Effective 1 September 2026
Prisma is a self-custodial app for holding and trading digital assets on the Solana network, published by Radiant Labs Limited ("Prisma", "we", "us"). This policy explains what information the app and our servers handle, why, and what control you have over it. It covers the Prisma mobile app and this website.
If you have a question about anything here, write to contact@radiantlabs.net.
Prisma is built to work with as little information about you as possible. What we do handle falls into four groups.
Prisma keeps a local copy of your balances, token list and history on your phone so the app opens instantly and works on a poor connection. That copy is stored in an encrypted database whose key is held in the device keychain, and it never leaves your device except as described in this policy. Deleting the app deletes it.
Where the law requires a legal basis, we rely on performance of our contract with you for the first three, and on our legitimate interest in running a secure and reliable service for the rest.
We do not sell your information. We share it only with the providers that make the app work, and only to the extent each one needs.
We may also disclose information where we are legally required to, or where it is necessary to establish or defend a legal claim or to protect the safety of our users.
Prisma requests only the basic sign-in scopes — openid, email and profile. We use what Google returns solely to create and authenticate your Prisma account. We do not request access to Gmail, Drive, Contacts, Calendar or any other Google service, we do not use Google account data for advertising, and we do not transfer it to anyone other than the providers listed above. You can disconnect Prisma at any time from your Google account permissions page.
Solana is a public network. Every transaction made from your address — the amounts, the assets, the timing, and the addresses involved — is recorded permanently and can be read by anyone. This is a property of the network, not a choice we make, and it applies to transactions made through Prisma as it does to any other app. Neither we nor anyone else can edit or delete those records, including in response to a deletion request.
Prisma's private balance feature is designed to reduce what those records reveal, but it is not a guarantee of anonymity and it does not remove anything already recorded.
Account records and the history we derive are kept while your account is open. If you ask us to delete your account, we remove the link between your account identifier and your address, and the derived history associated with it, within 30 days — except where we must keep something to comply with a legal obligation or to resolve a dispute. Information held by Privy is deleted according to Privy's own retention practices. Records already written to the Solana network cannot be deleted by anyone.
Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, receive a copy in a portable form, object to or restrict how we use it, and complain to your local data protection authority. If you are in the EU or UK these rights come from the GDPR; if you are in California, from the CCPA as amended — including the right not to be discriminated against for exercising them.
To exercise any of them, email contact@radiantlabs.net. We will respond within the time the applicable law allows, normally within 30 days. We may need to verify that the request comes from you.
Data in transit is encrypted with TLS. The local copy on your phone is encrypted at rest. Access to our servers is restricted and logged. No system is perfectly secure, and a great deal rests on your own device: keep your phone's passcode and screen lock on, keep your operating system up to date, and protect the email or Google account you sign in with — anyone who controls that can sign in as you.
Prisma is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.
We and our providers operate in several countries, so your information may be processed outside the country you live in, including in the United States. Where the law requires a transfer safeguard, we rely on the European Commission's standard contractual clauses or another approved mechanism.
We will update this page when our practices change, and the effective date at the top will change with it. If a change materially affects you we will tell you in the app before it takes effect.
Radiant Labs Limited — contact@radiantlabs.net