Privacy Policy

This Privacy Policy explains how Manna ("Manna", "we", "us" or "our") collects, uses, shares and protects personal data when you use mannas.fun, the Manna apps for iOS and Android, the Manna Telegram bot, Manna AI and the Manna APIs (together, the "Service"). It forms part of our Terms of Service.

The short version:

• We collect what we need to run Manna: your sign-in details, your public wallet addresses, what you do and post on Manna, and basic diagnostics.
• We never see or store your private keys.
• We don't sell your personal data, and we don't use it for advertising. We use no analytics, advertising or tracking SDKs.
• Your profile, posts and trades on Manna coins are public by default, and blockchain activity is always public. You can make your profile private.
• You can delete your account in the app.

1. Who is responsible for your data#

Manna is responsible for the personal data described in this policy [TODO: owner to insert registered entity name and address]. Where data protection law requires us to name a data controller, a representative in the EU or UK, or a data protection officer, their details are: [TODO: owner to insert data controller, EU/UK representative and DPO details, if required].

You can contact us about privacy at hi@mannas.fun with the subject "Privacy".

2. What we collect#

Information you give us, or that comes from your sign-in provider#

• Account information. When you sign in with X, Google, Apple, GitHub, Twitch, Instagram, Telegram or email (through our provider, Privy), we receive what that service shares: typically your name, username, profile picture, email address and an account identifier. We only receive what the sign-in service makes available.
• Linked accounts. Social handles and email addresses linked to your sign-in. We use these, among other things, so that creator fees someone routes to your social handle can reach you when you sign in with that handle.
• Profile. Your nickname, bio, avatar and banner. Images you upload are stored by Manna.
• Content and social activity. Posts (theses), replies, calls, likes, follows, bookmarks, tips, reports you make, and users you block.
• Coins you create. Name, ticker, image, description, links and every launch setting (fee routes, rules, sniper shield, team wallets, locks and similar).
• Settings and tools. Orders, recurring buys, take profit and stop loss, copy-trading settings and the wallets you copy, alerts, your watchlist, and watch-only wallet addresses you add.
• Support requests you send us by email.

Information created when you use the Service#

• Wallet information. Your public wallet addresses (embedded wallets created by Privy, and any self-custody wallet you connect), balances, and on-chain activity related to the Service.
• Trades and transactions you make through Manna, including amounts, prices, fees, routes and outcomes, and bridges and withdrawals.
• Rewards. Cashback, referrals (who invited whom), holder payouts, Season points, passes, battle results and clan membership.
• Telegram bot data. If you use the bot: your Telegram user ID, your Telegram username, your bot settings, and the messages and commands you send to the bot.
• Telegram sign-ins. When you sign in to mannas.fun through the bot: your Telegram user ID and username, the browser and device type (user agent), and the approximate city and country our hosting provider derives from the connection, plus the time. We show these to you in the bot and in your account menu so you can spot a sign-in that isn't yours, and keep them for up to 31 days. We do not store the IP address with them.
• Manna AI usage. For each request: the model, the cost, and the number of input and output tokens. Your prompts are sent to our AI provider to produce a response (see section 6).
• API keys. Records of the API keys you create (we store what we need to check them, and the key is shown to you once) and their usage.
• Notifications. In-app notifications we generate for you. In the apps, if you allow notifications, the push token for your device, which we store linked to your profile so we can send you push notifications.
• Crash and error reports. When something breaks in your browser or app, we record the error message, technical stack trace, the page address, your wallet address if you are signed in, and your browser's user agent (browser and device type).
• IP address. We use your IP address transiently to apply rate limits and protect the Service from abuse. For some actions we keep a short request counter keyed to the IP address, which is not linked to your profile and is not used for anything else. We do not use IP addresses to track or locate you.
• Session. One session cookie that keeps you signed in. See the Cookie and Storage Notice.

What we do not collect#

We do not collect your private keys or seed phrases, your contacts, your precise location, or photos other than images you choose to upload. We do not use analytics, advertising or tracking SDKs, and we do not build advertising profiles.

3. How we use your data, and our legal bases#

Our legitimate interests are running a safe, reliable and fair service and protecting our users and Manna. We do not use your data for advertising, and we do not make decisions that produce legal or similarly significant effects about you solely by automated means. Automated systems do flag abuse (for example, a post reported by three different people is hidden automatically until reviewed), and you can ask a person to review any such decision by emailing us.

4. What is public#

Manna is a social trading product, and blockchains are public. Please read this section carefully.

• Public by default: your profile (nickname, bio, avatar, banner), posts, replies, calls, trades on Manna coins, PnL, and leaderboard and clan positions.
• Wallet addresses can be visible. If you have not set a nickname, your profile link uses your wallet address. Public profile data, trades and coins you create can include or reveal your wallet addresses.
• Blockchain activity is always public. Anyone can see transactions on a public blockchain, and they can be linked to your wallet address, and through it to your Manna profile.

You can limit what others see on Manna:

• Private profile. Others see you as an anonymous name (like Anon#1234), with no photo and no amounts, and you are left out of rankings.
• Hide dollar amounts. Others don't see the dollar amounts of your trades and positions.

These settings change what Manna shows. They cannot hide anything that is already on a blockchain. See Profiles and privacy.

5. Who we share data with#

We do not sell your personal data, and we do not share it for advertising. We share it only as follows.

Service providers and third parties that make Manna work#

When you trade, bridge or launch, your wallet address and transaction details are necessarily sent to the relevant routers, venues, bridges and RPC providers, and published on the blockchain. Market data providers receive token addresses we look up, not your personal details. Each provider handles data under its own terms and privacy policy.

