Legal

Privacy Policy

MACH · Nordic Future LLC · Effective November 2, 2026

The short version

We collect only what MACH needs to work: your sign-in, wallet address, username and what you do in the app.
We never see your wallet's private key.
We don't sell or share your personal data for advertising, show ads, or track you across other apps or sites.
You can export your key, hide from the pilots board and delete your account from Settings.

01What this covers

This Privacy Policy explains how Nordic Future LLC ("we", "us") collects, uses and shares information when you use the MACH app, this website and related services ("MACH"), and the choices you have. It is part of our Terms of Service.

02What we collect

Information you give us or create in MACH

Account. When you sign in with Google, X or email, our sign-in provider Privy gives us an account identifier and, depending on the method, your email address or social account handle.
Wallet. Your wallet's public address. Your private key is secured by Privy and is never shared with us.
Profile. Your username, whether you appear on the pilots board, and the strategies you save, share or favorite.
Trading activity. The trades, bots, flight plans, copies, limits and results MACH manages for you.
Chat. The messages and images you send to the assistant, and its replies.
Support. What you send us when you contact us.

Information collected automatically

Notifications. Push and Live Activity tokens, so we can send trade updates to your phone.
Technical data. Basic logs such as request times, errors, device type, app version and IP address, to keep MACH secure and working. In demo mode we use a random device identifier to apply daily limits.

Public blockchain data

Balances, trades and transfers on Hyperliquid are public on its blockchain. MACH reads public data, including the public trading history of accounts you can copy, to show rankings and run copy trading.

We don't collect your contacts, photos (beyond images you choose to send in chat), precise location or advertising identifiers. This website doesn't use advertising or analytics cookies.

03How we use it

to provide MACH: your wallet, deposits, trades, bots, copies, sends, strategies and the pilots board;
to generate AI responses and market reads;
to send notifications you've turned on;
to keep MACH secure, prevent fraud and abuse, and enforce our Terms;
to fix problems and improve MACH;
to comply with legal obligations and respond to lawful requests.

Where the law requires a legal basis (for example in the EEA or UK), we rely on performing our contract with you, our legitimate interests in running and securing MACH, your consent where we ask for it, and legal obligations.

We share data only with the services that make MACH work, and only what each one needs:

Privy: sign-in and wallet security;
Anthropic: processes chat messages and market data to generate the assistant's responses (under terms that don't allow it to train on this data);
Hyperliquid: orders and transfers are sent to Hyperliquid and recorded publicly on its blockchain;
Circle and LI.FI: deposits, bridges and swaps you start;
Apple: push notifications, Live Activities and App Store purchases;
Hosting and database providers (such as Oracle Cloud and Neon) that run MACH's servers.

Your username, shared strategies and pilots board results are visible to other MACH users. We may disclose information if the law requires it, to protect the rights, safety or property of users, MACH or others, or as part of a merger, acquisition or sale of assets (in which case this policy continues to apply). We don't sell personal data, and we don't share it for cross-context behavioral advertising.

05How long we keep it

We keep your data while your account is open. When you delete your account, we delete your profile, strategies, chats, tokens and trading records from our systems within 30 days, except where we must keep something to meet legal, tax, security or fraud-prevention obligations. Data recorded on public blockchains can't be deleted by anyone.

06Your choices and rights

Turn notifications, Live Activities and widgets on or off in Settings or iOS Settings.
Hide yourself from the pilots board.
Export your wallet's private key, or delete your account, from Settings.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct personal information and not to be discriminated against for using these rights; we don't sell or share personal information. To make a request, contact us at support@trymach.app. We'll verify your request and respond within the time the law requires. You may also complain to your local data protection authority.

07International transfers

We're based in the United States, and our providers may process data in the US and other countries. Where required, we use appropriate safeguards, such as standard contractual clauses, for transfers.

08Security

We protect data with encryption in transit, encrypted storage for sensitive keys, and limited access. No system is perfectly secure, so keep your sign-in methods and any exported key safe.

09Children

MACH is for adults 18 and over. We don't knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we'll delete it.

10Changes to this policy

If we change this policy in a material way, we'll tell you in the app or by email before the change takes effect.

11Contact

Privacy questions or requests? Contact Nordic Future LLC at support@trymach.app.