Privacy Policy
Last updated: July 28, 2026
📋Overview
This Privacy Policy explains how GORAE LABS (“Becoming Crypto Whale”, “we”, “us”, “our”) processes information when you use our services (collectively, the “Services”).
The Services include the website https://www.becomingcryptowhale.com (the "Website") and the Whale Platform mobile applications on iOS/Android, including Whale Journal, Whale Tools, and Whale Academy (collectively, the "Apps"), as well as related tools and features we provide.
This policy does not cover third-party services you may access through links (such as exchanges). Their privacy practices are governed by their own policies.
📝Information We Process
Information collected automatically
- Server logs (IP address, request time, pages viewed, user agent)
- Device and browser information (device model, OS/browser version)
- Run optional tags via Google Tag Manager (Website; where enabled and where you consent) and serve/measure ads via Google AdMob (App; where enabled and where you consent, when required)
- If enabled, app-use events, device/app details, performance data, crash reports, and your account UUID after sign-in are encrypted and sent to Google in the United States and other service locations as you use the app, to analyze and improve it. Retention: Analytics up to 14 months, Crashlytics 90 days, and Performance 30–60 days.
- If enabled, advertising identifiers where permitted, IP address, device/app details, consent status, and ad interactions are encrypted and sent to Google in the United States and other service locations when ads load or are used, to deliver and measure ads and prevent fraud. Retention: AdMob user activity 90 days; other reports up to 2,555 days; server-log IP data is de-identified after 9 months and cookie data after 18 months, subject to limited longer legal or security retention.
Information you provide
- Contact information (e.g., email), account profile metadata, and authentication identifiers if you contact us or sign in
- Support requests, feedback, and attachments you send to us
- User content you create or upload (journal entries, notes, rules) - Whale Journal
- Profit/loss and performance data you input - Whale Journal
- Uploaded images/screenshots (where available) - Whale Journal
- Calculation inputs, saved presets, recent results, and notes you choose to keep - Whale Tools
- Learning progress, review history, reminder settings, deck/card identifiers, and training state - Whale Academy
- Notification preferences, reminder schedules, and device push tokens (where enabled)
- Subscription, billing, restore-purchase, and entitlement status needed to provide paid access
- Device registration, sync metadata, and conflict-resolution metadata for optional account/cloud features
- App settings/preferences (e.g., language, currency, timezone, theme)
🎯How We Use Your Information
- •Provide and operate the Services (core functionality, support, paid access, and advertising where enabled)
- •Deliver reminders, notifications, widgets, and companion-device experiences you enable
- •Improve the Services (performance, reliability, usability)
- •Maintain security and prevent abuse
- •Process optional features you enable (accounts, cloud sync, subscriptions, exports)
- •Comply with legal obligations
- •Provide Whale Academy learning flows, review reminders, progress tracking, in-app advertising where enabled, and diagnostics needed to keep the app reliable
⏰Data Retention
Retention depends on the feature and data type. We retain personal data only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required by law.
- App local data: Remains on your device until you delete it (e.g., by deleting the app or using in-app deletion/export controls where available)
- Push tokens, device registrations, and notification preference records: Retained until you disable notifications, sign out, or stale registrations are removed
- Website logs/monitoring/analytics: Retained for the period configured by the provider or needed for security and troubleshooting
- If enabled, app-use events, device/app details, performance data, crash reports, and your account UUID after sign-in are encrypted and sent to Google in the United States and other service locations as you use the app, to analyze and improve it. Retention: Analytics up to 14 months, Crashlytics 90 days, and Performance 30–60 days.
- If enabled, advertising identifiers where permitted, IP address, device/app details, consent status, and ad interactions are encrypted and sent to Google in the United States and other service locations when ads load or are used, to deliver and measure ads and prevent fraud. Retention: AdMob user activity 90 days; other reports up to 2,555 days; server-log IP data is de-identified after 9 months and cookie data after 18 months, subject to limited longer legal or security retention.
- Support inquiries: Retained for as long as needed to respond, troubleshoot, and comply with record-keeping obligations
🔐Security
We use reasonable technical and organizational measures to protect information. However, no method of transmission or storage is 100% secure.
🤝Third-party Sharing
Policy: We do not sell personal information. We may share information with service providers strictly to operate the Services (including authentication, synchronization, notifications, subscription access, diagnostics, and advertising where enabled), subject to confidentiality obligations. We do not share your journal content, Academy learning progress, or saved calculator data for third-party advertising purposes; however, we may share device identifiers, consent status, and ad interaction data with advertising partners to serve and measure ads, including personalized ads where you consent.
Service Providers
- Supabase: Shared account authentication, database services, and optional cloud features where you enable or use them
- Cloudflare: Website hosting and content delivery
- Google LLC / Firebase: If enabled, app-use events, device/app details, performance data, crash reports, and your account UUID after sign-in are encrypted and sent to Google in the United States and other service locations as you use the app, to analyze and improve it. Retention: Analytics up to 14 months, Crashlytics 90 days, and Performance 30–60 days.
