Privacy Policy — SigmaTracker

Last updated: October 20, 2026

SigmaTracker (the "App", "we", "us") is an iOS app that lets you watch public cryptocurrency wallet balances, and optionally your exchange account balances, from one place. SigmaTracker is not a wallet. It cannot hold funds, generate or import private keys or seed phrases, or sign or send anything. The App has no sign-in. Most of what you add stays on your device; what reaches our server is described by category in Section 3. By using the App you accept this policy.

SigmaTracker is an independent project developed and maintained by an individual. There is currently no associated legal entity or company.

1. What SigmaTracker Is (and Is Not)

• Not a wallet. No private keys, no seed phrases, no signing, no ability to move, receive, or approve funds of any kind.
• A read-only balance tracker. You add public wallet addresses on the blockchain networks the App supports, and the App shows their public balances and how they change over time.
• Optional exchange accounts. You can connect an account at a supported exchange with a read-only API key. See Section 2.
• No account, no sign-in. Your data is stored on your device, and some of it also reaches our server so that the App's features can work, as described by category in Section 3.
• Notifications. Alerts and summaries are generated from the data and settings you provide. See Section 3.
• Optional backups. You can save an encrypted backup to a location you choose. See Section 5.

2. Exchange Accounts — Keys Never Reach Our Servers

You can optionally connect an account at a supported exchange to see balances and trade history alongside your wallets. The API key, secret and any passphrase you enter are stored in your device's Keychain — never transmitted to us, never logged, and never included in analytics. If you turn on Sync exchange keys via iCloud Keychain in Settings (off by default), they are also stored in your iCloud Keychain, which Apple manages and encrypts; they still never reach us. The keys are used only to sign requests sent from your device to the exchange, and the balances and trade history the exchange returns are stored on your device.

You are responsible for the keys you enter. Use read-only API keys only. Where an exchange lets the App check a key's permissions, the App refuses a key that is not read-only, but some exchanges give no way to check this, so verify the permissions you grant. Anyone with access to your device or Apple Account may be able to use keys stored there. You can revoke a key at any time in your exchange account's settings.

3. Data Sent to Our Server, Notifications and Alerts

Notifications, alerts and summaries are generated from the data and settings you provide in the App. To provide them, that data may be processed on your device, on our servers, or both. Notifications are best-effort and are not guaranteed.

Our server receives the following, by category, and uses it only to provide the feature concerned:

• Wallets. Whenever you have added wallets: their public addresses, network format, and the labels and identifiers of the accounts they belong to, so that our server can read their public balances. Watchlist addresses are sent only while an address alert for them is on.
• Alerts, notifications and summaries. The alerts, targets, conditions and schedules you set, related preferences, the push token Apple issues for the device.
• Accounts and transactions. Whenever you have accounts: the accounts you add, such as the exchange and the label of an exchange account, their balances, and their transaction entries, such as trades, deposits, withdrawals and fees, together with details you attach to them. They are used to provide portfolio features such as profit and loss, history, alerts and summaries. Exchange API keys and secrets are never included.
• A third-party notification app you link. If you link a third-party notification app, the key you enter for it.
• Identification without a login. To recognise your install, the App signs in silently using a random install identifier and Apple's signed record of your App Store download, which contains no name or email address.
• Routine requests. The App also makes routine requests to services we operate, such as our price service and a check of the minimum supported App version. Like any network request, they reach us with your device's IP address.

Exchange API keys and secrets are never sent to us.

Stopping and deleting. You can turn these features off in Settings; the App then stops sending the data that feature needs. Wallet addresses, accounts and their transaction entries are sent whenever you have them; remove a wallet and the App tells our server to stop reading it. To delete data already sent, tap Request server data deletion in Settings, or use the contact form in Section 11; we delete server data on request.

Retention. Server-side storage is not guaranteed. Server-side data is kept only as long as needed for the feature concerned. If your install is inactive for 3 months, meaning it has made no request to our server in that time, we delete all server-side data kept for it. We do not promise to keep any server-side copy: it may be lost, changed or removed at any time. Your device, and the backups you make yourself, are the durable copy of your data.

