Privacy policy

1. Who we are

SD Labs Inc, a Delaware corporation (“SD Labs”, “we”, “us”) runs Fama and decides what happens to the personal data it collects: under laws such as the GDPR, we are its controller. Write to support@signet.fyi about anything in this policy. Our postal address is SD Labs Inc, 2810 North Church Street, STE 91025, Wilmington, DE 19802, United States.

2. What we collect

Your account. Your email address; records of each sign-in (when, how, and a hash of the code we emailed you); when you accepted our terms; and, when you delete your account, when you asked. You must give us an email address to make an account; without it we can’t run Fama for you. Everything else is optional.

Your wallet. Your wallet’s public address; an encrypted backup of your wallet that we can’t open on our own; one part of what opens it, which we keep encrypted; and, if you trade perps, your Hyperliquid key, encrypted the same way as your backup. Your password is blinded on your device before anything is sent, so we never see it. A desktop PIN never leaves your computer.

Your profile and what you do on Fama. Your name, handle, bio and picture (we keep the picture as a small square, with nothing else from the file), and, if you link one, your X account; your contacts on Fama, the traders you watch and whom you block; your circles; the notes you write, and their likes; your messages in public chats; who invited you and whom you invited, and your rewards; reports you make; and records of the trades, sends and perps orders Fama made for you. We also record whom you follow. We no longer record posts, likes or reposts, and we are deleting the ones recorded before. We no longer count points, and we are deleting the points recorded before, which have no value.

Private chats. For direct messages and invite-only circles’ chats we keep the encrypted messages, the chat keys’ public parts, who is in each chat and when messages were sent. We can’t read the messages.

Your device and connection. Your IP address and the country and region it points to, your internet provider, the app’s version and, for private chats, a name for each device. If you turn on notifications, a token to send them to your device; notifications never carry the text of a private message. The desktop app checks our server for updates, which sees your IP address and the app’s version. A check by Cloudflare Turnstile runs when you sign up or reset your password, to keep bots out.

Usage and crash reports. When the app sends them, named events, such as opening a screen or finishing a trade, and crash reports go to PostHog, our analytics provider. Never from inside the wallet. They don’t record your screen, what you type, your balances, your key or your recovery code.

From others. Public blockchain data about your wallet; prices and trade data from market data providers; and, if you buy USDC with a card, whether the purchase went through, from our payments partner, which runs its own identity checks under its own privacy policy.

We don’t ask for your legal name, ID, date of birth or phone number, except tax details if we need them to pay you rewards. We don’t read your phone’s address book, and we don’t collect your precise location.

3. What’s public, and what isn’t

Public, to everyone on Fama and on pages anyone can open: your profile, your notes on coins’ pages (with your position), your messages in coin groups, open circles and Fama’s channel, your circle, your place on boards, and your wallet address. Your trades and holdings are public too, unless you hide them in Settings. Whom you follow, and how many people follow you, are public as well.

Private: your email, your direct messages and invite-only circles’ chats (which we can’t read either), whom you watch, your contacts, and whom you block.

Everything your wallet does on a blockchain, including every trade and send, is public, permanent and linked to your wallet address, whatever you choose in Fama. Neither we nor anyone else can delete it.

4. Why we use it

• To run Fama for you, under our agreement with you: your account, sign-in, wallet backup, chats, notes, trades, perps, rewards and payments.
• To show your trades, holdings and place on boards, unless you hide them, in our legitimate interest, and yours, in showing traders’ records. You can turn this off at any time in Settings.
• To keep Fama and its users safe, in our legitimate interests: stopping fraud, scams, abuse, bots and attacks, handling reports, and enforcing our terms.
• To meet the law, and in our legitimate interest in obeying laws that apply to us outside the EU and UK, such as US sanctions: keeping features closed where they must be, checking sanctions lists, keeping records, paying tax, and answering lawful requests.
• To improve Fama, in our legitimate interests: understanding which features are used and fixing crashes. In the EU and UK, the app sends usage and crash reports only if you agree, and you can turn them off in Settings.
• To contact you about your account, security, and changes to Fama or these policies.
• To send you news, only if you agree, and you can turn it off in any email or in Settings.
• With your consent, for anything we ask you about, such as notifications. You can withdraw consent at any time.

