Privacy
signal.family and the Signal Family apps for iPhone and Android
Effective September 23, 2026. This replaces the version dated 2026-08-25.
Who we are
Signal is run by the team that runs signal.family ("Signal", "we", "us"). Write to us at support@signal.family.
The short version
- We never see or hold your private key, and we never hold your funds.
- Your sign-in email is held by Privy, our sign-in provider. Our own database does not store it.
- What you post (your username, your avatar, your signals) is public by design. So is everything your wallet does on chain.
- We keep your IP address and browser type on transaction records for 30 days, to investigate fraud, and then delete them.
- No ads, no advertising trackers, and we do not sell your data.
- You can delete your account in the app (You > Settings > Delete account) or at signal.family/account/delete.
1. What we collect
Things you give us
| What | When | Notes |
|---|---|---|
| Email address | When you sign in | Collected and held by Privy to send your one-time code and to keep your account. The app shows it on your device so you know which account is signed in. When you delete your account, our server asks Privy to delete your Privy account too. |
| Username and avatar | When you claim a name or set a picture | Public. The picture is the one you choose with your phone's picker; we get no other photos. |
| Signals and edits | When you post | Public, with the price at the moment you posted. |
| Replies | When you reply to a signal | Public under that signal, with your @name. You can delete your own reply. |
| Likes, follows, watchlist, alert settings | When you use them | Linked to your wallet address. Follows and likes can be visible to others. |
| Messages | When you send a direct message | Stored on our servers so you and the other person can read them. They are private in the app but not end-to-end encrypted. We read a conversation only when someone reports it, or when the law requires it. |
| Reports and blocks | When you report or block | Kept private. The person you report or block is not told who you are. |
| Support emails | When you write to us | Whatever you put in the email. |
Things that come from your wallet and the chain
- Your wallet address. It is your account identifier here.
- Your transactions, balances, holdings and payouts on HyperEVM. These are public on the blockchain; we index them so the app can show your portfolio, your trades and the payouts you received.
- Your points, which we compute from on-chain activity.
The transaction ledger
Before your wallet is asked to sign a transaction that Signal built, we write a ledger row: which wallet, which contract, a fingerprint of the contract call, the amount and a label. When your wallet answers, we add the transaction hash. Rows are chained so that none can be changed or removed later without breaking every row after it. The rows are public at /api/proof/* and are never deleted, which is how anyone can check whether a transaction was built by Signal. Your IP address and browser type are kept apart from the chain and deleted after 30 days.
Technical data
- Error reports. If a page fails, the app sends the page path, the error message and the top of the stack trace. No wallet, cookies or form contents.
- Trade-ticket notes. When the trade ticket refuses a trade, it logs the side, the slippage setting and the words it showed you, without your wallet.
- Server and network logs. Our hosting (Railway) and network provider (Cloudflare) log requests: IP address, the address requested (which can include a search term), time and browser type. These logs are kept for up to 30 days.
- Rate limits. We count requests per IP address in memory to stop abuse. Those counters are not stored.
Measurement
The website counts page views, against a random ID stored in your browser. Each view records its time, the page's path (never a wallet: a profile is recorded as /u/…), whether the page was shown in Signal or Helix, the device type and window size, the site you came from and a ?src= link tag. It also counts which of its controls are used — a list's tab, sort or filter, the chart's timeframe, a ticket's size chip and the like — as one total per control per day: each count says the control and the option picked, whether the page was in Signal or Helix, the device type, and whether a wallet is connected and of which kind (never the wallet). The ID is not stored with these counts. Against the same random ID, it also notes three steps of buying, so we can tell which designs help people find and buy coins: when a coin's page is opened, when a buy is tapped and when a buy goes through, each with the layout the page was shown in and, for a buy, its chain and how it was paid: the kind of sign-in for a buy on HyperEVM's own ticket, "pay-from" for a buy paid from another chain, nothing more for a buy on another chain's ticket. A buy that goes through is noted to the minute, never the second (never the wallet, the amount or the transaction). It never records your wallet, your name or anything you type, it sets no cookie, and we do not store your IP address with it. While a page is open and on screen, the website also sends that ID every 30 seconds so it can show how many people are on Signal right now: the server keeps only a one-way hash of it, with the time, and drops it a minute after your last page leaves the screen. Opt out by setting pv:notrack to 1 in your browser's local storage (it stops both). The apps do not run usage measurement of their own. Older pages on legacy.signal.family count page views, taps, scroll depth and time on page the same way. Privy's software sends its own usage events to Privy so Privy can run and secure its service.
What we do not collect
Your name, phone number or postal address. Your location (we do not use your IP address to locate you). Your device's contacts or photo library. Advertising identifiers. Passwords (there are none; you sign in with a code). Your private key or recovery phrase: we never ask for them, anywhere.
Website-only features
These are on signal.family but not in the apps: referral codes and who referred whom, the data needed to launch a token (the creator's wallet and the token's settings), and the launch waitlist (an email address and the IP address it came from).
2. How we use it
- To run Signal: show markets and charts, build the transactions you ask for, show your profile, signals, messages, payouts and points, and keep your watchlist on every device.
- To keep people safe: stop spam and abuse, review reports, enforce the Terms, investigate fraud and stolen funds, and answer "did Signal build this transaction?"
- To fix things: find and repair errors and failed trades.
- To follow the law: when a valid legal request requires it.
We do not sell personal information, we do not use it for advertising, and we do not track you across other companies' apps or websites. We do not send your personal data to third-party AI services. We make no automated decisions about you that have legal or similarly significant effects.
