Privacy notice

Who to contact

Cryptik is operated by Tropiky Corp. in the United States. For privacy questions or requests, contact team@cryptik.app. This notice covers the Cryptik website, wallet and community features.

Information used to provide the service

• Login and recovery: email, Google and Sign in with Apple authentication and embedded wallets use Privy. Login providers may process your email address (including an Apple relay address), name, profile picture, user identifiers, linked accounts and information needed to secure and recover access. Use the same sign-in method to return to your wallet.
• Wallet activity: public wallet addresses, selected networks and transaction references are used to fetch balances, prices, history, fees and transaction status. RPC, blockchain-indexing and market-data providers receive the requests needed for those features.
• Community: posts, replies, photos, project profiles and linked wallet addresses can be public. Memberships, reactions, reports, blocks and rules acceptance support community operation and moderation.
• Payments and games: the relevant services keep payment proofs, order status and game/account records to deliver purchases, reconcile balances and handle disputes.
• Support and reports: when you contact team@cryptik.app, we receive your email address, message and any details you choose to include. In-app community reports open your email app for you to send; copying a report does not submit it. The native blocked-user list stores public author addresses on your device, survives sign-out, and is cleared by uninstalling the app. It is not synced to other devices.
• Face ID and device unlock: biometric matching is performed by the operating system. Cryptik does not receive your face image, fingerprint or biometric template. The app stores a public account binding in the iPhone Keychain behind the device biometric check. Face ID unlocks an existing session and does not replace account authentication.
• Optional phone notifications: if you enable wallet alerts, Cryptik stores your Apple push device token, authenticated user identifier, public wallet address and notification preferences to deliver incoming-token and transaction-status alerts. Apple receives the device token and a generic alert; the alert payload excludes wallet addresses, token names, amounts and transaction hashes. Blockchain indexers and RPC providers receive public-address and transaction queries to verify activity. Turning off notifications or signing out requests removal of the device registration; if offline, removal is retried when connectivity returns. Registrations expire after 30 days without renewal. Delivery and duplicate-prevention records are retained for up to seven days. Initial iPhone coverage is Base only and excludes internal ETH transfers; delivery depends on provider availability and device settings. These notifications are not used for advertising or tracking.
• Device and security: requests can expose IP addresses and normal browser information to the hosting and service providers. Session cookies, security logs and rate limits help authenticate requests and prevent abuse. Local storage holds display preferences, cached data and transaction status; wallet recovery material, where used, is handled by the selected wallet/recovery method.

Why this information is used

Information is used to sign you in, show your assets, process actions you request, publish your content, maintain service security, moderate reports, resolve support issues and reconcile payments. Public blockchain data is independently visible outside Cryptik. Hiding your displayed balance does not make blockchain activity private.

Services and external destinations

Cryptik uses hosting, authentication, wallet, RPC/indexing and market-data services. Current wallet sign-in uses Privy and CAPTCHA verification uses hCaptcha. Authentication and security providers process device/browser identifiers, IP addresses, interaction and diagnostic information for authentication, abuse prevention, service operation and analytics under their policies. CAPTCHA may process touch or pointer interactions and challenge answers. These providers have their own privacy policies. Chart or transaction requests may use GeckoTerminal/CoinGecko, DexScreener, Alchemy and network RPC services depending on the feature. Links to Telegram, X, Discord and other websites open services with their own policies. Do not put private information in public posts.

Retention and deletion

Community sign-in challenges expire after five minutes and community sessions after twelve hours. Expired records are cleaned during subsequent sign-in activity. Posted content remains until removed or processed through account deletion. Removing a post from a feed does not by itself erase every retained record.

You can request account and associated-data deletion. The operator reviews the login provider, linked services, backups and records that must be retained. Confirmed payment receipts and unresolved security or dispute records may need retention; the review explains the applicable exceptions. Public blockchain transactions cannot be erased by Cryptik. The deletion process is a reviewed request, not an instant wallet deletion. Support aims to acknowledge account-deletion requests within 24 hours and review them within 30 days. Provider and linked-service cleanup is performed by the operator; blockchain transactions cannot be deleted. Support and moderation records are reviewed for deletion when their purpose ends, subject to necessary security, dispute and legal retention.

Your choices

You can disconnect/log out, hide balances locally, control token display, remove your own posts, block/report community users, and request deletion. Contact the privacy address to ask about access or correction. The operator monitors team@cryptik.app and responds to abuse reports within 24 hours. Never send a private key, recovery phrase, password or verification code to support. If you cannot sign in, use the email route on the account-deletion page.

Updates

This notice describes the current services. Material changes will be reflected here. Review the policy for any separate service you choose to use.