Other sharing#

• Public content is visible to everyone, as described in section 4.
• Legal reasons. We may disclose data if we believe in good faith that the law, a court order or a lawful request from authorities requires it, or to protect the rights, safety or property of Manna, our users or others, including to investigate fraud, sanctions violations or security incidents.
• Business transfers. If Manna is involved in a merger, acquisition, financing or sale of assets, data may be transferred as part of that transaction, subject to this policy.
• With your direction. For example, when you share a post or connect a third-party app through the API.

6. Manna AI#

When you use Manna AI (in the app or through an sk-manna- API key), your prompts and any content you include are sent to OpenRouter, which forwards them to the model provider you choose or that is selected for you (such as Anthropic, OpenAI, Google or xAI) to generate a response. Those providers process prompts under their own terms. We record usage details (model, cost and token counts) to charge credits and prevent abuse. Do not put sensitive personal data, private keys or seed phrases in prompts.

7. International transfers#

Manna and our providers operate in several countries, so your data may be processed outside your country, including in the United States. Where the law requires, we rely on appropriate safeguards for those transfers, such as standard contractual clauses or our providers' equivalent commitments.

8. How long we keep data#

We keep personal data for as long as your Account exists and as long as necessary for the purposes in this policy. When you delete your Account, we delete or anonymize data as described in section 9. Some records are kept after that for as long as necessary for security, fraud prevention, accounting, legal obligations, resolving disputes, and the integrity of public on-chain data. Rate-limit counters keyed to an IP address only matter for their time window (minutes to hours) and are not linked to your profile. Residual copies may remain in our providers' backup systems for a limited time until they are overwritten.

9. Deleting your account#

You can delete your Account in the app: open the account menu and tap Delete account, or open your profile, tap Edit profile, then Delete account. Type DELETE to confirm. Deletion is only available while the cash in your wallets is under $1, because your sign-in is what reaches your embedded wallet. Withdraw your funds or export your keys first.

When you confirm, we immediately, in a single step:

• delete your profile: nickname, bio, avatar, banner, linked X handle and name, email, the link to your sign-in, your invite code, points and saved settings, so your wallet addresses are no longer linked to any profile;
• erase your posts and replies (their text is deleted, they are no longer shown and no longer linked to you), and delete your likes, reposts, bookmarks, follows (both the people you follow and the people following you), blocks and clan membership. A clan you own passes to its longest-standing member, or closes if you were its only member;
• delete your notifications, watchlist, watch-only wallets, hidden tokens and price alerts;
• cancel your open orders, stop your copy trading and switch off one-tap trading for the Account;
• revoke your Manna AI and API keys and delete your webhooks;
• delete the images you uploaded, your linked social accounts and your push-notification devices;
• end every session signed in to the Account, on every device, including sign-ins through Telegram;
• delete your sign-in user at Privy; and
• sign you out.

What is kept. Some records are kept where needed for accounting, legal obligations, security, fraud prevention and the integrity of public on-chain data: trade and position history, Reward, payout, claim and cashback records, tips, Manna's fee and payout books, reports, AI usage records, records of what API keys did, records of network fees paid from your stablecoin and error logs. They stay keyed to your wallet address only, with no profile linked to it. Coins you created stay on the blockchain and may stay visible on Manna, and notifications already delivered to other people are not changed. If you later sign in again with the same wallet, you start a new, empty Account.

What cannot be deleted. On-chain transactions, coins and wallet balances cannot be deleted or changed by anyone, including Manna. Your wallets remain yours; you can keep using an embedded wallet only with keys you exported before deleting. If your Account is linked to the Telegram bot, the bot uses the same sign-in and wallets, so after deleting the Account the bot can no longer trade with them.

If you cannot delete your Account in the app (for example, you use only the Telegram bot), email hi@mannas.fun from an address or account linked to it.

10. Your rights and choices#

Choices you can make any time:

• Edit your profile, or switch on Private profile or Hide dollar amounts.
• Turn push notifications off in your device settings.
• Remove watch-only wallets, alerts, orders and copy-trading settings.
• Revoke API keys.
• Delete your Account (section 9).

Your rights. Depending on where you live (for example, in the European Economic Area, the UK, or certain US states), you may have the right to: access the personal data we hold about you and get a copy; correct it; delete it; restrict or object to certain processing, including processing based on legitimate interests; receive your data in a portable format; and withdraw consent where we rely on it. We do not sell or "share" personal data for cross-context behavioral advertising as those terms are used in US state privacy laws.

To use these rights, email hi@mannas.fun with the subject "Privacy request". We may need to verify that you control the Account (for example, by asking you to sign in or sign a message with your wallet). We will respond within the time the law requires, usually within 30 days. We will not discriminate against you for using your rights. You also have the right to complain to your local data protection authority.

11. Security#

We protect data with measures appropriate to the risk, including: private keys held in Privy's secure infrastructure and never seen by Manna; a signed, httpOnly session cookie; encrypted connections; rate limits; access controls on our systems and automated jobs; and checks on uploaded images. No system is perfectly secure. See Security and Bug Bounty for more, and for how to report a vulnerability.

12. Children#

Manna is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has used Manna, contact us and we will delete their Account.

13. Third-party sites and services#

The Service links to third-party sites (such as block explorers, DexScreener, X and Telegram) and relies on the providers in section 5. Their handling of your data is governed by their own privacy policies.

14. Changes to this policy#

We may update this policy. The "updated" date at the top shows when it last changed. If a change is significant, we will tell you in the app before it takes effect.

15. Contact#

Privacy questions and requests: hi@mannas.fun (subject "Privacy").

Related: Terms of Service · Cookie and Storage Notice · Security and Bug Bounty