3. Who else handles your data
We use these service providers. Each processes data only to provide its service to us, and each is bound, by contract or by its published terms, to protect it at least as well as this policy does.
| Provider | What it does for Signal | What it handles |
|---|---|---|
| Privy | Sign-in and your embedded wallet | Your email, account ID, wallet address, device and network data for security. Privy privacy policy |
| Cloudflare | Network protection and delivery for signal.family | IP address, request details. Cloudflare privacy policy |
| Railway | Hosting for our servers and databases | Everything our servers store. Railway privacy policy |
| Alchemy, Dwellir | Blockchain node access for our servers | Addresses and transactions our servers look up. Alchemy, Dwellir |
Services you choose. If you buy crypto with a card (MoonPay), bridge funds (Relay), open a block explorer or share to X, you are using that company's service under its own terms and privacy policy. We send it only what the action needs, such as your wallet address. MoonPay privacy policy
Everyone. Your username, avatar, signals, likes and your on-chain activity are public.
The law. We disclose data when a valid legal process requires it, or when it is needed to protect people from serious harm or fraud.
If Signal changes hands. If the business is sold or merged, this data moves with it under this policy, and we will tell you first.
4. The blockchain is public and permanent
Everything on HyperEVM is public and cannot be deleted: your wallet address, every transaction, every balance. Anyone can see it forever, and anyone who knows your username can link it to your address. Deleting your Signal account does not change the blockchain, and we cannot change it for you.
5. How long we keep it
| Data | Kept |
|---|---|
| Username, avatar, signals, likes, follows, watchlist, alert and message settings | Until you delete them or your account |
| Messages | Until you delete your account; the other person's copy of a conversation keeps your messages as sent, shown without your name |
| Transaction ledger rows | Permanently (public and chained); IP address and browser type deleted after 30 days |
| Indexed on-chain history | Permanently (it is public chain data) |
| Reports, moderation decisions, bans | 2 years after the case closes, to stop repeat abuse |
| Page views (website) | The newest 600,000 views; older ones are deleted as new ones arrive |
| Control counts (website) | Daily totals per control, kept 400 days |
| Live count of people on the website | A one-way hash of the browser's random ID, about one minute after its last page leaves the screen |
6. Deleting your account
In the app: You > Settings > Delete account.
On the web: signal.family/account/delete. Sign in with your email and confirm.
Can't sign in? Email support@signal.family from the address on your account. We will verify it and delete the account within 30 days.
Before you delete, move your funds or export your key. Deleting also deletes your sign-in account at Privy. Privy then separates the embedded wallet from you, and getting access back is not guaranteed. Anything left in that wallet may be lost. If you sign in again later with the same email, you get a new, empty account and a new wallet.
What we delete: your username, avatar, signals and edits, replies, likes, follows, watchlist, alert and message settings, your messages, your sessions, and your sign-in account at Privy.
What stays, and why: the blockchain (we cannot change it); transaction ledger rows without your IP address or browser type (they prove which transactions Signal built, for everyone's safety); moderation records about abuse you committed or reported (to stop repeat abuse); anything we must keep by law. Deleted data leaves backups within 30 days.
Most of it happens at once. If a step takes longer, the app says "pending" and we finish within 30 days. You can also remove any single signal at any time from its edit menu, and change your username or avatar in Settings.
7. Your choices and rights
Depending on where you live (for example under the GDPR in the EU and UK, PIPEDA in Canada, or the CCPA in California), you can ask to see the data we hold about you, get a copy, correct it, delete it, or object to or limit how we use it. Email support@signal.family. We answer within 30 days and may ask you to prove the account is yours, for example by signing a message with your wallet. You can also complain to your local data protection authority.
For visitors covered by the GDPR, our legal bases are: providing the service you asked for (contract); keeping Signal safe and working, and preventing fraud (legitimate interests); counting page views on the website (legitimate interests; opt out by setting pv:notrack to 1); counting which website controls are used (legitimate interests; the same opt-out); and legal obligations.
8. Cookies and local storage
The app stores these on your device: your sign-in session (Privy), your theme, your last tab, a copy of your watchlist, the addresses you recently sent to, and your pending transactions. They never leave your device unless the feature needs them. The website also stores a random ID (pv:sid) and, if you came through a tagged link, that tag (pv:src); both are sent with each page view, and the ID also with the live count of people on Signal (see Measurement). It keeps the day's control counts (pv:use) so a control is counted at most a few times a day, and where you last opened a coin from (pv:entry); neither leaves your device except as the counts above. Messages use one secure, HttpOnly cookie that keeps them unlocked for seven days after you sign. Cloudflare may set a security cookie to tell people from bots. We use no advertising cookies.
9. Security
Every connection uses HTTPS. Your private key is never sent to us. Session tokens are stored hashed. Access to our systems is limited to the people who run them. No system is perfect: if we learn of a breach that affects you, we will tell you and the authorities as the law requires. The security page at signal.family/security explains how to check any transaction against the ledger.
10. Children
Signal is for adults. You must be at least 18 and of legal age where you live. We do not knowingly collect data from anyone under 18. If you think a minor has an account, email support@signal.family and we will delete it.
11. Where data is stored
Our servers and databases are hosted by Railway in the regions Railway provides for our project. Cloudflare and Privy operate worldwide. When data moves between countries, we rely on our providers' transfer safeguards, such as standard contractual clauses.
12. Changes
When this policy changes, the date at the top changes. If a change is material, we will say so in the app before it takes effect.
13. Contact
Privacy: support@signal.family
Support: support@signal.family