Privacy Policy

This Privacy Policy explains how The Signal ("we," "us") collects, uses, shares and protects personal information when you use https://www.thesignalcrypto.com and related services (the "Service"). It should be read with our Terms of Service. If you have questions, contact hello@thesignalcrypto.com.

Information you give us

• Account details: name, email address, password (stored only as a secure hash by our authentication provider), username.
• Profile details you choose to add: photo, bio, city, time zone, display currency, and whether to appear on the member map.
• Content: posts, comments, likes, polls, direct messages, Alpha Lab submissions, live-call chat, hearts and reactions.
• Live calls: if you join with camera, microphone or screen sharing on, your video, voice and shared screen, which are recorded.
• Mobile number, if you apply a discount: we keep a scrambled copy and the last four digits, so each person can claim one discount and can't claim more with multiple accounts. We don't send text messages other than the one-time verification code.
• Push notifications, if you turn them on for a device: the address your browser gives us for that device (a push subscription, which includes the browser's push service and encryption keys) and the browser name. Turn them off anytime in Signals → Breakout alerts or in your browser or phone settings, and we delete it.
• Free newsletter sign-ups (if you're not a member): your email address, when you signed up and confirmed, and a scrambled copy of your internet (IP) address used only to block spam sign-ups. Unsubscribe anytime with the link in any edition, and we stop emailing you.
• Communications with us, and your agreement to these policies (with the date and version).

Information from sign-in providers

• If you sign in with Google, we receive your name, email address and profile picture from Google. We do not receive your Google password and do not access your Gmail, contacts, Drive or other Google data.

Payment information

• Payments are handled by Stripe. We receive your subscription status, billing history, the last four digits and brand of your card and your billing country, but never your full card number.

Information collected automatically

• Technical data such as IP address, browser and device type, pages visited and timestamps, recorded in our hosting and security logs.
• Usage data inside the Service, such as RSVPs, lesson progress, points, levels, online presence and notification status.
• Approximate location (city level) only if you add a city to your profile, which we convert to rough map coordinates.

• To create and secure your account, sign you in, and provide the Service you ask for.
• To process payments, manage subscriptions, apply invite-code discounts and track referrals for our referral program.
• To run live calls, record them and publish replays to members.
• To send account emails (confirmations, password resets), call reminders, "we're live" alerts and beta invites. You can turn off non-essential emails in Settings.
• To send The Signal newsletter: daily or weekly for members (choose or turn it off in Settings), and weekly for free subscribers who confirm their email. Every edition has an unsubscribe link.
• To send the breakout alerts you choose: in the app, by email, and as push notifications on the devices where you turn them on. Change or turn them off anytime in Signals → Breakout alerts.
• To show your profile, content and level to other members, and to power search, leaderboards and the member map (if you opt in).
• To keep the community safe: moderation, preventing fraud and abuse, and enforcing our Terms.
• To maintain, debug and improve the Service.
• To comply with legal obligations.

Where these laws apply, we process personal information to perform our contract with you (providing the Service and membership), for our legitimate interests (security, improving the Service, preventing abuse), with your consent (for example optional emails, appearing on the map, and appearing on camera in recorded calls, which you can withdraw), and to comply with legal obligations.

We do not sell your personal information, and we do not share it for targeted advertising. We share it only as follows:

Mobile numbers are never shared with third parties or affiliates for their marketing or promotional purposes. We use them only to verify your number, through our verification provider (Twilio).

• With other members, as part of the community: your name, username, photo, bio, level, posts, comments, live-call participation and recordings, and (if you opt in) your city on the member map.
• With service providers who process data for us under contract, including: Supabase (database, authentication, file storage); Vercel (website hosting and logs); Stripe (payments); Resend (email delivery); LiveKit (live video calls); Mux (call recordings and video hosting); Twilio (sending phone verification codes and checking the number type); your browser's push service, such as Apple, Google, Mozilla or Microsoft (delivering push notifications you turn on; the alert is encrypted so only your device can read it); Google (sign-in, if you use it); Anthropic (AI summaries of public news articles and writing our newsletter from public economic data, news and web research, which contain no member data); and OpenStreetMap's Nominatim (turning a city name you enter into map coordinates).
• Market data providers. Some live prices load directly in your browser from Coinbase's public data feed, which means Coinbase receives your IP address as part of that connection. Embedded Instagram videos are served by Meta, which may set its own cookies.
• For legal reasons, if required by law or to protect the rights, safety or property of The Signal, our members or others.
• In a business transfer, such as a merger, acquisition or sale of assets, subject to this policy.

We use essential cookies to keep you signed in and to remember an invite code you followed. We use your browser's local storage for preferences such as theme, Signals settings, price alerts and dismissed notices; these stay on your device. We do not use advertising cookies or third-party ad trackers. Third-party embeds (such as Instagram) may set their own cookies under their policies.

We keep account information while your account is active. Content you post and call recordings may remain part of the community and course library after you leave unless you ask us to remove content you created. Billing records are kept as long as tax and accounting laws require. Logs are kept for a limited period for security. When information is no longer needed, we delete or anonymize it.

• Update your profile, photo, map visibility, currency and email preferences any time in Settings.
• Cancel your membership from Settings → Billing.
• Keep your camera and microphone off in live calls if you do not want to appear in recordings.

Depending on where you live (for example under the GDPR, UK GDPR or California's CCPA/CPRA), you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, email hello@thesignalcrypto.com. We will verify your identity and respond within the time the law requires. We will not discriminate against you for exercising your rights. You may also complain to your local data-protection authority.

We use industry-standard safeguards, including encrypted connections (HTTPS), hashed passwords, row-level access controls in our database, and limited staff access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it private.

We and our service providers may process information in the United States and other countries whose data-protection laws may differ from those where you live. Where required, we rely on appropriate safeguards such as standard contractual clauses.

The Service is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

When you choose "Continue with Google," we request only your basic profile (name, email address and profile picture) to create and sign in to your account. We use this information only to provide sign-in and your profile on the Service, do not sell it, do not use it for advertising, and do not transfer it to others except the service providers listed above as needed to run the Service. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke The Signal's access at any time from your Google Account's security settings.

We may update this policy. If changes are material we will let you know, for example by email or by asking you to review and agree when you next sign in. The "Last updated" date at the top shows when it last changed.

For privacy questions or requests, email hello@thesignalcrypto.com.