Wahoo Privacy Policy

Effective date: 19 July 2026

This Privacy Policy explains how YANGKAN TECHNOLOGY PTE. LTD. (UEN 202624041N), a Singapore private company limited by shares ("Wahoo", "we", "us", or "our"), collects, uses, discloses, stores, and otherwise processes personal data when you use the Wahoo mobile application, website at https://wahoo.live, APIs, support channels, social features, wallet interfaces, prediction-market interfaces, and related services (collectively, the "Services").

Our registered office is 73 Ubi Road 1, #05-54, Oxley Bizhub, Singapore 408733. Questions and privacy requests may be sent to [email protected].

1. Scope and our role

This Policy applies to personal data that Wahoo controls in connection with the Services. It does not govern the independent processing activities of third parties whose products are accessible through Wahoo, including:

Polymarket and its applicable operating entities;
MoonPay and its applicable operating entities;
Privy (Horkos, Inc.), which provides authentication and embedded-wallet infrastructure;
Apple, Google, blockchain networks, wallet providers, payment networks, identity-verification providers, and other third-party applications or services.

Those parties may act as independent controllers of personal data and apply their own terms and privacy notices. Their current policies include:

2. Personal data we collect

The data we collect depends on the features you use.

2.1 Account and identity data

We may collect:

email address and authentication status;
identifiers received from Apple, Google, Privy, or another sign-in provider;
display name, username or handle, profile image, biography, language, and content-locale preferences;
account creation date, account status, user role, creator status, and verification or eligibility status;
information you provide to demonstrate age, location, authority, eligibility, or compliance with our rules.

Privy, MoonPay, Polymarket, or another provider may separately request identity-verification information. Unless a feature expressly tells you otherwise, Wahoo does not receive your complete payment-card number, bank credentials, government identity document, or biometric verification image from MoonPay. We may receive a verification status, transaction reference, risk signal, or other limited information needed to enable, restrict, support, or reconcile a transaction.

2.2 Profile, social, and user-content data

We process information you create or share through the Services, including:

videos, livestreams, audio, images, captions, titles, thumbnails, and associated market or event references;
comments, reactions, likes, favorites, follows, reposts, shares, invitations, and creator applications;
direct messages, group-chat messages, livestream-chat messages, attachments, and message metadata;
reports, blocks, moderation appeals, customer-support messages, survey responses, and other communications;
public profile details, follower/following lists, published content, trading-activity visibility settings, and other privacy preferences.

Content marked public can be viewed, copied, shared, indexed, or recorded by other users or third parties. Direct and group messages are not public, but recipients may save or disclose them.

2.3 Wallet, blockchain, and transaction data

When you use wallet, funding, or prediction-market features, we may process:

public wallet addresses, public keys, smart-account addresses, blockchain network, token type, and wallet-setup status;
order instructions, quotes, positions, outcomes, order-book activity, trade status, balances, fees, proceeds, profit-and-loss information, and redemption status;
deposit and withdrawal addresses, supported assets and networks, transaction hashes, signatures, timestamps, and public on-chain activity;
technical signing requests, delegated-signer status, authorization status, and identifiers needed to submit or reconcile user-authorized transactions;
MoonPay or other on-ramp/off-ramp transaction references, selected asset, amount, destination wallet, and completion status.

Wahoo is not intended to receive your seed phrase or raw private key. Do not send those credentials to Wahoo or to anyone claiming to represent Wahoo. Embedded-wallet key material and authentication credentials are handled through Privy and device-level security mechanisms according to their applicable terms and technical design.

Blockchain records are public and generally immutable. Even if Wahoo deletes data from its own systems, information already recorded on a blockchain may remain publicly available and cannot ordinarily be altered or erased by Wahoo.

2.4 Device, network, and usage data

We may automatically collect:

IP address and approximate location derived from IP;
device model, operating system, app version, browser type, language, time zone, and device or installation identifiers;
session, authentication, security, and push-notification tokens;
pages, screens, markets, videos, or features viewed; clicks, searches, watch events, session duration, referral source, and interaction history;
crash reports, diagnostics, API logs, latency, error messages, and performance information;
security, fraud, abuse, geolocation, sanctions, and compliance signals.

We use approximate location and related signals to apply legal, sanctions, product, and geographic restrictions. We do not use precise device location unless you grant a specific permission for a feature that requires it.

