Privacy policy

1. Information we collect

Information you give us

Account information. Your email address, and the account identifier Apple or Google gives us when you sign in with them. If you use Apple's "Hide My Email," we receive a relay address instead. Your display name.
Profile information. Your job title and skills, if you tell Hok or add them in the app.
Tasks and evidence. Tasks you post or fork, including their steps and any information you place on a step. Evidence you submit for a step, such as photos and text, including information we read from it.
Required tasks. Information you provide for tasks we set, such as screenshots of your LinkedIn profile (from which we read your name and job title) or of a deposit page in a third-party exchange (from which we read a wallet address).
Messages. What you say to Hok, messages you leave for our team, appeals and their reasons, and notes you add to task invitations.
Payments. Withdrawal addresses you enter, and the record of your deposits, task fees, payments, withdrawals and balance.
Email on a share page. If you open a shared task on our website before installing the app, you may leave your email address so the task opens for you after you sign in.

Information collected automatically

Region. When a feature depends on where you are, the app asks for your device location once. We use it to work out your country and store only the country, not your coordinates. You can decline; some features may then be unavailable.
IP address and request data. We use your IP address to choose a default display currency, to limit abuse and to protect the Services. We also log technical information such as your app version, device type and the time of requests.
Passkeys. If you add a passkey, we store its public key. Your private key and biometrics stay on your device and are never sent to us.
Deposit address. The app creates your deposit address on your device and sends us the address and a signed authorization. The key used is discarded after signing; we never receive it.
Install and link information. When you open a shared link or install the app from one, our attribution provider, AppsFlyer, helps us work out which shared task to open and who shared it. We do not request the iOS advertising identifier (IDFA) and do not use this to track you across other companies' apps or websites.

Information that stays on your device

If you speak to Hok, your voice is transcribed on your device. Recordings are not uploaded to us; only the resulting text is sent.

Information from others

Other users may give us information about you, for example when an Owner reviews your work, files an objection, or invites you to a task. We receive information from compliance providers about whether a wallet address appears on sanctions or risk lists, and we read public blockchain data about transfers to and from your addresses.

2. How we use information

To provide the Services: create your account, sign you in, draft and review tasks, check step evidence, run claims, and show you the tasks and chats that relate to you.
To handle payments: credit deposits, set aside and pay task fees, pay shared-task rewards, and process withdrawals.
To personalize the Services: show tasks that match your skills and region first, and show amounts in your display currency.
To communicate with you: send sign-in codes and emails about your tasks, such as when a step unlocks or work awaits your review, and reply to your messages.
To keep the Services safe and lawful: verify accounts and passkeys, prevent fraud and abuse, enforce our Terms, screen wallet addresses against sanctions and risk lists, and comply with legal obligations.
To understand and improve the Services, including fixing problems.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in operating a safe and useful service, compliance with legal obligations, and your consent where we ask for it (such as for location).

3. Automated review and AI

We use automated systems, including AI models run by our service providers, to draft tasks from your description, review tasks before they go live, judge whether step evidence meets a step, read information from evidence and screenshots, check task invitation notes, and sort messages you leave for our team. Our team may review the same content, including when you appeal. Our providers process this content on our behalf to provide these functions.

With other users

Your display name is shown to people you work with on a task and to people you invite.
The evidence you submit for a task's steps, and your progress, is shown to that task's Owner. An Owner's objection, its reasons and the evidence attached are shown to the Doer concerned.
Tasks you post are shown to other users as public or private (shared-link) tasks. Owners are not named in suggestions of similar tasks.
Your messages to Hok are not shown to other users.

With service providers

We share information with companies that help us run the Services, under contracts that limit their use of it, including providers of: cloud hosting, networking, file storage and email delivery (such as Cloudflare); AI models; sign-in (Apple and Google); install and link attribution (AppsFlyer); blockchain infrastructure; and sanctions and risk screening of wallet addresses.

For legal reasons and safety

We may share information if we believe it is required by law, legal process or a government request, or needed to protect the rights, property or safety of our users, the public or Almanack, including to prevent fraud.

In a business transfer

If Almanack is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. Blockchain information

Deposits, withdrawals and other transfers on Ethereum are recorded on a public blockchain. Anyone can see the addresses, amounts and times involved, and we cannot change or delete that information.

6. How long we keep information

We keep account, task and payment information while your account is open, and afterwards for as long as needed to resolve disputes, enforce our Terms and meet legal, tax and accounting obligations.
Sign-in codes expire within 15 minutes.
An email left on a share page is deleted after a short period, 7 days by default, if no account signs in with it.
Backups are kept for up to 30 days.
When we no longer need information, we delete or de-identify it.

7. Your choices and rights

You can change your display name, skills, language and display currency in the app.
You can decline location access in your device settings. Some features may then be unavailable.
You can ask us to access, correct, export or delete your personal information, or to close your account, by emailing contact@almanack.win or messaging Hok in the app. We may need to verify your identity, and we may keep some information as described in section 6.
Depending on where you live, including the European Economic Area, the United Kingdom and certain U.S. states, you may have additional rights, such as to object to or restrict certain processing, to withdraw consent, and to complain to your local data protection authority. We will not discriminate against you for exercising your rights.

8. Security

We protect information with measures such as encryption in transit, private storage for evidence files with short-lived access links, passkey confirmation for sensitive actions, and restricted access for our team. No system is perfectly secure, so we cannot guarantee the security of your information.

9. International transfers

Almanack is based in the United States. We and our service providers may process information in the United States and other countries, which may have different data protection laws from yours. Where required, we use appropriate safeguards for these transfers.

10. Children and teens

The Services are not for children under 13, and we do not knowingly collect personal information from them. Users aged 13 to 17 may use the Services only with a parent's or guardian's consent. If you believe a child under 13 has given us personal information, contact us and we will delete it.

11. Changes and contact

We may update this Policy. If a change is material, we will let you know in the app or by email before it takes effect. For questions or requests, contact Almanack LLC at contact@almanack.win.