Privacy policy
Last updated November 1, 2026
This policy explains what Kryptokite collects when you use kryptokite.com or the Kryptokite app for Android, why, who else sees it, and how to delete it. We do not sell personal data and we do not show ads based on tracking.
Who we are
Kryptokite runs kryptokite.com, api.kryptokite.com and the Kryptokite Android app. For anything about your data, write to support@kryptokite.com.
Using Kryptokite without an account
You can read prices, charts, exchanges, news and lessons without an account. When you do, our servers receive your IP address and basic request details (such as the page and your browser or app version) so they can answer the request and block abuse. We do not keep these in any account, and server logs are rotated and overwritten automatically.
The app keeps a cache of prices, news and (when signed in) your watchlist, plus settings such as language, theme and app lock, on your device only.
What we collect when you have an account
- Sign-in details: your public wallet address (wallet sign-in), your email address (email code sign-in), or your email address and Google account ID (Google sign-in). Wallet sign-in only asks you to sign a message. It never sends a transaction, and we never ask for private keys or recovery phrases.
- Profile: username, optional display name, language and time zone.
- Activity: your watchlist, price alerts and in-app notifications, Kites history, streak, badges, lesson progress and quiz answers, and quest progress.
- Portfolio: public wallet addresses you add, so we can read their public balances.
- Linked accounts you choose to connect (X, Discord, Telegram or Google): the account ID and name.
- Task submissions on the website: the links you submit and screenshots you upload. Screenshots are deleted automatically after 30 days.
- Device: a push notification token if you allow notifications, and the device name of each signed-in session.
- Security: signed-in sessions (we store only a hash of each token), a salted hash of the IP address used, and signals we use to stop reward fraud, such as many accounts acting together.
How we use it
To run the service: sign you in, keep your watchlist and alerts, send the notifications you ask for, credit Kites and show the leaderboard. To keep it fair and safe: rate limits, fraud checks on rewards, and fixing problems. We do not use your data for advertising and we do not build advertising profiles.
What other people can see
Your public profile and the leaderboard show your username, display name, Altitude, Kites, badges, Kite Score band and when you joined. Your email, wallet addresses, portfolio, alerts and history are never shown to other users.
Services we use
These providers process data for us, only to run Kryptokite:
- Vultr: hosting of our servers and database (Mumbai, India).
- Cloudflare: domain name service.
- Google: Google sign-in, and Firebase Cloud Messaging to deliver push notifications.
- Our email delivery provider: sends sign-in codes.
- Public blockchain nodes: we send the public addresses you add to read their balances.
Market data, exchange data, token safety checks and news summaries come from other services (listed on our data sources page). We send them coin and contract identifiers and public news text, never your personal data. Links to exchanges and news sites take you to services with their own privacy policies.
How long we keep it
We keep your account data while your account exists. When you delete your account, it and everything linked to it (sessions, wallets, linked accounts, Kites history, streak, badges, watchlist, alerts, notifications, portfolio addresses, progress, submissions and devices) are deleted from our database at once. Database backups, when made, are overwritten within 30 days. Records of moderation decisions keep the decision but no longer point to you.
Anything you published on a blockchain or on other sites, such as a transaction or a post on X, is outside our control.
Deleting your account and your choices
Delete your account in the app (Profile, Settings, Delete account) or on the website (Settings, Delete account), or follow the steps on the delete account page. You can change your username and display name in Settings, turn notifications off in your device settings, and write to support@kryptokite.com for a copy of your data or any other request.
Security
All traffic is encrypted with HTTPS. Sign-in tokens are stored as hashes, IP addresses as salted hashes, and the app encrypts its sign-in token with a key held in the Android Keystore. Kryptokite never holds or moves your funds.
Age
Kryptokite is for people aged 18 or over. We do not knowingly collect data from anyone younger. If you believe a child has an account, write to us and we will delete it.
Changes
When this policy changes, we update this page and its date. If a change is significant, we will also tell signed-in users in the app or on the website.