Privacy policy

This policy applies to the Apex Protocol website (apexprotocol.cloud) and the Apex Protocol mobile application (com.apexprotocol.app), together “Apex,” “we,” or “us.” You can reach us any time at support@apexprotocol.cloud.

The website is deliberately light. It reads only public protocol statistics (such as the current round and total coins mined) and published announcements. It never reads your account, and it asks you for nothing. We do not use advertising or cross-site tracking cookies on the site.

Our hosting provider may process standard technical logs (such as IP address and request time) to serve pages securely and defend against abuse. These are used for operations, not profiling.

To operate the protocol, the app processes:

• Account identity — an email address, verified through Firebase Authentication, used to sign you in and secure your account.
• Participation data — your hash, mining cycles, claims, referrals, cards and quests, which are what the protocol rewards.
• Referral relationships — the invitation code that connected you, so network and team hash can be calculated.
• Device and diagnostic data — limited technical information needed for security, abuse prevention and reliability.

We do not sell your data, and there is no public leaderboard: your standing is not exposed to other users as a ranked list.

We rely on a small number of processors, each handling only what its function requires:

• Supabase — the protocol database and authentication of API requests, protected by row-level security.
• Firebase — account authentication and identity tokens.
• Google Play — app distribution and, where applicable, an advertising network for the optional reward boost.

Account and participation data is retained while your account exists and for as long as needed to run the protocol, meet legal obligations, and resolve disputes. You may request deletion of your account by contacting support; some records may be retained where the law requires.

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. To exercise any of these, write to support@apexprotocol.cloud and we will respond within a reasonable time.

Apex is not directed to children under the age required by your local law to consent to data processing, and we do not knowingly collect their data. If you believe a child has provided us information, contact us and we will remove it.

We may update this policy as the protocol evolves. Material changes will be announced in the app and on the News page, and the “last updated” date above will change.