HashDesk
Privacy Policy
This policy explains what data the HashDesk app (com.hashdesk.app, iOS and Android, "the App") handles, who receives it and why. The App is provided by TEF SYSTEMS LTD, Paphos, Cyprus ("we", "us"). Contact: support@hashdesk.org.
1. The short version
- HashDesk is a simulator. Dollars and BTC in the App are virtual: they cannot be withdrawn, exchanged for money or sent anywhere, and the App does not mine cryptocurrency.
- There are no accounts and no sign-in. We do not ask for your name, email, phone number or address, and we do not access your contacts, photos, location (GPS) or files.
- Your simulator account is kept on your device; on iPhone and iPad a copy is kept in your own iCloud, which we cannot read.
- Analytics, attribution and advertising services built into the App receive device identifiers, device information, approximate location derived from your IP address and how you use the App, as described in section 4.
- Payments for the optional "No ads" purchase are handled by Apple or Google; we never see your card details.
2. Data that stays on your device
The App stores on your device, and does not send to us:
- your simulator account: a random account ID, virtual balances, contracts, the wallet history, the pool, level, daily bonus and task progress, price calls; your nickname and initials are computed from the random account ID and shown only to you;
- the last price and difficulty readings of the Bitcoin network (so the App works offline);
- settings (vibration, notifications), the schedule of local notifications, the frequency counters of ads;
- your "No ads" entitlement and a random installation token used to match store purchases to this installation.
Deleting the App deletes this data. On Android, if system backup is on, Android may include this data in your device backup to your Google account; that backup is managed by Google and your device settings, not by us.
3. Cloud copy (iCloud, iPhone and iPad)
On iOS the App keeps a copy of your simulator account in the iCloud key-value storage of your Apple Account, so you can continue after reinstalling or on another device. The copy contains only the App's own data (the random account ID, virtual balances, contracts, wallet history, level, the time of saving and the App's build number), and a previous copy if another device replaced it. It is stored by Apple in your iCloud; we have no access to it. You can delete it in iPhone Settings → [your name] → iCloud → Manage Storage. On Android the App does not use a cloud save at the moment.
4. Services that receive data
4.1 Analytics and crash reports: AppMetrica (YANDEX LLC)
The App sends AppMetrica: a device ID and an installation ID generated by AppMetrica; on Android, the advertising ID (on iOS the App turns the collection of the advertising ID off); device model, operating system, language, screen, app version; country and city derived from your IP address; events of the App (for example: account started, contract bought, exchange, payout, price call made and its outcome, daily bonus, task reward, level reached, pool scheme chosen, notification opened, outcome of the cloud save, an ad offered and its outcome, "No ads" screens and purchase results); rough profile attributes (level, VIP tier, number of active contracts, a rough bracket of the simulated rank and of the virtual portfolio); the revenue of each ad shown (network, format, ad unit, amount); "No ads" purchases (product, price, currency, store order ID); crash reports and errors. Purpose: analytics, app stability. Policy: https://yandex.com/legal/confidential/
4.2 Product analytics: Lotsman (operated by us)
Lotsman is our own analytics service; its server (in.lotsman.app) is operated by us and hosted by DigitalOcean in Frankfurt, Germany. It receives the same events, profile attributes, ad revenue (including the network, creative and demand source of an ad) and "No ads" purchases as AppMetrica, plus: a random anonymous installation ID (on installations where AppMetrica answered first, it is built from AppMetrica's device ID), the random installation token of section 2 as a user ID, the installation's attribution from Adjust (network, campaign, cost, Adjust ID), device model, OS and app version, language, region, time zone and the country derived from the IP address of the request (the IP address itself is not stored). On iOS the anonymous ID is kept in the Keychain and survives reinstalling the App. Lotsman does not use advertising identifiers. Purpose: analytics.
4.3 Install attribution: Adjust (Adjust GmbH)
Adjust measures which advertising campaign brought an installation. It receives: the advertising ID (on iOS the IDFA only if you allow tracking in the App Tracking Transparency prompt; otherwise the identifier for vendor), on Android also the app set ID and the Google Play install referrer; device model, OS, language, mobile operator, IP address; sessions; a few milestone events (account started, rewarded ad watched, level reached); ad revenue and "No ads" purchases; and the Lotsman anonymous ID (on iOS only if you allow tracking). Purpose: attribution, analytics, fraud prevention. At the moment Adjust is switched off in the App and receives nothing; we switch it on when we start measuring advertising campaigns. Policy: https://www.adjust.com/terms/privacy-policy/
4.4 Configuration and A/B tests: Google Firebase (Google LLC / Google Ireland Ltd)
Firebase Remote Config and Firebase Installations receive an installation ID, app and OS version, language, country and time zone, to deliver the App's settings and experiments. Google Analytics for Firebase is used only to run those experiments and to count revenue: it collects an app instance ID (on iOS also the identifier for vendor), first open, sessions, screens, approximate location derived from the IP address, the revenue of ads shown and, on iOS, the transaction ID of a "No ads" purchase. The collection of the advertising ID, ad personalisation signals and the sharing with Google ad networks are turned off in the App. Policy: https://policies.google.com/privacy
4.5 Advertising: AppLovin MAX and its partner networks
The App shows ads through AppLovin MAX (AppLovin Corp.), which works with these ad networks: Google AdMob, Meta Audience Network, InMobi, Mintegral, Liftoff (Vungle), Moloco, Pangle, Unity Ads, Yandex Ads and BIGO Ads. They receive: the advertising ID (on iOS the IDFA only with your permission), IP address and approximate location, device model, OS, language, screen and connection type, interactions with ads (impressions, clicks, completed videos), diagnostic data and your consent choices. They use this data to show ads, limit how often you see them, measure them and prevent fraud, and some of them to personalise ads according to your choices. Each network is an independent controller of the data it collects under its own policy: AppLovin, Google AdMob, Meta Audience Network, InMobi, Mintegral, Liftoff (Vungle), Moloco, Pangle, Unity Ads, Yandex Ads, BIGO Ads.
