Privacy

Draft of October 7, 2026 · applies to alfalfa.trade, app.alfalfa.trade and the alfalfa app

In one paragraph. alfalfa has no accounts and no passwords: you are a wallet address. The only email we keep is one you give us for early access. We keep what it takes to run rooms — your public key, what is said in rooms (for a while), which coins were posted in which room (for 90 days), a push token if you asked for knocks, and the usual server logs. Memberships, room ownership and chosen names live on the public Solana blockchain, which nobody can edit. We sell nothing and show no ads. Ask support@alfalfa.trade to see or delete what we hold.

1. Who

The controller is [entity name, address] ("alfalfa", "we"). Contact: support@alfalfa.trade.

2. What we keep, and for how long

What	Where	Why	How long
Your public keys — the wallet; in the app with a Seed Vault trading wallet, the separate "voice" key on the phone that signs chat; and the public half of your encryption key	the relay	to know who is in a room and who said what; to check the door; so encrypted messages can be sealed to you	while you use alfalfa
What is said in rooms — lines, each signed by its sender; whispers are not stored	the relay (a room's recent lines)	so a room shows its recent conversation to those who come in	the last few hundred lines of a room; older lines fall off
Which coin was posted, by which key, in which room, when, and the calls alfalfa priced	alfalfa's price service (our server)	the record: calls priced when made, and telling a good room from a bad one	posts 90 days; a caller's priced calls as long as the room exists
A push token for your phone	the relay	to knock when a room you are in has a new call	until you turn knocks off, uninstall, or the token dies
Which rooms you were let into	the relay	to knock the members who are not in the room	30 days from your last visit
Your email, if you ask for early access (with your wallet address, if the app knows it, and the country your request came from)	the relay's database (Cloudflare D1)	to write to you once when room creation opens	until launch mail goes out, then deleted on request; never sold or shared
Anonymous usage counts: which chart style, candle size and buttons get used, under a random id made for your install. Never a wallet address, a key or anything you type	PostHog	to know which features are worth keeping	at most a year
IP address, device and request logs	Cloudflare (our relay and web host), our servers	to run and protect the service; rate limits; abuse	Cloudflare's short logs; ours a few days
On the chain: memberships (who paid which door, when it expires), room ownership and terms, a chosen name, a "lit" record	Solana, public	that is what the program does	forever; nobody, including us, can delete it
On your device only: your wallet's words and the key they make, the secret half of your encryption key, on a Seeker the phone key that signs chat, your own node's address if you set one, your appearance choice	on the web, your browser's storage for app.alfalfa.trade: the words and the encryption secret sealed with a key the browser will not let any page read, and the signing key loaded the same way; in the app, your phone's secure storage; on a Seeker, the trading wallet's seed stays in the Seed Vault	yours	until you clear them

We do not collect names, phone numbers, identity documents, or your private keys or seed phrases. If you sign in with your Seeker, the relay keeps the passport address you proved, bound to your alfalfa wallet, for 30 days.

3. Who else sees any of it

Cloudflare runs our relay and web hosting and sees traffic to them. Expo delivers push notifications; a knock carries the room's name and "a new call", never what was called.
Jupiter builds swap quotes for your wallet address when you ask for a trade; DexScreener and the chain are asked for prices and charts — coin addresses, not yours.
Everyone in a room sees what is said in it and the sender's key or name. A room's record and PnL cards are public pages.
PostHog counts anonymous usage events (see above); no session recording, no wallet addresses.
Authorities, when the law requires it. Nobody for advertising; we sell no data.

4. Your choices and rights

Turn knocks off in settings and the relay forgets your push token. Leave a room and your membership record closes. Set your own node and your reads no longer pass through ours.
Write to support@alfalfa.trade from a message signed by your wallet (or from the app) to ask what we hold about a key, or to have the relay's and the price service's copies deleted. We cannot delete what is on the chain, and a line you said in a room stays in that room's recent lines until it falls off.
If the law where you live (for example the GDPR or the CCPA) gives you further rights, write to us; we honour them. [The lawyer confirms lawful bases and any representative required.]

5. Children

alfalfa is for people 18 and over. We do not knowingly keep anything about anyone younger; tell us and we delete it.

6. Security

Keys never leave your device. Chat lines are signed by their sender and the relay refuses what is not. Whispers are not end-to-end encrypted today: the relay can read them. alfalfa is not audited; keep in your wallet what you mean to spend.

7. Changes

The date at the top is the current version. Material changes are announced in the app.