Prisma

Privacy Policy

Effective 1 September 2026

The short version

1. Who we are

Prisma is a self-custodial app for holding and trading digital assets on the Solana network, published by Radiant Labs Limited ("Prisma", "we", "us"). This policy explains what information the app and our servers handle, why, and what control you have over it. It covers the Prisma mobile app and this website.

If you have a question about anything here, write to contact@radiantlabs.net.

2. What we collect

Prisma is built to work with as little information about you as possible. What we do handle falls into four groups.

Sign-in details
An email address, or — if you choose to continue with Google — the name, email address and profile picture on your Google account. Sign-in is operated for us by Privy, and these details are held by Privy rather than on our own servers.
Your Solana address
The public address of the account created for you when you sign up, and the activity recorded against it on the Solana network. Our servers link that address to your account identifier so we can show you your balance and history.
Activity we derive
Balance history, profit and loss, and position data calculated from public network records for your address, stored so the app loads quickly and can show history over time.
Technical information
When the app or this website contacts our servers or a data provider, that request carries an IP address and basic device and app version information, as any internet request does. We use it to operate and secure the service.

3. What we never collect

4. Information held on your device

Prisma keeps a local copy of your balances, token list and history on your phone so the app opens instantly and works on a poor connection. That copy is stored in an encrypted database whose key is held in the device keychain, and it never leaves your device except as described in this policy. Deleting the app deletes it.

5. How we use information

Where the law requires a legal basis, we rely on performance of our contract with you for the first three, and on our legitimate interest in running a secure and reliable service for the rest.

6. Who we share information with

We do not sell your information. We share it only with the providers that make the app work, and only to the extent each one needs.

Privy
Sign-in and account security. Holds your email or Google profile.
Google
Only if you choose to sign in with Google. Google tells us your name, email address and profile picture; we tell Google nothing about your activity in the app.
Amazon Web Services
Hosting for our servers and this website.
Network and market data
Helius, Birdeye and Jupiter supply network access, prices and token information. Requests to them may include your address and IP address.
Trading and privacy protocols
Phoenix and Umbra are independent protocols the app transacts with at your instruction. They receive the transaction details necessary to carry it out.

We may also disclose information where we are legally required to, or where it is necessary to establish or defend a legal claim or to protect the safety of our users.

7. If you sign in with Google

Prisma requests only the basic sign-in scopes — openid, email and profile. We use what Google returns solely to create and authenticate your Prisma account. We do not request access to Gmail, Drive, Contacts, Calendar or any other Google service, we do not use Google account data for advertising, and we do not transfer it to anyone other than the providers listed above. You can disconnect Prisma at any time from your Google account permissions page.

8. Network records are public and permanent

Solana is a public network. Every transaction made from your address — the amounts, the assets, the timing, and the addresses involved — is recorded permanently and can be read by anyone. This is a property of the network, not a choice we make, and it applies to transactions made through Prisma as it does to any other app. Neither we nor anyone else can edit or delete those records, including in response to a deletion request.

Prisma's private balance feature is designed to reduce what those records reveal, but it is not a guarantee of anonymity and it does not remove anything already recorded.

9. How long we keep information

Account records and the history we derive are kept while your account is open. If you ask us to delete your account, we remove the link between your account identifier and your address, and the derived history associated with it, within 30 days — except where we must keep something to comply with a legal obligation or to resolve a dispute. Information held by Privy is deleted according to Privy's own retention practices. Records already written to the Solana network cannot be deleted by anyone.

10. Your rights

Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, receive a copy in a portable form, object to or restrict how we use it, and complain to your local data protection authority. If you are in the EU or UK these rights come from the GDPR; if you are in California, from the CCPA as amended — including the right not to be discriminated against for exercising them.

To exercise any of them, email contact@radiantlabs.net. We will respond within the time the applicable law allows, normally within 30 days. We may need to verify that the request comes from you.

11. Security

Data in transit is encrypted with TLS. The local copy on your phone is encrypted at rest. Access to our servers is restricted and logged. No system is perfectly secure, and a great deal rests on your own device: keep your phone's passcode and screen lock on, keep your operating system up to date, and protect the email or Google account you sign in with — anyone who controls that can sign in as you.

12. Children

Prisma is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

13. International transfers

We and our providers operate in several countries, so your information may be processed outside the country you live in, including in the United States. Where the law requires a transfer safeguard, we rely on the European Commission's standard contractual clauses or another approved mechanism.

14. Changes to this policy

We will update this page when our practices change, and the effective date at the top will change with it. If a change materially affects you we will tell you in the app before it takes effect.

15. Contact

Radiant Labs Limited — contact@radiantlabs.net