Privacy Policy

Hunch operates a prediction market platform with features such as markets discovery, event trading, portfolio tracking, rewards, referrals, and wallet intelligence.

This Privacy Policy explains what personal information we process, why we process it, how long we keep it, and what rights you can exercise.

This policy applies to data processed through our web app, authenticated APIs, and related services. It does not govern third party websites, wallets, or blockchain networks that have their own terms and privacy notices.

We collect the following categories of data:

• Account and identity data, including Privy user identifiers, linked wallet addresses, and email address if you authenticate with email.
• Wallet and market data, including public onchain addresses, position-related data, venue account status, and trade activity needed to power product features.
• User-provided content, such as wallet labels, private notes, referral or invite codes, and settings you configure in the app.
• Technical and device data, including IP address, browser type, operating system, request metadata, and log-level diagnostics.
• Analytics interaction data, including page views, feature events, funnel states, and reliability telemetry emitted from the app.

We process personal information to:

• authenticate users, connect wallets, and maintain account sessions;
• provide product functionality, including market browsing, trade execution flows, portfolio calculations, and tracker features;
• detect abuse, protect account integrity, and secure API traffic;
• support referral and invite workflows and related attribution logic;
• operate analytics and product diagnostics to improve UX, reliability, and business reporting;
• comply with legal obligations and enforce platform rules.

If you are in the EEA, UK, or other regions requiring a legal basis, we rely on one or more of the following:

• performance of a contract with you;
• legitimate interests such as fraud prevention, product analytics, and service reliability;
• legal obligations where required by applicable law or regulatory process;
• consent, where consent is required and obtained.

We may share data in the following circumstances:

• With service providers that help us operate the platform, including authentication, analytics, hosting, and infrastructure vendors.
• With market, wallet, bridge, or execution partners when necessary to complete user-requested workflows.
• With authorities or counterparties when required for legal compliance, fraud prevention, or dispute resolution.
• In connection with corporate transactions such as a merger, acquisition, financing, or asset transfer.

We currently integrate services and ecosystems that include Privy, Google Tag Manager and Google Analytics, Polymarket, Kalshi, Limitless, and Proof (dflow) related workflows.

Third party policies can be reviewed here: Privy Privacy Policy, Google Privacy Policy, Google Analytics Privacy Controls.

We use cookies and similar client storage mechanisms for security, session continuity, feature state, and analytics.

• hunch_session: secure session token cookie managed by backend authentication flows.
• hunch_csrf: CSRF protection cookie for state changing requests.
• hunch_wallet: selected wallet context cookie used to route wallet-scoped API calls.
• hunch_referral: referral attribution cookie used for referral landing and signup flows.
• localStorage and sessionStorage values for product preferences, analytics deduplication state, and short-lived resume payloads.

You can control or delete cookies in your browser settings. You can also use Google's GA opt-out add-on: Google Analytics Opt-out Add-on.

We retain data for as long as needed to provide services, operate the platform, meet legal obligations, and resolve disputes.

• account and wallet linkage data are kept while your account is active and for a reasonable period after deactivation;
• private notes, labels, and similar user-generated content are retained until deleted by you or removed under our retention rules;
• security and analytics logs are retained according to operational and compliance requirements.

We use a combination of technical and organizational safeguards, including access controls, security headers, session handling, and CSRF protections to reduce risk.

No system is perfectly secure. You should also protect your own accounts and wallets by using strong authentication and safeguarding wallet credentials.

Depending on your location, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing activities.

In certain US states, these rights may include opting out of targeted advertising, sale, or certain profiling uses where applicable.

You can also use in-app controls to manage linked wallets, log out, or request account deletion through available account-management flows.

We and our service providers may process data in countries outside your country of residence, including the United States.

Where required, we use contractual and organizational safeguards designed to protect personal information during international data transfers.

Hunch is not intended for children under 18, and we do not knowingly collect personal information from children.

If you believe a child submitted personal information to us, contact us so we can review and remove it where appropriate.

We may update this Privacy Policy from time to time to reflect changes in product functionality, legal requirements, or data practices.

When we make material changes, we will update the policy date and may provide additional notice through the app.

For privacy questions or rights requests, contact us through official Hunch support channels available in the app and on our website.

To process certain requests, we may need to verify your identity and relationship to the account or wallet.