Privacy Policy
BrickGuesser is a display-only Android app. It shows UP/DOWN signals, confidence figures, and settled outcomes for short crypto prediction-market windows. It does not place trades, does not connect to any exchange or brokerage account, and does not ask you to create a BrickGuesser account or sign in with us.
This policy describes information we collect when you use the BrickGuesser app or this website. Google Play handles payments and may collect additional information under Google's Privacy Policy.
What we collect
- No personal account profile. We do not collect your name, email address, phone number, contacts, photos, or precise location. The app does not ask you to create an account with Cave Company.
- Google Play purchase token and subscription status. When you start a Google Play subscription or free trial, Google Play gives the app a purchase token. The app sends that token, along with the product identifier (weekly or monthly), to our server so we can ask Google whether the subscription or trial is active. We store the purchase token, a one-way hash of it, the product identifier, the subscription state returned by Google (for example, active, in a grace period, or canceled), the expiry time, the acknowledgement state, and, if Google provides one, a hash of any linked or superseded purchase token. We use this only to confirm access and to re-check status with Google, including after a cancellation, refund, or renewal.
- App access token. After a successful check, our server issues a random access token. The app stores that token on the device (in the app's private storage) and sends it as a request header when it reads the signal feed. On our server we store only a one-way hash of the access token, together with its type, creation and expiry times, an optional internal note, a revoked flag, and a link to the related purchase-token hash. A purchase may have a small number of live access tokens (for example after reinstalls). Uninstalling the app deletes the on-device token. Complimentary access. We may give a small number of people (for example, the developer) free access with a private unlock code. For these, our server stores only a one-way hash of the code, a short internal note, a creation time, and a revoked flag; the access tokens issued are handled as described above.
- No hardware device identifiers. The app does not collect advertising IDs, IMEI, serial numbers, or other hardware device identifiers. The only identifier we store on the device is the app access token described above.
- IP addresses and request metadata, for rate limiting and delivery. Our server uses the IP address of each request in memory for a short time to enforce rate limits and help prevent abuse. The app's feed server does not currently write IP addresses into its application logs (those logs record timestamps and generic error types). If we place a hosting or edge provider in front of the app's feed or this website (for example, Cloudflare), that provider may process IP addresses and standard request metadata such as time, path, user agent, and response code in order to deliver the service, and may keep its own logs under its policies.
- Optional subscription notifications from Google. If we later enable Google Play Real-Time Developer Notifications, Google may send our server notices about subscription events (for example, renewals, cancellations, or refunds). We may store the notification type, product identifier, a timestamp, and a hash of the purchase token so we can update access.
- Support email. If you email us, we receive whatever you choose to send (for example, your email address and a Google Play order number) and keep it long enough to respond and, if you asked, to delete your data.
What we do not do
- We do not sell your information, and we do not share it with advertisers or data brokers.
- We do not use advertising SDKs, analytics SDKs, crash-reporting SDKs, or cross-app tracking.
- We do not receive your payment card or Google account password. Google Play processes payments and free-trial payment methods.
How we use information
We use the information above only to confirm your subscription or free trial, deliver the signal feed, prevent abuse, handle cancellations, refunds, and renewals that Google reports to us, and respond to your support or deletion requests.
Who else may process information
- Google. We send the purchase token to Google (the Google Play Developer API) to check subscription status. Google also processes your payment and Play account under its own policy.
- Hosting and edge providers. Servers and, if used, an edge network such as Cloudflare may process traffic, including IP addresses, as needed to operate the app feed and this website.
We do not otherwise share your information except if required by law, or if needed to protect against fraud or abuse.
Retention and deletion
Purchase tokens and related subscription records are kept so we can confirm and periodically re-check status with Google. Access-token hashes are kept until the token expires or is revoked, and may remain alongside the related purchase record. We do not currently run an automatic purge of these records after a set number of months. In-memory rate-limit data is short-lived. Host or edge logs, if any, follow the provider's retention settings.
You can ask us to delete the information we hold about your subscription at any time. Email cavecompany8@gmail.com with the subject line “Delete my data,” and include a Google Play order number or the Google account email used for the purchase so we can find the right records. We will delete the purchase token, entitlement record, and access-token hashes we can reasonably locate. Uninstalling the app deletes the on-device access token but does not by itself delete server records. Step-by-step instructions are on our Support and data deletion page.
Security
Release builds of the app use HTTPS for traffic to our server. Access tokens are stored on our server only as one-way hashes. Purchase tokens are stored so we can re-check status with Google; we also store a one-way hash of each purchase token.
Children
BrickGuesser is not directed to children and is intended for adults 18 and older.
Not financial advice
BrickGuesser is an information tool. Past results do not guarantee future results. BrickGuesser is not affiliated with or endorsed by Kalshi or any exchange.
Changes
We will post any changes on this page and update the effective date.
Contact
Questions about this policy, or requests to access or delete your data: cavecompany8@gmail.com.