Ads are of three kinds: videos you choose to watch for an in-App reward (a boost, a doubled bonus and the like), and, where enabled, a full-screen ad after a price call result, an ad when you return to the App and a banner on the Market tab. Rewards from ads are virtual only.
4.6 Consent and tracking choices
Where the law requires it (for example in the EEA, the UK and Switzerland), the App shows Google's consent form (User Messaging Platform) before ads start. The App does not yet have a menu item that opens this form again; to change or withdraw your consent, write to us (section 9), and you can always limit ad tracking with the settings in section 6. Withdrawing consent does not affect what was done before it. On iOS the App asks for permission to track through Apple's App Tracking Transparency prompt; if you decline, the advertising identifier is not shared and the Lotsman ID is not sent to Adjust.
4.7 Market data
The App reads public Bitcoin price and network data from Coinbase Exchange, Kraken, CoinGecko, mempool.space and blockchain.info. These requests contain no identifier of you or of your device; like any web request, they reveal your IP address to those servers.
4.8 Purchases
The "No ads" purchase (a week, or forever) is processed by the Apple App Store or Google Play under their terms. We receive the store's confirmation (product, order ID, price, currency, purchase time) and the random installation token attached to the purchase; we use it to grant the right, restore it and count revenue (sections 4.1–4.4). We never receive your payment details.
4.9 Notifications and ratings
Notifications are local: the App schedules them on your device (payouts, finished contracts, the daily bonus, a price call result, the difficulty retarget). There is no push server and no push token. The App may ask the system to show Apple's or Google's own rating prompt; we do not see who rated or how.
4.10 Support emails
If you write to us, we receive your email address and what you send, and use them only to answer you.
5. Why we process data (legal bases)
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Running the App: settings, experiments, the cloud copy, purchases | sections 3, 4.4, 4.8 | performance of a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) |
| Analytics and stability | 4.1, 4.2, 4.4 | legitimate interests (improving the App) |
| Advertising and attribution | 4.3, 4.5 | your consent where the law requires it (Art. 6(1)(a)), otherwise legitimate interests |
| Answering you | 4.10 | legitimate interests; legal obligations (Art. 6(1)(c)) for deletion requests |
We do not sell data for money. Sharing identifiers with advertising partners (section 4.5) may count as "selling" or "sharing" under some US state laws; you can limit it with the choices in section 6.
6. Your choices
- Tracking (iOS): answer the App Tracking Transparency prompt, or change it later in Settings → Privacy & Security → Tracking.
- Advertising ID (Android): delete or reset it in Settings → Google → Ads (or Privacy → Ads).
- Consent form: where it is shown, you make your choice in it; to change or withdraw it later, write to us (section 9).
- Notifications: the Notifications switch in the App's Profile or your system settings.
- Ads: the optional "No ads" purchase turns off the full-screen ads and banners; videos for rewards stay, and you choose whether to watch them.
- Local data: delete the App; the iCloud copy — see section 3.
- There is no switch in the App for analytics.
7. Retention
Data on your device stays until you delete the App. AppMetrica, Adjust, Google and the ad networks keep data for the periods set in their policies. Lotsman keeps data for as long as it is needed for the analytics of the App. Support emails are kept for up to 24 months after the last message, unless the law requires us to keep them longer.
8. Children
The App is not directed to children. It is not meant for users under 13, or under 16 in the European Economic Area, and we do not knowingly collect data of children.
9. Your rights and deleting your data
Depending on where you live, you may have the right to access, correct, delete or port your data, to object to or restrict its processing, and to withdraw consent; you may also complain to your data protection authority.
There is no account, so we cannot find your data by name or email. To ask for deletion, write to support@hashdesk.org with the subject "Delete my data" and give what helps us find your installation: the device model, the App version, the platform, the approximate date of installation and, if you can, your advertising ID. We will delete what we hold in Lotsman and ask AppMetrica, Adjust and Google to delete their data for that installation. For ad networks you can also contact them directly (section 4.5).
10. Transfers and security
The providers in section 4 may process data outside your country, including in the United States and Russia; where required, transfers rely on the providers' safeguards such as standard contractual clauses. Data is sent over encrypted connections (HTTPS).
11. Changes
We will post a new version of this policy here with a new effective date; for significant changes we will tell you in the App or on the store page.
12. Contact
TEF SYSTEMS LTD, Paphos, Cyprus, support@hashdesk.org.