- Google Tag Manager: Optional website tags (where enabled and where you consent); Google AdMob (Google Mobile Ads SDK): In-app advertising, measurement, and fraud prevention (where ads are enabled and where consent is required)
- Firebase Analytics / Crashlytics / Performance / Cloud Messaging and Apple Push Notification service: App analytics, crash reporting, performance diagnostics, and notification delivery to registered devices
- App Store / Google Play: App distribution, billing, subscription management, and crash reporting
We may also disclose information when required by law, court order, or to protect our legal rights.
🍪Cookies and Tracking
Our Website uses cookies and similar technologies (and localStorage/sessionStorage) to support core functionality and improve your experience. Our App may use advertising identifiers (IDFA/Advertising ID) and similar technologies via advertising SDKs to show and measure ads (including personalized ads where you consent).
We use these technologies to:
- Remember your preferences (language, theme, currency)
- Store your cookie consent choice
- Store referral/affiliate click information (where enabled)
- Keep you signed in to your account (where sign-in is available)
- Cloudflare: Website hosting and content delivery
- Run optional tags via Google Tag Manager (Website; where enabled and where you consent) and serve/measure ads via Google AdMob (App; where enabled and where you consent, when required)
- Improve service performance and reliability (e.g., error monitoring)
👤Your Rights
Depending on where you live, you may have rights to access, correct, delete, or export your information, or to object to certain processing.
- •Access your personal data
- •Correct inaccurate information
- •Delete your personal data
- •Export your data (portability)
- •Object to or restrict certain processing (where applicable)
- •Withdraw consent where processing is based on consent
- •Lodge a complaint with a supervisory authority (EU/UK, where applicable)
🗑️Account & Data Deletion
You can delete your account directly within the app.
In-App Deletion
- Open the app and navigate to the Profile tab
- Select Account Management
- Tap Delete Account
- Complete email verification and type DELETE to confirm
Data Deleted
- Account and profile information
- Account-linked cloud/sync records, device registrations, notification settings, and entitlement records
- Whale Journal trade history and related account-linked data, where cloud/account features are enabled
- Whale Tools saved calculator data and related account-linked data, where account features are enabled
- Whale Academy learning progress and related account-linked data, where account features are enabled
- Local data stored by the app where account deletion is initiated, including Drift data, reminders, surface state, and app preferences
Some data may be retained for the period required by applicable law, billing support, security, or fraud prevention. If you request deletion by email instead of using the in-app flow, local data on devices you still possess may remain until you delete the app or use in-app deletion.
You may also request deletion by email: contact@becomingcryptowhale.com
🇪🇺For EEA/UK Users (GDPR)
If you are in the EEA/UK, we rely on one or more of the following legal bases:
- •Contract: to provide the Services you request
- •Legitimate interests: to secure, maintain, and improve the Services (e.g., preventing abuse, diagnosing errors)
- •Consent: for certain cookies/tracking technologies and personalized advertising where required
- •Legal obligations: where we must comply with laws and regulations
You also have rights under GDPR including access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.
🇰🇷For Korean Users (PIPA)
Korean residents have rights under the Personal Information Protection Act:
- •Right to access and request copies of your personal data
- •Right to request correction or deletion of your data
- •Right to request suspension of processing
- •Right to withdraw consent at any time
Personal data is destroyed without delay when the purpose of collection is achieved. You may exercise your rights by contacting us at contact@becomingcryptowhale.com.
👶Children's Privacy
The Services are not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
🌍International Data Transfers
Required-service transfers: Supabase Pte. Ltd. (privacy@supabase.io) — United States (us-east-1) and subprocessor locations; encrypted continuously when account/cloud features are used; for authentication and sync; until account deletion or service end, with backups deleted within 30 days after service termination. Cloudflare, Inc. (legal@cloudflare.com) — United States, APAC, and global edge locations; encrypted on each Website request; for hosting, CDN, and security; for the configured log/security period or service term. Apple Inc. and Google LLC (apple.com/privacy/contact; policies.google.com/privacy) — United States and global locations; encrypted when store, sign-in, purchase, or push functions are used; to provide those requested functions; under each provider’s retention policy. Legal basis: performance of requested services and processing outsourcing; safeguards: DPA and, where applicable, SCCs, UK Addendum, and DPF.
If enabled, app-use events, device/app details, performance data, crash reports, and your account UUID after sign-in are encrypted and sent to Google in the United States and other service locations as you use the app, to analyze and improve it. Retention: Analytics up to 14 months, Crashlytics 90 days, and Performance 30–60 days.
If enabled, advertising identifiers where permitted, IP address, device/app details, consent status, and ad interactions are encrypted and sent to Google in the United States and other service locations when ads load or are used, to deliver and measure ads and prevent fraud. Retention: AdMob user activity 90 days; other reports up to 2,555 days; server-log IP data is de-identified after 9 months and cookie data after 18 months, subject to limited longer legal or security retention.
📧Contact Us
Questions or requests regarding privacy:
Email: contact@becomingcryptowhale.com
Privacy contact: GORAE LABS Privacy Team / 14 Seongjeonggongwon 2-gil, Seobuk-gu, Cheonan-si, Chungcheongnam-do, 31110, Republic of Korea
🔄Policy Updates
The date shown above is the effective date. We post an updated policy here and, where required, notify you through the Services before a material change takes effect.