Privacy policy

1. Who we are and what this policy covers

This privacy policy explains how Ahead ("Ahead", "we", "us" or "our") collects, uses, shares and protects information about you when you use the Ahead mobile app, the website at https://tradewithahead.com, and any related services, features or communications that link to this policy (together, "the service"). "You" and "your" mean you as a user or visitor.

We are the controller of the personal information described in this policy, which means we decide why and how it is used. Where a partner collects information under its own policy, such as a card payment provider, that partner is responsible for it.

Please read this policy carefully. By using the service you confirm that you have read it and understand how we handle your information. If you do not agree with it, please do not use the service.

2. Information you give us

Some features need information from you. You can choose not to give it, but some features may not work without it. The information you give us includes:

• Sign-in details: the social account, email address or existing wallet you use to sign in, and the authentication data needed to keep you signed in. We use this to create, secure and maintain your account.
• Contact details: your email address, so we can sign you in, send you security codes and tell you about your account and changes to the service.
• Profile details: your trader name, your country of residence and any invite code you enter. We use these to set up your account, check that Ahead is available where you live, and credit the person who invited you.
• Wallet details: the public addresses of the wallets created for you and of any wallet you import. We use these to show your balances, carry out your trades and screen addresses for links to illegal activity.
• Trading and order details: the tokens you buy and sell, amounts, prices, fees, the network used, and the exits, alerts, automations and AutoProtect settings you choose. We use these to carry out your instructions and show your portfolio, history and performance.
• Security settings: whether you use a PIN or device biometrics to lock the app. Biometric data stays on your device and is never sent to us.
• Preferences: settings such as display currency, notification choices and which token page view you prefer.
• Communications: anything you send us, such as support emails, feedback or answers to surveys, and the contents of those messages.

3. Information we collect automatically

When you use the service, we and our service providers automatically collect some technical information. It does not usually identify you by name, but it may be linked to your account. We use it to keep the service working and secure, fix problems, understand how the service is used and improve it.

• Device information: device model, operating system and version, app version, language, time zone and a device or installation identifier.
• Usage information: the screens and features you use, the tokens you view and search for, the actions you take, the date and time of each, and how long they take.
• Diagnostic information: crash reports, error logs and performance data, such as how long screens take to load.
• Network information: your IP address and the approximate location it implies, such as your country or city. We do not collect your precise location.
• Notification information: a push token, if you turn on notifications, and whether notifications are delivered and opened.

4. Information from other sources

We may also receive information about you from others:

• Public blockchains: balances, transaction hashes, timestamps, amounts and counterparties for your wallet addresses, which anyone can read.
• Sign-in providers: if you sign in with a social account, basic profile information it shares with us, usually your name and email address. What it shares depends on that provider and your settings with it.
• Payment providers: confirmation that a card deposit succeeded or failed, its amount and a reference. Card numbers, bank details and identity documents you give a payment provider stay with that provider.
• Screening and fraud prevention services: whether a wallet address or transaction has been linked to sanctions, theft, fraud or other illegal activity.
• People who invite you: if you join with an invite code, which account the code belongs to.

We treat information from these sources in line with this policy. We are not responsible for the accuracy of information others give us, or for their own privacy practices.

5. Information we never hold

Your wallet is self-custody. Its private keys are generated and secured by a third-party wallet provider and are never available to Ahead in readable form. We do not store your private key or recovery phrase, and we cannot see them, use them or recover them for you. Only you can export them.

We do not receive or store your full card number or card security code. Those go straight to the payment provider.

We do not ask for or collect sensitive information such as health data, religious beliefs or political opinions. Please do not send it to us.

6. Anonymised and aggregated information

We may turn information into a form that no longer identifies you, for example by removing identifiers or combining it with other users' information into totals and averages. We may use and share that anonymised or aggregated information for any purpose, such as research, reporting and improving the service. We will not try to re-identify it, except to test that our anonymisation works.

7. How we use your information

We use your information to:

• Provide the service: create your account, sign you in, set up your wallet, and keep your account working.
• Carry out your instructions: prepare and submit your trades, deposits, withdrawals, exits, recurring buys and other automations, and pay network costs on your behalf from your balance.
• Show you your account: your balance, holdings, orders, history, performance and rewards.
• Protect your positions: run AutoProtect and the alerts you turn on, and warn you about risks on tokens you hold.
• Communicate with you: send security codes, trade confirmations, alerts, notices about your account, and changes to the service, this policy or our terms.
• Run the referral and rewards programme: link invites to accounts, calculate and pay rewards, and stop abuse.
• Support you: answer your questions, investigate problems and handle complaints.
• Keep the service safe: detect and prevent fraud, theft, abuse, security incidents and use from restricted places or by restricted persons.
• Improve the service: understand how it is used, measure what works, fix bugs and design new features.
• Meet our obligations: comply with law, regulation, sanctions, tax and record keeping duties, court orders and requests from authorities, and enforce our terms.
• Protect rights and safety: establish, exercise or defend legal claims, and protect the rights, property and safety of our users, the public and Ahead.

