Privacy Policy
This Privacy Policy explains how Trebuchet Dynamics Limited ("we", "our", "us"), registered in England and Wales (71-75 Shelton Street, London WC2H 9JQ), processes information when you use the Arenaton 9lives application on iOS, Android, or the web (the "App").
Arenaton 9lives is a self-custodial prediction market interface. Your private keys are generated and stored exclusively on your device. We never have access to your private keys, recovery phrase, or the ability to execute transactions on your behalf.
1. Information We Process
1.1 Wallet and Blockchain Data
- Public wallet address — sent to blockchain RPC nodes and the 9lives API to query balances, positions, and transaction history. This is publicly visible blockchain data.
- On-chain transaction records — trades, claims, and token transfers recorded on the Superposition blockchain (Arbitrum L3). Publicly accessible by design.
1.2 Locally Stored Data (Never Leaves Your Device)
- Private keys and recovery phrase — generated via BIP-39 standard, stored in the device secure enclave (iOS Keychain / Android Keystore) via expo-secure-store. Never transmitted to any server.
- PIN hash — your 6-digit PIN is stored as a one-way SHA-256 hash.
- App preferences — theme, language, display settings stored locally.
1.3 Technical Data
- App version, device OS, and screen dimensions — used for rendering and compatibility only.
- We do not use analytics, crash reporting, or telemetry SDKs. No Firebase, no Crashlytics, no Sentry, no advertising identifiers.
2. Information We Do Not Collect
- Personal information (name, email, phone number, date of birth)
- Device identifiers or advertising IDs
- Location data
- Browsing or search history
- Contacts, calendar, or files
- Analytics events, usage telemetry, or crash reports
3. Permissions and Device Access
| Permission | Platform | Required? | Purpose |
|---|---|---|---|
| Internet | All | Yes | Blockchain RPC, 9lives API, WebSocket price feeds, WalletConnect relay. |
| Biometric (Touch ID / Face ID / fingerprint) | iOS & Android | No (optional) | Alternative to PIN entry. You opt in during setup. |
| Camera | iOS & Android | No (runtime) | QR code scanning for wallet import. You can always type or paste instead. |
| Notifications | iOS & Android | No (optional) | Live feed alerts if you allow notification prompts. |
No microphone, no location, no contacts, no broad storage access.
4. How We Use Information
- Display market data, live prices, sports events, and your portfolio positions.
- Submit transactions you sign to the Superposition blockchain.
- Connect to external wallets (MetaMask, Rainbow, Trust Wallet, Coinbase Wallet) via Reown AppKit / WalletConnect.
- Process cross-chain deposits via Relay (bridge + swap into fUSDC on Superposition).
- Process fiat onramp transactions via Onramp.money when you choose to use that feature.
- Store and apply your in-app preferences.
- Protect App access via PIN and optional biometric authentication.
We do not use your data for advertising, profiling, or marketing.
5. Third-Party Services
The App integrates with third-party services. When you use these features, your data may be processed under their own terms:
- Reown / WalletConnect — external wallet connections. Privacy Policy
- Coinbase Wallet SDK — Coinbase Wallet connectivity. Privacy Policy
- Onramp.money — fiat-to-crypto onramp (optional). Privacy Policy
- Relay by Reservoir — cross-chain bridge and swap. Privacy Policy
We also use blockchain RPC providers and the 9lives API. These receive only your public wallet address and transaction data — the same data publicly visible on the blockchain.
6. Blockchain Transparency
All prediction market trades, token transfers, and claim transactions are recorded on the Superposition blockchain. Blockchain records are public and immutable — they cannot be modified, hidden, or deleted by anyone.
7. Data Security
- Encryption at rest: Private keys use iOS Keychain / Android Keystore (hardware-backed where available) via expo-secure-store. PIN stored as SHA-256 hash.
- Encryption in transit: All network communication uses HTTPS/TLS and WSS.
- No server-side storage: We do not operate user accounts or databases that store your personal or wallet data.
- Clipboard protection: Clipboard auto-clears 60 seconds after copying sensitive data.
8. Data Retention and Deletion
Local data: All wallet data, preferences, and cached content are stored only on your device. Delete all local data via "Delete Wallet" in Settings, or by uninstalling the App.
Blockchain data: On-chain records cannot be deleted due to blockchain immutability.
9. International Transfers
Blockchain RPC nodes and infrastructure providers operate globally. Blockchain data is distributed worldwide by design.
10. Your Privacy Rights
Depending on your location, you may have rights under GDPR, CCPA, CPRA, or other data protection laws:
- Access — request a copy of data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of off-chain data (on-chain data cannot be erased).
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
Because 9lives is self-custodial with no user accounts and no server-side personal data, we typically hold no off-chain personal data about you. Contact us if you believe otherwise.
11. Children
Arenaton 9lives is for adults aged 18+ (or the age of majority in your jurisdiction). We do not knowingly collect data from children.
12. Changes to This Policy
We may update this policy. The current version will be posted at this URL with an updated date. Material changes will be noted in App release notes.
13. Contact Us
Trebuchet Dynamics Limited
71-75 Shelton Street, London WC2H 9JQ, United Kingdom
Email: [email protected]
Website: https://arenaton.com
If you need this policy in another format for legal or compliance review, contact us at the address above.