1. What we collect
- Identity details: full name, username, email address, phone number and state.
- Security data: password and 4-digit PIN, both stored only as one-way hashes.
- Account activity: wallet balances, transactions, predictions and referral relationships.
- Technical data: device, session and security logs needed to keep accounts safe.
2. Why we use it
- To create and secure your account and verify your two-stage sign-in.
- To operate the wallet, virtual prediction rounds and referral calculations.
- To detect fraud, multiple accounts, manipulation and underage use.
- To meet legal, regulatory and dispute-resolution obligations.
3. Security
Authentication, session management, balances, transactions and prediction settlement happen on Avalon's servers. Passwords and PINs are hashed and are never readable by Avalon staff or by the app running on your phone. Access to your records is restricted to your own account by row-level database policies.
4. Sharing
Avalon does not sell your personal data. Data is shared only with payment, identity, market-data and infrastructure providers that are needed to run the platform, and with authorities where the law requires it.
5. Market data
Avalon reads public reference prices from third-party market-data providers. Those requests are made by Avalon's servers and do not carry your personal information.
6. Retention
Account, transaction and prediction records are retained for as long as your account is active and afterwards for the period required by applicable law.
7. Your rights
You may request access to, correction of, or deletion of your personal data, subject to Avalon's legal and record-keeping obligations. Requests are made through the in-app support channel.
8. Children
Avalon is strictly for users aged 18 and above and does not knowingly collect data from anyone under 18.