You can object at any time to our using your data in our legitimate interests. We don’t sell your personal data, share it for advertising, use it to train AI models, or make decisions about you by automated means that have legal or similarly significant effects. The checks that keep features closed by location are automatic, and you can ask a person to review one.

5. Who we share it with

We share personal data only as Fama needs, with:

• Service providers that run Fama for us, under contracts that limit what they may do with it: Cloudflare (servers, storage, email, bot checks), Vultr (the machine our database runs on), Helius (blockchain access), Apple and Google (notifications), and PostHog (usage and crash reports).
• Trading venues and networks that carry out what you ask: your wallet address and the trade go to Jupiter and to Solana; perps orders to Hyperliquid; and transfers to Relay.
• Partners you choose to use, such as our payments partner when you buy USDC, or X when you link your account.
• Authorities and others, when the law requires it, or to protect the rights and safety of our users, others or us. We answer only valid legal process, and tell you before we hand over your data, unless the law forbids it, it’s an emergency, or telling you would put someone at risk or harm an investigation. We can’t hand over your private chats’ messages, since we can’t read them.
• A buyer or successor, if Fama or our business is sold or reorganised, under this policy.

6. Where it’s kept

We are based in the United States, and so is our database. Our providers process data in other countries too, including at Cloudflare’s data centres near you. Where the law requires it, such as for data from the European Economic Area, the United Kingdom or Switzerland that we pass on to providers, we use safeguards such as the European Commission’s standard contractual clauses. You can ask us for a copy of these safeguards.

7. How long we keep it

We keep your data while you have an account. When you delete your account, it is hidden at once and, a week later, deleted for good: your profile, sign-ins, wallet backup and keys, notes, contacts, chats, trade records and invites. Records of each sign-in code email are deleted after a day. Data in backups goes as the backups are replaced. We keep some records longer when the law, a dispute, tax or a sanctions check needs them.

Some things stay after you delete your account: what your wallet did on a blockchain, the coins you launched on Fama before it stopped launching them, and messages others received from you in private chats, which stay on their devices.

8. Your choices and rights

In the app you can edit your profile, hide your trades and holdings, turn notifications off, block people, export your wallet’s key and delete your account.

Wherever you live, you can ask us for a copy of your data, to correct or delete it, to restrict how we use it, or to receive it in a portable form, and you can object to how we use it or withdraw your consent. Write to support@signet.fyi from your account’s email address; we may ask you to confirm it’s you. Someone you authorise can ask for you. We answer within 30 days, or tell you within that time if we need up to two more months for a complex request, and won’t treat you differently for asking. If we turn down a request, you can ask us to look again, and we’ll tell you how to complain to your regulator.

US state privacy laws. Under laws such as California’s, you have the rights above, and the right to opt out of the sale or sharing of your data and of profiling. We don’t sell or share it, or profile you in ways those laws cover, so there’s nothing to opt out of. In the last 12 months we collected these categories of personal information, as California law names them: identifiers (email, handle, wallet address, IP address); commercial information (your trades, perps orders and rewards); internet or other electronic network activity (sign-ins and, when it’s on, usage events); approximate location (country and region from your IP address); and the content you post. We disclosed each to the recipients in Who we share it with, for the purposes in Why we use it, and sold or shared none of it. The sensitive personal information we collect is your account sign-in and, encrypted so we can’t read it, your private messages; we use it only to run Fama. We keep each category as How long we keep it says. Fama doesn’t track you across other sites or apps, so it treats you the same whatever your browser’s Do Not Track or Global Privacy Control setting says. We don’t knowingly sell or share the data of anyone under 16.

You can also complain to the data protection authority where you live.

9. Security

Fama is built so that we hold as little as possible: your wallet’s key is made and used on your device, your backup is encrypted, your password never reaches us, and your private chats are end-to-end encrypted. Data is encrypted in transit and access to our systems is limited. No system is perfectly secure, so keep your email, devices, password and recovery code safe. If a breach affects your data, we’ll tell you and the authorities as the law requires.

10. Children

Fama is for people 18 and older. We don’t knowingly collect data from anyone younger; if we learn we have, we delete the account. If you believe someone under 18 is using Fama, tell us at support@signet.fyi.

11. Changes to this policy

We’ll show the date of any change at the top, and tell you in the app or by email at least 30 days before a change that matters takes effect.