4. Subscriptions

SigmaTracker may offer optional, auto-renewing subscriptions. They are purchased and managed entirely through the App Store using Apple's StoreKit. We never see your payment details; Apple handles billing, and the App only receives your subscription status from Apple. We do not store it on any server of ours. Pricing and terms are shown in the App Store before you subscribe.

5. Backups

SigmaTracker can save an encrypted backup of your data, but only when you ask it to, to a location you choose. A backup never contains an API key or secret, and we never receive the backup, its key or its password. Where the file is stored or synced afterwards is outside the App and outside our control, and keeping the backup and its key or password safe is your responsibility.

6. Third Parties — What They Receive (read this section)

To work, the App relies on third-party and partner services: market and blockchain data providers, exchanges, Apple services (such as the App Store, StoreKit and push notifications), and network or connection partners. Some are operated by us, such as our price service and app server; others are run by third parties. Requests to exchanges and other services may be routed through connection or network-optimization partners or other intermediaries, including ones you configure yourself. Each service receives only what a request needs to provide its function — for example a coin search term, a public wallet address, or a request signed with your own read-only key — and, like any network request, your device's IP address. Market-data requests never contain wallet addresses, balances, amounts or exchange API keys or secrets. Our server also uses blockchain data providers to read the public balances of the addresses you add. We do not use these requests to profile you.

Outside our control. Every third-party or partner service, any network, service, proxy, host or endpoint that you configure or choose, and any service or network between your device and a service, is outside our control and is the responsibility of its operator. Each operates under its own privacy policy, which we encourage you to review. We are not responsible for their practices, availability or accuracy. Data these services return, and data recorded on public blockchains, is public and outside our control.

7. No Analytics, No Advertising, No Tracking

SigmaTracker contains no analytics SDK, no advertising SDK, and no tracking or profiling technology of any kind. We do not sell your data, and we do not share it with data brokers or advertisers.

8. Data You Provide Directly

The information you give the App is, by category: public wallet addresses, exchange accounts you connect, manual accounts or entries, watchlist items, price targets, display names and preferences, and an optional App lock. If you turn App lock on, the App keeps a hash of your PIN in your device's Keychain; Face ID and Touch ID are handled entirely by iOS, and the App never receives your biometric data. All of this is stored on your device; if you turn on iCloud sync, it is also stored in your own iCloud account, which Apple manages and we cannot access; only the categories listed in Section 3 reach our server. Public wallet addresses are, by design, public. The App does not ask for your name, phone number, email address, or any other personal identifier. Retention and deletion are described in Section 3.

9. Children

SigmaTracker is not directed to, and is not intended for use by, children. We do not knowingly collect any information from children.

10. Disclaimers and Changes to This Policy

No warranty. The App is provided "as is" and "as available", without warranties of any kind. Balances, prices and other data come from third-party sources and may be delayed, incomplete or inaccurate, and notifications are best-effort. To the extent permitted by law, we are not liable for any loss, including loss of data or funds, arising from the App, from inaccurate data, or from the acts or omissions of third parties. The App is not financial, investment, tax or legal advice.

Your responsibility. You are responsible for the keys, addresses, endpoints and settings you enter or choose, and for keeping your own backup.

Changes. We may update this policy at any time, for example when features, partners or sources change; the date at the top shows the last revision. Continued use of the App after a change means you accept the current version.

11. Contact

For questions, feedback, or privacy-related inquiries, use the feedback form at sigma9.app/feedback/tracker.

We do not maintain a public support email to reduce spam. Please use the form above.

This Privacy Policy is the authoritative version for the SigmaTracker iOS app.

It is published at a stable public URL — https://sigma9.app/privacy-policy/tracker — and is referenced from the Apple App Store listing and inside the App. Separate privacy policies cover the Sigma9 browser extension (https://sigma9.app/privacy-policy/extension) and any future Sigma9 wallet mobile app; this document applies only to SigmaTracker.

SigmaTracker — watch your public balances. Nothing to sign, nothing to lose.