Scope Scanner — Privacy Policy

Last updated: 2026-09-13 · Version 5.4

What this policy covers

This policy covers two separate things, and the difference between them is the most important sentence in it.

The App — Scope Scanner on your iPhone. It has no account, no sign-up, and no way to send us anything about you. This has not changed and is not going to.
The website at scopescanner.app. It offers one optional thing: a mailing list you may join by typing your email address into a form. Nothing else on the website asks you for anything.

You can use the App forever without ever giving us an email address, and joining the list gives you nothing extra in the App. The list is a way to hear from us, not a way to unlock anything. Sections 1 through 5 describe the App. Section 1B describes the list.

The short version

The App does not collect your personal information. There are no accounts, no sign-up, no analytics, and no tracking. Everything you create in the App — watchlists, alerts, chart settings — is stored only on your own device and is never transmitted to us.

The website collects an email address only if you type one into the mailing-list form. If you never do, we hold nothing about you at all.

1. Information the App collects

None.

There is no account system in the App, so nothing in it identifies you to us. The App does not collect your name, email address, phone number, contacts, photos, location, device identifiers, advertising identifiers, or any usage or behavioural data.

The App contains no analytics, crash-reporting, advertising, or attribution software. It has no third-party tracking SDKs of any kind.

1B. The website’s mailing list

The one place we ask you for anything. It is on the website, never in the App.

The mailing list is not open yet. The website currently has no sign-up form and collects no address from anyone. This section describes the list as it will operate when it opens, and is published in advance so that nothing about it is decided after the fact. Until then the only way to reach us is the support address in Section 9.

What we collect. Your email address, and the date you gave it. Nothing else — no name, no company, no location, no tracking pixel telling us whether you opened a message.

Why. To tell you when the App is released, and occasionally when something material changes. That is the entire purpose.

How joining works. You type your address and tick a box that is not ticked for you. We then send one message asking you to confirm. If you do not confirm, the address is deleted and you hear nothing further — an unconfirmed address is never mailed and never kept. This is deliberate: it means nobody can add your address to our list but you.

Leaving. Every message carries an unsubscribe link that works in one click, without logging in and without being asked why. Unsubscribing deletes the address rather than flagging it; there is no suppression list holding your details afterwards.

What we never do with it. We do not sell it, rent it, share it for advertising, or use it to build a profile of you. It is not connected to anything you do in the App, because there is no connection between the two to make.

Who else touches it. Nobody, today. The list is not open, no address has been collected, and no delivery service has been engaged. When the list opens, sending email will require one — this section will name that provider and link to their privacy policy before a single address is taken, not after.

1A. No tracking technologies of any kind

The section above says we collect nothing. This section says how, because "we don’t collect data" is a claim anyone can type and the specifics are what make it checkable.

The App contains none of the following:

analytics or product-measurement SDKs of any kind;
crash or performance reporting services;
advertising, attribution, or marketing SDKs;
tracking pixels, web beacons, or embedded tags;
session-replay or screen-recording tools;
device fingerprinting of any kind;
cookies or any equivalent local identifier used to recognise you;
the advertising identifier (IDFA) or the vendor identifier (IDFV) — AppTrackingTransparency is not used, because there is nothing to ask you for;
push-notification tokens — alerts are local notifications generated on your device;
any social-media, login, or single-sign-on integration;
any first-party server, because none exists.

The App has no way to recognise you, distinguish you from another user, or link two sessions together — not as a policy, but because nothing in it assigns, stores, or transmits an identifier.

This list is verified against the App’s declared dependencies and its source before each release, using the procedure recorded in legal/README.md. If any item on it ever ceases to be true, this policy is updated before that version ships.

2. Information stored on your device

The App saves the following locally, using your device’s standard app storage. It stays on your device, is included in your device backups if you have those enabled, and is deleted when you delete the App:

Stored	Why
Your watchlist symbols	so your list persists between sessions
Alert thresholds and armed state	so alerts keep working after a restart
Sniper Scope slots, chart type, timeframe, EMA settings	so your layout persists
Whether alerts are enabled	to honour your preference
Cached market data, contract and market-cap reference data	to reduce network use and respect data-source rate limits
Cached news headlines — title, publisher, timestamp, link	so headlines are present at launch, and to avoid re-requesting them from publishers
Which version of these documents you accepted	so you are re-prompted only when they materially change, rather than every launch
When your 30-day Pro trial started	so the App knows whether it is still running. It is a single number, kept in your device’s keychain rather than ordinary app storage so that it survives reinstalling the App — otherwise the trial would restart every time. It records a date and nothing else
Whether the upgrade screen has been shown	so it appears once and not on every launch

Cached headlines are kept for up to 90 days and then deleted automatically. Everything else above persists until you delete the App, except cached market data, which is refreshed or discarded as it ages.

We cannot see any of it.

3. Network connections the App makes

To show live market data, the App connects directly from your device to these third parties:

Service	Purpose
Binance.US (`api.binance.us`, `stream.binance.us`)	prices, trading volume, historical candles
CoinGecko (`api.coingecko.com`)	market-capitalization figures, token contract reference data, and asset names used to match headlines to coins
News publishers (`decrypt.co`, `cryptobriefing.com`, `cryptoslate.com`, `coinjournal.net`)	crypto headlines, read as public RSS feeds

Nothing is contacted before you agree. On first launch the App shows this policy, the Terms and the Disclaimers and does not start any part of itself until you accept them — so no request is made to Binance.US, to CoinGecko, or to any publisher, and no third party receives your IP address, until after you have agreed. That is enforced in the App’s code rather than promised here: the screens that make these connections are not created at all until acceptance is recorded.

