Effective 22 September 2026
What we hold, why we hold it, and the parts we deliberately cannot hold at all.
Mindera lets you create trading bots that run on our servers. It is made by Sizze Inc. (“we”), which is responsible for the data described here. To run your bots we need to know who you are and keep a record of what they did. That is the whole of it.
We do not sell your data, we do not share it with advertisers, and there is no analytics or tracking of any kind in the app. There is no advertising identifier, no third-party SDK watching what you tap.
The one thing that matters most — the key that controls your money — we designed so that we cannot have it. See How trading access works below.
Everything below is collected because the app cannot work without it. Nothing here is collected for marketing.
| Data | Why | Kept |
|---|---|---|
| Email address | Signing in with a one-time code, and answering you when you write to us. No newsletters. With Sign in with Apple we get an email only if Apple shares one, and it may be a private relay address. | Until you delete your account |
| Apple account identifier | Only if you use Sign in with Apple. It is an opaque id, not your name. | Until you delete your account |
| Your bots and their trades | The product: names, settings, positions, trades, and daily balances. | Until you delete the bot |
| Wallet addresses | Every real-money bot trades from its own wallet, created on your phone. We store its public address, never its key. | Until you delete the bot |
| Trading key | The agent key described in section 05, stored encrypted. It can trade and cannot withdraw. | Until you delete the bot |
| Push token | Sending you notifications about your bots. | Until the app is removed from the device |
| Sign-in records | Your email, a hash of the code we sent, and when. Used to limit attempts. | 24 hours |
| Server logs | Your IP address, app version and device type, and the requests the app made, including account and bot numbers, amounts, and wallet addresses. Used to run the service, keep it secure, and investigate problems. | Up to 90 days |
We do not collect your name, phone number, contacts, photos, location, health data, or browsing activity. These pages set no cookies and load nothing from other sites.
Mindera has a public feed, Explore, which anyone signed in to the app can open. A bot appears there while it is running — a practice bot right away, a real-money bot once its money has arrived. Copies of other bots are not listed. A bot’s card shows:
Your identity is not attached. The feed shows the bot, never the person behind it — no email address, no name, no wallet address.
One thing to keep in mind: real-money bots trade on Hyperliquid, where every trade is public by design. Someone who matched a bot’s trades against the exchange’s public data could find the wallet it trades from. That still would not tell them who you are.
If someone copies your bot, their copy gets its strategy settings — not your email, your name, or your wallet — and it trades their own money.
If you would rather not appear, pause or delete the bot. Only running bots are listed.
Two separate keys exist for every real-money bot. The master key lives only on your phone and can move your money. The agent key is ours: it can open and close positions and cannot withdraw anything. That is a property of the exchange, not a promise from us.
So if our servers were breached, an attacker could trade your bots badly. They could not take your funds.
The flip side is honest and non-negotiable: because we do not hold your master key, we cannot recover it for you. If you lose your phone without having written down your recovery phrase, the funds are gone, and no support request can change that.
You approve the agent key on your phone. It expires on its own after at most 180 days, and you can revoke it on Hyperliquid at any time — that stops the bot from trading and touches nothing else. Deleting the bot deletes our copy of the key.
Practice bots are different. They trade play money from a wallet on Hyperliquid’s test network, which we create and hold ourselves. Nothing in it has any value.
These services process data for us, each doing one job:
When you add money to a bot, our own wallet may send its wallet a tiny amount of ETH to pay the network fee, so you do not have to find some. That transfer is public on the blockchain like any other.
Market prices come from public data published by Hyperliquid and Binance. Nothing about you is sent to get them.
None of these services gets your data for its own marketing, and none of them is paid in data. Our servers are in the Netherlands; Sizze Inc. is based in the United States, so your data may also be accessed from there.
Open Profile → Delete account. It removes your account, your bots and their entire trade history, their wallet addresses and trading keys, your push tokens, and your sign-in records. The deletion happens immediately and is not reversible — there is no thirty-day grace period in which we quietly keep a copy.
What deletion cannot reach: server logs, which age out within 90 days; transactions on Hyperliquid and Arbitrum, which are public and permanent by nature; and copies other people made of your bots, which are theirs and trade their own money.
One exception, and it exists to protect you: if a real-money bot still has an open position, we will refuse to delete it until the position is closed. Deleting it would leave real money in the market with nothing managing it.
Money in your wallets is unaffected by deletion. It stays yours, under the control of your recovery phrase.
Traffic between the app and our servers is encrypted (TLS). Trading keys are stored encrypted with AES-256-GCM. Sign-in codes are single-use, expire in ten minutes, and are stored only as a hash. A signed-in session lasts up to 90 days.
No system is perfect, and we would rather say that plainly than claim otherwise. What we have done is make the worst case survivable: the design ensures a breach of our servers cannot move your money.
Mindera is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, write to us and we will remove it.
You can access, correct, export, or erase your data. Deletion is built into the app; for anything else, write to us and we will do it within 30 days. These rights apply wherever you live.
If you are in the EU or UK, our legal basis for processing is performance of a contract — we hold this data because it is the only way to provide the service you asked for — and, for server logs, our legitimate interest in keeping the service secure. You can also complain to your local data protection authority.
If this policy changes in a way that affects what we collect or who receives it, we will tell you in the app before the change takes effect. The date at the top always reflects the current version.
Questions, requests, or anything that looks wrong: support@memoryai.club. This is also the support address for the app.
Sizze Inc., 919 North Market Street, Suite 950, Wilmington, DE 19801, United States.