8. Our legal bases

Where data protection law requires a legal basis for using personal information, such as in the United Kingdom and European Economic Area, we rely on the following:

• Contract: where we need the information to provide the service you asked for, such as carrying out a trade or showing your portfolio.
• Legitimate interests: where we use information to keep the service secure, prevent fraud, understand and improve the service, run the rewards programme, and tell you about changes. We only do this when our interests are not outweighed by your rights and interests.
• Legal obligation: where the law requires us to use or keep information, such as for sanctions screening, tax records or responding to lawful requests.
• Consent: where we ask for your permission, such as for push notifications. You can withdraw your consent at any time in the app or your device settings, which does not affect anything we did before.

9. Automated decisions

Some parts of Ahead act automatically. Your exits, automations and AutoProtect carry out the rules you set, and our systems may automatically block a transaction or restrict an account that appears linked to sanctions, fraud or theft. We do not make decisions that have a legal or similarly significant effect on you based solely on automated processing, except where the law allows it. You can ask for a person to review an automated decision about your account, explain your view and contest it.

10. Who we share information with

We do not sell your personal information, and we do not share it for advertising. We share it only as described below.

• Service providers: companies that provide services to us, such as wallet infrastructure, sign-in and authentication, cloud hosting and storage, blockchain data and node access, crash reporting and diagnostics, push notification delivery, email delivery, customer support tools, and fraud and sanctions screening. They may use your information only to provide their service to us, under contracts that require them to protect it.
• Trade execution providers: to carry out a trade, its details, such as the tokens, amount and your wallet address, go to the swap aggregators, bridges and liquidity sources that fill it, and the transaction is broadcast to the blockchain network.
• Payment providers: when you add funds by card, the payment provider receives the information it needs to process the payment and run its own identity and fraud checks.
• Other users: your trader name may be shown to people you invite or who invite you, and in features where you choose to share something, such as a link to a token.
• Professional advisers: lawyers, accountants, auditors and insurers, under a duty of confidentiality, to advise us and protect our rights.
• Authorities and others for legal reasons: law enforcement, regulators, courts and other public bodies when we believe in good faith that the law requires it, or to detect and prevent fraud, enforce our terms, or protect the rights, property and safety of our users, the public or Ahead.
• Corporate transactions: a buyer, investor, successor or other party, if Ahead is involved in a merger, acquisition, financing, reorganisation, sale of assets or insolvency, or in negotiations for one. Any recipient must handle your information in line with this policy.
• Our corporate group: any current or future company in Ahead's group, which must follow this policy.
• At your direction: anyone else, when you ask us to share information or direct it to them, for example by sending tokens to an address.

11. Public blockchains

Ahead runs on Solana, Base, Ethereum and Robinhood Chain. These are public ledgers. When you trade, deposit or withdraw, the transaction, the wallet addresses involved, the amounts and the time are recorded permanently and can be seen by anyone.

Ahead does not publish a link between your wallet addresses and your name or email address. However, other people may be able to connect your addresses to you, for example if you share an address, link it publicly to your identity, or move funds from an exchange account in your name.

Because these records are permanent and controlled by no one, Ahead cannot change or delete them, even if you close your account or ask us to delete your information.

12. Third-party sites and services

The service may link to, or show information from, websites, apps and services we do not run, such as token project websites, social media accounts and blockchain explorers. Their privacy practices are governed by their own policies, not this one, and we are not responsible for them. Including a link or showing information does not mean we endorse it. Please review their policies before you give them any information.

If you interact with us on social media, such as by following or messaging our accounts, the platform's own policy applies to that interaction, and we may see information you make public there.

13. Cookies and similar technologies

Cookies are small files a website stores in your browser. Apps use similar technologies, such as device identifiers and software development kits, that work in much the same way.

Our website does not use advertising or cross-site tracking cookies. It may use strictly necessary storage to work properly and to protect it from abuse.

The app uses identifiers and diagnostic tools to keep you signed in, remember your preferences, deliver notifications, and report crashes and performance problems. We do not use them to show you advertising or to track you across other companies' apps and websites.

You can block or delete cookies in your browser settings, and limit identifiers and notifications in your device settings, but some features may then stop working. Some browsers send a Do Not Track signal. Because there is no common standard for it, our website does not respond to it, but we do not track you across other sites in any case.

14. How we protect your information

We use technical and organisational measures designed to protect your information from loss, misuse, unauthorised access, disclosure and alteration. These include encryption in transit and at rest, access controls that limit who can see information, monitoring for suspicious activity, and choosing service providers with strong security.

No method of transmitting or storing information is completely secure, so we cannot guarantee the security of your information. You play a part too: keep your sign-in account, email account, PIN, devices and any exported key secure, and contact us straight away if you think your account has been compromised.

