Privacy policy

Who is responsible

The controller of your personal data is Zaum International Private Limited (registration C-0423/2014), Zimm Building, Majeedhee Magu Road, Male' 20160, Maldives, which operates KlineO (“we”, “us”). You can reach us about privacy at info@klineo.io.

This policy covers the klineo.io website, the LiquidArena app at app.klineo.io, the @KlineoPoolBot Telegram bot and the cards they generate. Third-party services you use alongside KlineO, such as your wallet or Telegram, have their own privacy policies.

What we collect and why

When you visit klineo.io

The website has no accounts, forms, cookies, analytics or third-party scripts. Like any website, our hosting provider receives technical request data (your IP address, browser user agent, the page requested and the time) to deliver pages and protect the service against abuse.

When you use the LiquidArena app

Your analytics choices

Optional PostHog analytics do not start until you explicitly allow them. Declining does not block the app's core features. Session replay is a separate, optional choice and also requires analytics to be allowed; allowing analytics alone does not enable replay.

After opt-in, a random identifier in your browser's local storage lets us recognise the same browser across visits and measure product funnels and returning use. It does not tell us your real-world identity, and we do not link it to a wallet address, email address or sign-in token.

Analytics use route names such as /pool/:chain/:address instead of full page URLs. We exclude wallet addresses, signatures, session tokens, URL queries, search terms and other free-form input from optional analytics and replay. IP address collection and location enrichment are disabled for these analytics. Service providers still receive the technical network requests needed to deliver their service.

You can allow, decline or withdraw analytics and replay separately in Settings. Withdrawing analytics also stops replay and clears optional analytics identifiers from this browser. Withdrawing replay alone stops recording while leaving your analytics choice in place. Your choice is remembered so we can honour it. Do Not Track and Global Privacy Control override any opt-in while those browser signals are active.

Withdrawing consent stops future optional collection; it does not automatically delete events or recordings already received. You can ask us about access or deletion at info@klineo.io. The age and jurisdiction acknowledgement is separate from these analytics choices.

When you use @KlineoPoolBot

For each Telegram group that adds the bot, we store the group's chat ID, the pool and chain it follows, its alert settings (such as the minimum swap size and rival pools) and the ID of the leaderboard message it keeps pinned. We process the commands people send to the bot in the group to respond to them. The bot does not message people privately first.

When you contact us

If you email us, we use your email address and the content of your message to reply and keep a record of the conversation.

Public blockchain data

KlineO computes its metrics from public blockchain data that anyone can read, such as pools, holders, transfers, swaps and liquidity locks. A wallet address can be personal data if it can be linked to a person. We use this data only to compute and publish measurements about pools and wallets, including early-buyer and funding-link analysis. We do not combine it with off-chain identity information, and our labels describe metrics, never anyone's intentions.

If you own a wallet, you can opt it out of wallet roasts and wallet cards by signing in with it. Pool-level metrics computed from public data are not affected. Data recorded on a blockchain is permanent and outside our control; we cannot change or delete it.

What we never do

• We do not sell or rent personal data.
• We do not use advertising trackers, cross-site tracking or advertising cookies.
• We do not ask for your name, email address or identity documents to use the app.
• We do not post on your behalf, on Telegram or anywhere else.
• We will never ask for your seed phrase or private key.

Legal bases

Where data protection laws such as the GDPR or UK GDPR apply, we rely on these legal bases:

• Performing our contract with you: sign-in, check-ins, watchlists, alerts, disputes, cards and the bot settings you choose.
• Legal obligations: sanctions screening, restricting access from prohibited jurisdictions, and responding to lawful requests.
• Legitimate interests: computing and publishing measurements from public blockchain data, keeping the services secure and free from abuse, and measuring basic first-party aggregate usage. We have weighed these interests against your rights, and you can object at any time.
• Consent: optional PostHog product analytics and, separately, optional session replay. You can withdraw either choice in Settings at any time without affecting earlier processing.

Who we share data with

We share personal data only as needed to run the services, with providers bound to protect it:

• Amazon Web Services, for hosting, content delivery, databases and logs;
• PostHog US Cloud, for optional product analytics and masked session replay, only for the choices you enable;
• blockchain node and data providers, which receive requests about public addresses and pools so we can read on-chain data;
• WalletConnect, if you connect a wallet through it, which relays messages between the app and your wallet;
• Telegram, which delivers the bot's messages in the groups that use it; and
• our email provider, for messages you send us.

Token logos and metadata are fetched by our servers from public sources, so your browser does not contact those sources and we share none of your data with them. We may also disclose data where required by law or a valid legal request, to protect our rights, users or the public, or to a successor in a reorganisation, merger or sale of the business, which will remain bound by this policy.

International transfers

We are based in the Maldives and our providers operate servers in several countries, so your data may be processed outside the country where you live. Where the law requires, we protect these transfers with appropriate safeguards, such as the European Commission's standard contractual clauses, and you can ask us for a copy.

Our optional PostHog analytics and replay project uses US Cloud. If you opt in, the data sent to that project is processed in the United States.

How long we keep data

• Sign-in sessions expire after 7 days, or earlier when you sign out.
• A wallet opt-out is kept for as long as the wallet stays opted out. Opting back in removes it.
• Check-ins, watchlists, alerts, disputes and cards are kept while you use the services and for as long as needed for their purpose, such as keeping rankings and battle results accurate. After that they are deleted or anonymised.
• First-party usage counters are kept in aggregate form; their daily wallet hashes cannot be linked across days.
• Optional PostHog events and recordings are retained under the project's configured retention settings for product analysis and troubleshooting. Browser identifiers can link opted-in visits from the same browser until you withdraw analytics or clear its storage. Withdrawing consent stops new collection; contact us to request deletion of data already received.
• Server and security logs are kept for a short period for security and troubleshooting, then deleted.
• Sanctions-screening records are kept as long as the law requires.
• Bot settings are kept until the bot is removed from the group or an administrator asks us to delete them.
• Data stored in your browser stays until you sign out or clear it. See the Cookies and storage notice.

Your rights

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent. You also have the right not to be discriminated against for exercising these rights.

To make a request, email info@klineo.io. For wallet-related data, we may ask you to prove control of the wallet by signing a message. Optional analytics use a random browser identifier instead of your wallet or email address; contact us for help identifying the relevant records. We respond within one month, or sooner where the law requires. Some data may be kept where the law requires it, and data on a blockchain cannot be erased by anyone.

Automated measurements and checks

Scores, tiers, labels and rankings are calculated automatically from public data about pools and wallets. They are measurements, not decisions about you that produce legal effects. Access restrictions based on location and sanctions screening are also automated. If you believe a check or label affecting you is wrong, contact us or use the dispute process, and a person will review it.

Security

We use encryption in transit, access controls based on least privilege, signed and expiring session tokens, and monitoring to protect data. No system is completely secure. If a breach affecting your personal data occurs, we will notify you and the relevant authorities where the law requires.

Children

KlineO is only for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has used the services, contact us and we will delete the related data.

Changes to this policy

We will update this policy when our services or practices change. The effective date and version at the top change when we do, and we will give notice of material changes in the app before they take effect.

Contact and complaints

Privacy questions and requests: info@klineo.io.

If you are unhappy with how we handle your data, please contact us first. You can also complain to the data protection authority where you live or work.