These requests are made directly by your device to those services — they do not pass through any server we operate, because we do not operate one. As with any internet request, those services will necessarily receive your IP address and standard connection metadata, and their own privacy policies govern what they do with it. We have no control over, and no access to, that.

We do not send them anything identifying you, and we do not receive anything back from them about you.

If you tap a token’s contract link or a news headline, your device opens a third-party block explorer or the publisher’s own website in your browser. That is an ordinary web visit governed by that site’s own policies.

3A. Purchases

If you buy Pro, the purchase is handled entirely by Apple. Payment details are given to Apple, never to us — the App has no payment form, no card fields, and no way to receive money directly. We are told by your device only whether this Apple Account owns Pro. We do not learn who you are, what you paid, or how you paid, and there is no account of yours on our side to attach any of it to.

Whether you own Pro is read from Apple each time the App needs to know, rather than stored by us as a record about you.

4. Notifications

Alerts are generated entirely on your device. The App uses local notifications only — there is no push server, no notification token, and nothing about your alerts is transmitted anywhere. You can revoke notification permission at any time in your device settings.

5. Children

The App is not directed to children, is not designed to appeal to them, and contains nothing aimed at them. It is intended for adults of legal age to enter contracts and to transact in digital assets where they live — the Terms of Use require you to be at least 18, and the App is rated accordingly on the App Store.

We do not knowingly collect information from a child. The App collects information from no one at all — there is no account to create, no form to fill in, and no data path from the App to us. Deleting the App removes everything it ever stored, all of which was on the device.

The website’s mailing list is the single exception, and it is not aimed at children either. If we learn that an address on the list belongs to someone under 13, we delete it. A parent or guardian who believes a child’s address is on the list can have it removed by using the unsubscribe link in any message, or by writing to us at the address in section 9 — we will delete it without asking for proof of anything.

If you believe a child is using the App, the remedy is on the device — remove it, or restrict it through your device’s own parental controls. There is nothing for us to delete on our side.

6. Your rights and choices

If you have never joined the mailing list, we hold no data about you and there is nothing for us to disclose, correct, export, or delete. You retain full control of everything the App stores:

Delete everything: delete the App. All locally stored data is removed with it.
Stop notifications: disable them in the App, or revoke permission in device settings.
Stop all network activity: close the App, or disable its network access in device settings.

If you have joined the mailing list, we hold your email address and the date you gave it, and your rights over it are real rather than theoretical:

See it: write to us and we will tell you what we hold, which is that address and that date.
Correct it: unsubscribe and join again with the corrected address.
Delete it: use the unsubscribe link in any message. It deletes the address rather than flagging it, so the deletion is the same act as the unsubscribe and needs no request to us.
Take it with you: the address is one you already have. There is nothing to export that you do not already possess.
Object: unsubscribing is the objection, and it takes one click.

Where laws such as the GDPR or the CCPA/CPRA apply, they concern personal information held by a business. Ours is one email address per subscriber, held only with consent given by ticking an unticked box and confirming a message we send.

Stated in the form those laws use:

Categories of personal information collected in the past 12 months: none from the App. From the website, email addresses, and only from people who asked to receive email.
Categories disclosed for a business purpose: email addresses, to the delivery service named in section 1B, for the sole purpose of delivering the messages you asked for.
Categories sold or shared: none. We do not sell personal information and do not share it for cross-context behavioural advertising. There is no advertising in the App or on the website.
Sensitive personal information collected: none.
Retention: an address is kept until you unsubscribe, at which point it is deleted. An address that is never confirmed is deleted rather than kept. What the App stores stays on your device, and Section 2 says for how long.
Automated decision-making or profiling: none. Every user sees the same rankings computed from the same public data. Nothing is tailored to anyone, and the mailing list is not segmented.

Do Not Track and Global Privacy Control. We honour both by construction: there is no tracking to signal against. No request from the App carries a tracking preference because no request of ours carries anything about you at all.

In respect of the App we are not a data controller or a business, because no personal information about you reaches us through it. In respect of the mailing list we are the controller, and section 1B says what that involves. When your device contacts Binance.US, CoinGecko, or a publisher, that party receives your IP address as the recipient of your own request, and their policy governs what they do with it — a relationship between you and them, in which we are not a party and have no visibility.

7. Security

Data stored by the App is protected by your device’s own operating-system protections, including device encryption where you have it enabled. Because nothing is transmitted to us, there is no account of yours for us to lose. Connections to data sources use encrypted transport (HTTPS/WSS).

7A. Where the App is offered

At launch the App is offered only in the United States. This policy is written for that. If distribution is ever widened, this policy will be revised before that happens — see Section 8 — rather than left to be interpreted against laws it was not written for.

8. Changes to this policy

If the App’s data handling ever changes — for example if an account system or analytics were introduced — this policy will be updated and the version and date above revised before the change ships. Material changes will be brought to your attention in the App.

9. Contact

support@scopescanner.app Scope Labs LLC, 10412 China Spring Rd Ste F PMB 1120, Waco, TX 76708-5685