with AES-256-GCM, with the encryption key stored separately from the data;
- The server stores only hashes of session tokens;
- The app keeps its session token in the iOS Keychain.
No system is perfectly secure. If a personal-data security incident occurs, we will tell you promptly through the app or the contact details you gave us and take remedial action.
8. Your rights
- Access and correction: view and edit your username, email, phone and avatar on the Me tab;
- Deletion: delete your account on the Me tab, or unlink on the Binance API screen;
- Withdrawing consent: turn off PipAI notifications in iOS Settings, or turn off alerts on the Me tab;
- Other requests: to export your information or make any other request, contact us as described in section 12; we reply within 15 business days.
9. Data on your device
The following stays on your iPhone and is never uploaded: theme and language preferences, a local copy of your alert toggles, lab backtest settings, and the alert-sample cache downloaded for offline research. Deleting the app deletes it all.
10. Minors
The Service is for adults aged 18 or over. We do not knowingly collect personal information from minors; if we find we have, we delete it promptly.
11. Changes to this policy
We may update this policy from time to time. For significant changes we will show a prominent notice in the app or on this website and update the “Last updated” date above. Continuing to use the Service after a change means you accept the updated policy.
12. Contact
Operator: PipAI Team
Email: [email protected]
See also our Terms of Service.