1. Controller
DUMB Labs LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States, is responsible for your personal data. Contact: privacy@dumb.trade.
2. What we collect
Account: email, sign-in provider (Google, Apple or email), username, display name, avatar, bio, social handles you add.
Wallet and activity: public wallet addresses, deposit and withdrawal receipts, order and fill history, and Arena predictions or outcome-contract entries if such contracts become available. Public blockchain data is public by nature and cannot be erased by us.
Content: posts, comments, CALLs, likes, follows and reports.
Device and compliance: push-notification tokens if enabled; basic logs such as IP address, browser and errors; and signals reasonably needed for security, sanctions, eligibility, fraud prevention and location controls.
DUMB staff do not receive a plaintext private key through the ordinary export flow. The wallet provider and service retain the authorization capabilities described in the Terms. We do not collect contacts, precise location, health data or advertising identifiers, and we do not track you across unrelated apps or websites.
3. Why we use it
To run the Service (contract); to keep it secure and prevent fraud and abuse (legitimate interest); to comply with law, including sanctions screening (legal obligation); to send notifications you turned on (consent — revocable any time in Settings).
4. Who we share it with
Processors acting for us: hosting and database, wallet infrastructure, cross-chain relayer, AI provider for in-app insights (no personal data beyond public trading activity), push services (Apple, Google, browser vendors).
The trading protocol and blockchains receive your public address and transactions.
Other members see your public profile, posts, CALLs and ranking.
Authorities, when legally required. We never sell your data.
5. International transfers
We are based in the United States. Where data leaves the EEA or UK, we rely on Standard Contractual Clauses or equivalent safeguards.
6. Retention
We keep account data while your account exists. When you delete your account, your profile, posts, follows, notification settings and app records are deleted immediately. Your username stays reserved (only the name, so it can't be reused). We may keep limited records where the law requires (e.g. fee ledger entries for tax) for up to 7 years, without your profile attached.
7. Your rights
You can access, correct, export or delete your data, object to processing or withdraw consent. Most of it you can do yourself in Settings; for the rest email privacy@dumb.trade. EEA/UK residents may complain to their data-protection authority. California residents have the rights under the CCPA/CPRA; we do not sell or share personal information for cross-context advertising.
8. Security
Data is encrypted in transit and at rest. Wallet keys are held by our wallet infrastructure provider in secure enclaves; DUMB staff cannot read them.
9. Children
DUMB is not for anyone under 18. We delete accounts we learn belong to minors.
10. Changes
Effective October 2, 2026. We'll announce material changes in the app.