Ahead will never ask for your private key, recovery phrase, PIN or a code sent to your email, by email, message, phone or social media. Anyone who asks for them is not Ahead. Do not reply, and report it to us.

15. How long we keep information

We keep personal information only as long as we reasonably need it for the purposes in this policy. To decide how long, we consider what the information is, why we hold it, the risk of harm from keeping it, and our legal duties. In particular:

• Account information is kept while your account is open and for up to 6 years after it closes, so we can answer questions, resolve disputes and meet legal duties.
• Trade, deposit, withdrawal and reward records are kept for up to 6 years after the transaction, for tax, accounting, audit and fraud prevention purposes.
• Raw technical logs, including IP addresses, are kept for up to 24 months, unless we need them longer to investigate a security incident or abuse.
• Support messages are kept for as long as needed to handle your request and any follow-up.
• Information on public blockchains is permanent and outside our control.

We may keep information longer where the law requires it, or where it is needed for a legal claim or investigation. When we no longer need information, we delete it or anonymise it.

16. International transfers

We and our service providers operate in several countries, so your information may be stored and processed outside the country where you live, including in the United States, the United Kingdom and the European Economic Area. Data protection law in those countries may differ from yours.

Where the law requires it, we protect transfers with recognised safeguards, such as standard contractual clauses approved by the relevant authorities, or by transferring only to countries recognised as giving adequate protection. You can ask us for more information about these safeguards.

17. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal information. Some only apply in certain circumstances, and all may be limited by law.

• Access: to know whether we hold information about you, to get a copy of it, and to know how we use it and who we share it with.
• Correction: to have inaccurate or incomplete information corrected.
• Deletion: to have your information deleted, subject to exceptions such as legal record keeping duties.
• Portability: to receive information you gave us in a structured, commonly used format, or have it sent to someone else.
• Restriction: to ask us to limit how we use your information while a concern is looked at.
• Objection: to object to our use of your information based on legitimate interests, and to direct marketing at any time.
• Withdrawing consent: where we rely on consent, to withdraw it at any time.
• Automated decisions: to ask for human review of a decision made solely by automated means.
• Complaint: to complain to your local data protection authority. In the United Kingdom this is the Information Commissioner's Office. We would appreciate the chance to resolve your concern first.

We will not treat you differently, charge you more or give you a worse service for using your rights.

18. How to use your rights

Email support@tradewithahead.com from the email address on your account and tell us which right you want to use. We will reply within 30 days, or tell you if we need more time and why, as the law allows.

To protect your account, we need to confirm that a request comes from you. We will usually do this by matching your request to information we already hold, such as replying from your account email address. If we cannot verify you that way, we may ask for more information, which we will use only to verify you and then delete.

You may ask an authorised agent to make a request for you. We may ask the agent for signed proof of their authority and ask you to verify your identity directly.

Deleting your account does not delete your wallet or anything recorded on a blockchain. Before asking us to delete your account, export your private key or withdraw your funds, because once the account is gone we cannot help you reach the wallet.

19. United States residents

This section applies if you live in California, Virginia, Colorado, Connecticut, Utah, Texas or another US state with a consumer privacy law. You have the rights described above as your state's law provides, including the right to know, access, correct and delete your information, and to opt out of the sale of personal information, targeted advertising and certain profiling.

In the last 12 months we have collected the categories of information described in sections 2 to 4: identifiers, such as your email address, IP address and wallet addresses; customer records; commercial information, such as your trading history; internet and device activity; approximate location; and account sign-in credentials, which are sensitive personal information. We collect them from the sources, and use and disclose them for the business purposes, described in this policy.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, and have not done so in the last 12 months. We have no actual knowledge of selling or sharing the information of anyone under 16. We use sensitive personal information only as needed to provide the service and keep it secure.

California residents may also ask, once a year and free of charge, what personal information we disclosed to third parties for their direct marketing in the previous year. We do not disclose personal information for that purpose. If we decline to act on your request, you can appeal by emailing support@tradewithahead.com with the subject "Privacy appeal". We will answer within 60 days. If you are not satisfied, you can contact your state attorney general.

20. Children

The service is only for people aged 18 or over. It is not directed at children, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will close the account and delete the information as soon as we reasonably can. If you believe a child has given us information, please email support@tradewithahead.com.

21. Changes to this policy

We may update this policy from time to time, for example when we add features, change service providers or when the law changes. The date at the top shows when it last changed. If we make a significant change to how we use or share your information, we will tell you in the app or by email at least 14 days before it takes effect, and ask for your consent where the law requires it. We encourage you to review this policy regularly.

22. Language

This policy is written in English. If we provide a translation and there is any difference between versions, the English version applies, unless the law where you live says otherwise.

23. Contact us

If you have any questions about this policy, how we handle your information, or want to make a request or complaint, email support@tradewithahead.com. We aim to reply to every message promptly.