Privacy Policy

This policy covers the Proteus Labs website (https://proteuslabs.xyz) and the Proteus Labs iOS app, both operated by KM Brands LLC. The short version: no account email, no password, no name. Your public wallet address is your identity. We store what we need to run Premium, points, referrals, research history, and airdrops. We do not sell personal information, and we do not use it for advertising.

When you use the Service, we store:

• Wallet address — the public Solana address you connect with. We never receive your private key or seed phrase. Sign-in is one wallet message. It does not move funds.
• Account activity — Premium coverage, Airdrop Points, token scans, portfolio scans, Forensics and Nexus runs, Watch follows, and last-active dates.
• Purchases — the Premium pass bought. Website passes record the SOL paid, the USD anchor, and the public transaction signature. App Store annual subscriptions record Apple’s transaction id, the period Apple billed, and the USD price when Apple charged USD. App Store charges are billed by Apple and are not an on-chain SOL payment.
• Research you run — token analyses, portfolio scans, Forensics reports, and Nexus sets. A Forensics or Nexus run stays on your wallet until you choose to publish it to the Docket. A published dive, its note, and its tags are public.
• Referrals — which wallet referred which, and points awarded.
• Circle votes — your stance, category, note, and evidence link, which are displayed publicly alongside your shortened wallet address.
• Session — a cookie named proteus_wallet_session that keeps you signed in on the website. Signing out deletes it.
• Which client you used — the iOS app sends a header marking the request as from the app. We store that label on token scans and on portfolio usage events so we can tell an app session from a website session. A missing label means the website. We do not use it to advertise.
• Technical data — standard server logs (IP address, user agent, timestamps) from our hosting provider, used for security and debugging. When you sign in with a wallet we may store a country / region / city code from the edge network for internal ops metrics — not raw IP addresses, and not for ads.

We do not ask you for an email, name, phone number, government ID, contacts, photos, or precise GPS location to use the Service. We do not collect your seed phrase or private key. We do not use advertising identifiers, including Apple's IDFA, and we do not sell or share personal information for cross-context behavioral advertising. Your browser stores small amounts of local data (such as your wallet-adapter connection preference). Admin credentials, where applicable, stay in the browser tab and are never written to our database.

The app is a client of the same Service. Sign-in is Phantom or Solflare. The app stores its own encryption key and a wallet-session token in the iOS Keychain on that device so it can open those wallets. That key is not your Solana private key, it cannot move funds, and it is not sent to us as a key. Signing out of the app deletes the session token from the Keychain. Profile has Delete account, which removes the off-chain records for that wallet after you confirm. Deleting the account does not cancel or refund an App Store subscription. The annual pass can be purchased in the app. Apple is the seller of that subscription and receives the purchase. Apple does not receive your seed phrase. Apple is not the seller of a SOL payment made on the website.

We do not sell personal information, and we do not share it with third parties for their own advertising. Wallet addresses and research runs are used to operate the Service. Public chain data and content you choose to publish are visible to other people because you published them or because the chain is public, not because we sold a list.

Solana, Base, and BNB Chain are public ledgers. Your wallet address, balances, and every transaction — including Premium payments split to our Treasury airdrop wallet and Ops wallet — are permanently visible to anyone, independent of this Service. We cannot edit or delete blockchain data. Research tools read public chain data. That read does not publish your search unless you publish a dive yourself.

• Operating Premium, points, referrals, votes, and airdrops.
• Verifying payments against on-chain transactions.
• Preventing abuse — sybil farming, brigading, and payment fraud.
• Aggregate product analytics (user counts, revenue totals).

We use third-party infrastructure to run the Service. Those providers process data in the United States or wherever they host. We send them only what the feature needs. They include:

• Supabase — database hosting for the records described above.
• Vercel — web hosting and server logs.
• Helius and other RPC providers — reading public Solana data for analyses, Forensics, Nexus, and payment verification.
• EVM indexers (such as Alchemy, Blockscout, and Etherscan) — reading public Base and BNB Chain wallet history for Trace and Nexus.
• Market-data and safety sources (such as DexScreener, GeckoTerminal, GoPlus, and RugCheck) — token and pool addresses you research are sent to these APIs. They are public addresses, not personal data.
• AI model providers — token data (not your wallet identity) is sent to generate analysis commentary.

Account records (Premium coverage, purchases, research runs, votes, referrals) stay until you delete the account. In the iOS app that is Profile, then Delete account. On the website, disconnecting the wallet ends the session only. Server logs are retained per our hosting providers' standard windows. Briefing progress stays on your device (the browser, or the phone if you use the app) and is not sent to us.

You can disconnect your wallet at any time and stop using the Service. In the iOS app, Profile, then Delete account, removes the off-chain profile for that wallet: points, referrals, watches, forensics history, votes, and the premium record stored by Proteus. It does not cancel or refund an App Store subscription, and it cannot erase public chain history. Because wallet addresses are pseudonymous and on-chain history is public, full erasure of on-chain activity is not possible. If you cannot open the app and want those off-chain records removed, contact us. Removal forfeits associated Premium coverage recorded by Proteus, points, and airdrop eligibility. If a privacy law where you live gives you a right to access or delete off-chain records, message us and we will honor it to the extent we can identify the wallet. We may refuse a request that we cannot tie to a wallet, or that we have to keep for security, abuse prevention, or accounting.

Traffic to the Service is encrypted in transit. Wallet sessions are httpOnly cookies. Liquidity transactions are checked against a program allowlist before we ask you to sign and again before we broadcast. Those measures reduce risk. They are not a promise that the Service, a wallet, or a third-party program cannot be compromised, or that a transaction which passes a check cannot lose money.

The Service is not directed at anyone under 18, and we do not knowingly collect data from children.

We may update this policy as the Service evolves. Changes will be reflected by updating the "Last updated" date above. Continued use after changes means you accept them.

Privacy questions? Reach out via @dinerobanx on X. See also the Terms of Service.