Privacy Policy

Your data stays yours.

This policy describes what the HabitProofX interface processes, what it never collects, and the third parties you may encounter. It is written for a decentralized, non-custodial dApp, not a bank.

Effective 20 August 2026 · Last updated 20 August 2026

01

Who this covers

This policy applies to the HabitProofX website and client-side application. It does not apply to ProveX, your wallet vendor, RPC operators, or other sites we link to. Those parties have their own policies.

If we operate an optional account sign-in (Google or X), that login is used only to identify a session in the hosted app. It is not KYC for HabitProofX and it is not required to connect a wallet or view public pages.

02

What we never collect

We never ask for, store, or transmit seed phrases, private keys, wallet passwords, bank passwords, payment-app credentials, government ID, Social Security or tax ID numbers, or full payment-card data. A request for any of those is not from this interface.

HabitProofX does not run a custodial account ledger. We cannot freeze, reverse, or view the contents of your wallet beyond public blockchain data and what your browser session already knows.

03

Information processed in your browser

Wallet address. If you connect, the interface reads the address your wallet exposes and, on PulseChain only, public balances of the Streak Vault (any ERC-20 you stake in a live vault). Disconnecting stops further reads from this page. The address is a public blockchain identifier.

Habit reminders. Amount, frequency, payment method preference, settlement network, and local streak marks are stored in your browser’s localStorage under a HabitProofX key. This data does not leave your device unless you back it up or a browser extension reads it. It is not used to pay yield.

Network. The interface reads the wallet’s chain ID so it can refuse writes on unknown networks.

Preferences. Ordinary web storage for UI state (for example a fee-schedule dropdown) may be used. We do not sell this.

04

Information processed if you sign in

Optional authentication may receive a display name, email or handle, and a provider user id from Google or X, plus a session cookie or bearer token so the preview or hosted app can keep you signed in. Password-based email login, if enabled, stores a hashed password on the auth server — not in this client bundle as plaintext.

You can stop using an account by signing out and, where the provider allows, revoking HabitProofX in that provider’s security settings. Wallet use does not require an account.

05

On-chain, IPFS, and network data (public)

If you broadcast a zero-value habit commitment, the transaction hash, your address, and calldata are public on the chosen chain forever. Anyone can index them. That is a property of public blockchains, not a HabitProofX database.

Protocol metadata packed for IPFS (source, ABI, legal hashes) is content-addressed. A public pin is a launch gate. Anyone with the CID can retrieve it from any gateway once pinned. Do not put secrets in metadata. Habit reminders in your browser are not uploaded to IPFS.

RPC endpoints (currently including rpc.pulsechain.com, pulsechain-rpc.publicnode.com, and rpc-pulsechain.g4mm4.io) will see your IP address and the JSON-RPC methods this page sends (for example eth_chainId, eth_accounts, balanceOf). We do not control those operators’ logs. Price data may be fetched from DexScreener’s public API for staked tokens that have a public pair. Tokens with no print are valued at $0 for eligible TVL.

06

Third parties

Categories of independent processors or destinations:

ProveX (ramp, proofs, escrow) at app.provex.com; wallet software you install; PulseChain and Ethereum infrastructure; DexScreener; Google Fonts (typography); authentication providers if you sign in; and the host that serves this website. Each processes data under its own terms. Opening ProveX or a block explorer is your choice.

07

Cookies and similar technology

Essential cookies or local storage may keep an auth session. We do not use advertising cookies or sell personal information as defined under the California Consumer Privacy Act (CCPA/CPRA). We do not serve third-party ad trackers on this interface.

08

Legal bases (EEA/UK)

If GDPR or UK GDPR applies: we process interface telemetry that is strictly necessary for the service (contract / legitimate interests in operating a secure dApp); optional account data on the basis of your request to sign in (contract) and our interest in securing sessions; and on-chain data because you choose to publish it. You may object to processing based on legitimate interests. You may withdraw consent where consent was the basis.

09

Your choices and rights

Disconnect your wallet at any time. Clear this site’s data in your browser to delete local habits. Sign out of any account. You may also have rights to access, correct, delete, or export personal data we actually hold about an account, and to appeal a denial, under applicable US state privacy laws or GDPR. We will not discriminate against you for exercising those rights.

We cannot delete public blockchain records or IPFS pins of protocol metadata. We cannot delete data held only by ProveX, your wallet, or an RPC provider — contact them directly.

10

Retention and security

Local habit data remains until you clear it. Auth sessions last until expiry, sign-out, or revocation. Server logs, if any, should be kept only as long as needed for security and operations. See the Security page for technical measures. No method of transmission is perfectly secure.

11

Children

The interface is not directed at children under 16 (or 13 where that is the statutory floor). We do not knowingly collect personal information from children. If you believe we have, contact us so we can delete account data we control.

12

International transfers

Infrastructure may be located in the United States or other countries. Public RPC and blockchain data are globally visible. If you access the interface from outside the US, you understand that data may be processed in countries with different privacy laws.

13

Do Not Track / GPC

We do not track you across third-party websites for advertising. Where a Global Privacy Control or similar signal is present, we treat it as a request not to sell or share personal information; we do not sell or share in that sense in any event.

14

Changes

We may update this policy. The “Last updated” date will change. Material changes will be reflected on this page. Continued use after an update constitutes acknowledgment of the revised policy.

15

Contact

Privacy requests relating to an optional HabitProofX account can be made through the official interface. Include enough detail to locate the account (never send a seed phrase). Related documents: Terms of Use and Security.

These documents are provided for transparency. They are not legal, tax, or investment advice. If you need advice for your situation, consult a qualified professional in your jurisdiction.