2.5 Device permissions

With your permission, the Services may access:

camera and photo library, to create a profile image, scan a QR code, record content, or upload media;
microphone, to record video audio or broadcast a livestream;
notifications, to deliver account, message, content, market, security, and transaction updates.

You can manage these permissions through your device settings. Disabling a permission may prevent the relevant feature from working.

2.6 Information from other sources

We may receive information from:

authentication, wallet, payment, on-ramp/off-ramp, market, blockchain, and compliance providers;
other users who mention, message, invite, report, or share content with you;
public blockchain records and publicly available sources;
fraud-prevention, sanctions-screening, cybersecurity, analytics, and infrastructure providers;
Apple, Google, app stores, social platforms, and referral partners.

3. How we use personal data

We may use personal data to:

create, authenticate, secure, and administer accounts;
provide profiles, feeds, videos, livestreams, messaging, social discovery, creator tools, and support;
create and display wallet interfaces, balances, transaction history, market data, orders, positions, and settlement information;
transmit user-authorized instructions to wallet, blockchain, market, funding, or payment providers;
facilitate MoonPay on-ramp or off-ramp flows and show their status;
personalize content, language, recommendations, notifications, and feature availability;
maintain market integrity and detect fraud, manipulation, spam, abuse, account compromise, prohibited content, sanctions risk, and geographic circumvention;
moderate content, investigate reports, enforce our Terms, and protect users, Wahoo, providers, and the public;
provide customer support, communicate service and security updates, and respond to requests;
monitor reliability, diagnose failures, improve performance, develop features, conduct research, and generate aggregated statistics;
comply with legal, regulatory, tax, accounting, audit, recordkeeping, law-enforcement, and dispute-resolution obligations;
protect or exercise legal rights and complete a corporate transaction such as a financing, merger, acquisition, restructuring, or sale of assets;
send marketing communications where permitted and consistent with your choices.

4. Legal bases for processing

Where applicable law requires a legal basis, we rely on one or more of the following:

Contract: processing necessary to provide the Services you request and perform our Terms of Service;
Legitimate interests: operating, securing, improving, supporting, and understanding the Services; preventing fraud and abuse; enforcing our rules; and protecting legal rights, where those interests are not overridden by your rights;
Consent: for optional device permissions, certain communications, or other processing where consent is required. You may withdraw consent prospectively;
Legal obligation: processing necessary to comply with applicable law, court orders, regulatory obligations, sanctions, tax, accounting, or lawful requests;
Vital interests or public interest: where processing is necessary to protect a person or address an urgent safety, security, or legal concern.

Under Singapore's Personal Data Protection Act 2012 ("PDPA"), we collect, use, and disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances, based on consent, deemed consent, legitimate interests, contractual necessity, legal obligations, or another applicable exception.

5. How we disclose personal data

We may disclose personal data to:

5.1 Service providers

Vendors that provide hosting, content delivery, video processing, livestream infrastructure, storage, authentication, embedded wallets, image delivery, communications, customer support, analytics, diagnostics, security, fraud prevention, moderation, and professional services. For example, media may be uploaded directly to Cloudflare infrastructure through a time-limited upload link.

5.2 Market, wallet, blockchain, and payment providers

We disclose information needed to provide a requested integration to Privy, Polymarket, MoonPay, blockchain networks, smart contracts, relayers, bridge providers, liquidity providers, node providers, and related services. Information broadcast to a public blockchain becomes publicly visible.

5.3 Authentication and platform providers

Apple, Google, app stores, push-notification services, social platforms, and other providers you choose to connect.

5.4 Other users and the public

Public profile information, content, comments, social activity, and any trading or position information you choose to make public may be visible to other users and the public. Privacy settings control certain Wahoo displays but cannot remove public blockchain records or copies already made by others.

5.5 Legal, safety, and corporate purposes

We may disclose information when reasonably necessary to comply with law or legal process; respond to regulators or law enforcement; investigate fraud, market manipulation, security incidents, or violations; protect rights, safety, and property; resolve disputes; enforce agreements; or complete a corporate transaction.

We do not sell personal data for monetary consideration. Where applicable law treats certain advertising, analytics, or cross-context disclosures as a "sale" or "sharing", you may exercise the opt-out rights described below.

