Version 1.0 · effective 4 August 2026 · section 11 (interaction analytics) added in the build of 1 Oct 2026
This policy applies to the DeFiGuru iOS app, Telegram Mini App and web service. The data controller is Synergy’s Lab Ltd, BVI company number 2178253, incorporated in the British Virgin Islands. Its registered office is at SR Corporate Services Limited, Wattley Building, 2nd Floor, 160 Main Street, P.O. Box 3410, Road Town, Tortola, British Virgin Islands. DeFiGuru is an artificial-intelligence system and is always identified as AI.
The School, sample Intelligence Desk, Radar, Calendar and watch-only interface can be explored without creating an account. Sample mode uses clearly marked synthetic data.
If you choose Sign in with Apple, we process the Apple account identifier and an app session. If you save progress, we process lesson progress, XP and streak state. If you add a public wallet address, we process that complete public address solely for watch-only portfolio display. We do not request or process seed phrases, private keys or transaction signatures.
We use this data to authenticate an optional account, synchronize School progress, retain watch-only addresses selected by the user, protect the service and respond to support requests. We do not sell personal data and do not use it for cross-app tracking or targeted advertising.
Public wallet addresses and blockchain records are public by nature. Adding an address does not prove ownership. The iOS app cannot sign transactions or move funds.
Session credentials are stored in the iOS Keychain. Server access is restricted by role and logged. Data is retained while the account is active, for a short backup and security period after deletion where legally necessary, and longer only if required by law or an active dispute.
You may use the service without an account, sign out at any time, reset local progress and addresses in Settings, and request deletion of the full synchronized account from Settings. A deletion request also triggers revocation of the Sign in with Apple session where applicable.
Infrastructure and approved portfolio-data providers may process limited data on our behalf under contractual and security controls. Public blockchain data may be available globally. We disclose additional providers here before enabling them in production.
The service is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly create accounts for children.
Use the DeFiGuru Support page to contact us about privacy, access, correction or deletion. Material policy changes will be dated and posted before they take effect.
The site may record anonymous interaction events: a click on the YLDX button, choosing a product, opening the Kanban, an ecosystem-map node, a Money Flow step or a transparency source, and a click on “Notify me about launch”. The list of events is fixed in code (an allow-list); an event outside the list is not sent. Events never contain wallet addresses, keys, signatures, e-mail or phone numbers: fields with such names and values that look like an address or a hash are removed before sending. No third-party analytics SDK is loaded; events go only to the page's internal data layer when it is enabled. These events are not linked to an account and are not used for advertising.