6. Third-party services and separate relationships

When you use a third-party service through Wahoo, you may form a separate relationship with that provider. In particular:

Polymarket determines the availability, rules, resolution, matching, settlement, restrictions, and processing associated with its markets;
MoonPay performs its own identity verification, compliance checks, payment processing, pricing, and digital-asset delivery;
Privy provides authentication and embedded-wallet infrastructure;
public blockchains independently publish and retain transaction information.

Wahoo does not control those parties' processing. Review their policies before using their services.

7. Cookies, local storage, analytics, and communications

Our website and app may use cookies, local storage, software development kits, pixels, or similar technologies to keep you signed in, remember preferences, prevent fraud, measure performance, understand usage, and improve the Services. You may control cookies through browser settings and mobile permissions, although strictly necessary technologies cannot be disabled without affecting functionality.

You may opt out of non-essential marketing messages by using the unsubscribe method in the message or contacting us. We may still send necessary account, security, legal, moderation, and transaction communications.

8. International transfers

Wahoo is based in Singapore, and our users and service providers may be located worldwide. Personal data may therefore be processed outside your country, including in countries whose laws differ from those where you live.

Where required, we use contractual, organizational, and technical safeguards intended to provide a standard of protection comparable to applicable requirements, including the PDPA's transfer-limitation obligation and recognized transfer mechanisms under other data-protection laws.

9. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide an active account, maintain security and market integrity, resolve disputes, enforce agreements, and meet legal, tax, accounting, audit, and regulatory obligations.

Retention depends on the type of data, the feature used, the sensitivity of the data, the risk of harm, legal requirements, and whether an account or transaction remains active. We may retain fraud, security, moderation, transaction, and dispute records after account closure where necessary. Backups may persist for a limited period before being overwritten. We may retain aggregated or de-identified information that no longer identifies you.

Public blockchain records are not controlled by Wahoo and may remain permanently available.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, including access controls, encrypted transport, secure device storage, logging, monitoring, and vendor controls appropriate to the nature of the information.

No method of transmission or storage is completely secure. You are responsible for securing your device, email, authentication methods, wallet credentials, recovery methods, and account access. Wahoo will never ask you to disclose a seed phrase or raw private key.

11. Your privacy rights and choices

Depending on where you live, you may have rights to:

be informed about our processing;
request access to personal data and information about its use or disclosure;
correct inaccurate or incomplete data;
request deletion or erasure;
restrict or object to processing;
withdraw consent prospectively;
receive portable data in a commonly used format;
opt out of direct marketing, targeted advertising, or qualifying sales/sharing;
appeal a refusal of a request;
complain to an applicable data-protection authority.

Singapore residents may request access and correction and may withdraw consent with reasonable notice, subject to exceptions under the PDPA. Residents of the European Economic Area, United Kingdom, and other covered jurisdictions may exercise the additional rights provided by their local laws. We will not discriminate against you for exercising a legally protected privacy right.

To exercise a right, email [email protected] with the subject Privacy Request. We may verify your identity and authority before completing a request. Some information may be exempt from a request, and some data must be retained for legal, security, fraud-prevention, dispute, or transaction-record purposes.

You can also change profile-visibility settings, notification preferences, and device permissions within the app or operating system. Deleting your account does not reverse completed blockchain transactions or delete copies controlled by third parties.

12. Automated systems

We may use automated systems to recommend content, rank feeds, detect spam or fraud, identify suspicious activity, apply geographic or eligibility controls, and assist moderation. Where applicable law grants a right concerning a decision based solely on automated processing that produces legal or similarly significant effects, you may contact us to request information or human review.

13. Children

The Services are not directed to anyone under 18 years old or under the minimum legal age required to use the relevant feature in their jurisdiction, whichever is higher. We do not knowingly permit minors to use wallet, funding, or prediction-market features. If you believe a minor has provided personal data, contact us so we can investigate and take appropriate action.

14. Changes to this Policy

We may update this Policy to reflect changes in our Services, providers, practices, or legal obligations. We will post the updated version and revise the effective date. Where required, we will provide additional notice or request consent before a material change takes effect.

15. Contact us

YANGKAN TECHNOLOGY PTE. LTD.
UEN: 202624041N
73 Ubi Road 1, #05-54, Oxley Bizhub
Singapore 408733
Email: [email protected]
Website: https://wahoo.live