Balance / Privacy Policy

[Last Updated: September 14, 2025]

Balance Privacy Policy

PRIVACY POLICY FOR WEBSITE, MOBILE APP, AND DESKTOP APP

INTRODUCTION

This privacy policy (“Privacy Policy“) governs the data collection practices of BlockSite LP (“BlockSite”, “us”, “we” and “our”) when you use our Balance mobile applications (the “App(s)”) or our website blocksite.co (the “Website”). Within this Privacy Policy, the Apps and Website are referred to as our “Services”. This Privacy Policy contains important disclosures on how we collect, disclose, and use (together referred to as “process”) your information. If you are a resident of California, please refer to Section 13 below, which includes additional privacy information for California Residents, the categories of personal information we collect and your rights under California privacy laws. Please see Section 14 below if you are a resident of other U.S. States with their own privacy laws which includes additional information for certain other U.S. States. We encourage you to read the Privacy Policy carefully prior to using our Services.

QUICK REFERENCE GUIDE

This Privacy Policy provides you with information about:

Personal Information We Collect
How We Use Personal Information
How We Disclose Personal Information
Aggregate Data and Non-identifiable Data
Cookies and Similar Technologies
Analytics
Your Information Collection Choices
How We Protect and Store Your Personal Information
User Rights
Delete Data and Exercise Rights
Use By Children
Changes to this Policy
How to Contact Us
Additional Privacy Information for California Residents
Additional Privacy Information for Residents of Other U.S. States

PERSONAL INFORMATION WE COLLECT

We collect “Personal Information” and “Personal Data” as defined under applicable privacy laws (collectively, “Personal Information”) when you create an account or communicate with us. We also collect certain persistent identifiers automatically when you use the Services. Personal Information does not include information that we de-identify or aggregate consistent with applicable law.

Personal Information We Collect Directly From You

Contact Information. We may collect your name, email and related general contact information, including login and password information, when you set up an account with us.
Communications Information. When you email, call, or otherwise communicate with us and with members of our team, we may collect and maintain a record of your contact details, communications, and our responses. We also maintain records of communications and information that you post on our social media channels and information you provide to us related to any customer support requests.
Financial Information. When payments are required, we use third party payment processors to conduct payments in connection with the Services, in this case via your Apple account.

Personal Information We Collect Automatically Through the Services

When you use our Services, we collect:

Internet Protocol (IP) addresses, but note that we permanently delete the last portion of the IP address and hash the full IP address before storing it, thus preventing us from having the ability to use it to transmit any information to or otherwise identify your device;
Data about your device, such as your device model and operating system version.
Data about your use of the App, including your interactions with the App and crash reports, content viewed, features used and the dates and times of your interactions with the App

We use cookies and similar technologies to recognize you as you use when you return to the Services so that we can understand how the Services are used, optimize user engagement and customize and enhance your experience.

Personal Information Collected from Third Parties

We may also collect and receive certain Personal Information about you from third party sources, such as from affiliates, business partners operating systems and social media platforms, public databases, and service providers who provide services or perform functions on our behalf. In addition, we may collect the following Personal Information from third-party sources:

Integrated Service Information. We may make available the ability for you to access, register for, sign up, or otherwise interact, engage, or connect with the Services through certain third-party features or integrated services. By accessing our Services via these third-party connections or integrated services, such as through your Apple accounts, we may collect or obtain certain Personal Information about you related to your use of such third-party services. For example, we may collect information related to your account and profile, such as your name, username, email, and other similar information available via your account. You should check your privacy settings on each integrated service to better understand how your Personal Information may be used, disclosed, or otherwise processed by these parties.
Transaction Information. Information relating to payments from you and other details of products or services you have purchased from us using third party payment processors (i.e., Apple).

HOW WE USE PERSONAL INFORMATION

We use the Personal Information collected from you for the following purposes:

Operating Services and Providing Related Support. To provide and operate our Website and Services, provide troubleshooting and technical support, and for similar service and support purposes. We process your Personal Information for this purpose for the performance of a contract we have with you (e.g., because you have agreed to our Terms of Service) or to take steps at your request prior to entering into a contract with you or to meet our legitimate interest (e.g., to support the proper functioning of our Services) in doing so.
Analytics and Improvement. To better understand how users access and use the App. In this regard, we have a legitimate interest in understanding how our Services work and ensuring the necessary improvements.
Marketing, Advertising and Campaign Management. We may disclose Personal Information to third-party ad network providers and/or traffic measurement services, who may use this data to improve and measure the effectiveness of our ads and those of third parties. The third party services that we currently use for source traffic measurement services are AppsFlyer Ltd. and Braze, Inc.. The collection and processing of your Personal Information by each of these third party service providers will be done in accordance with each of their respective privacy policies. You can find AppsFlyer’s privacy policy here and Braze’s privacy policy here. Where required by applicable law, we may obtain your consent in order to send you marketing messages. We also have a legitimate interest in marketing and advertising our Services and may not rely on your consent to the extent permitted by applicable law.
Security and Protection of Rights. To protect the Services and our business operations; to protect our rights or those of our stakeholders; to prevent and detect fraud, unauthorized activities and access, and other misuse; conduct risk and security control and monitoring; where we believe necessary, to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Service. To maintain our facilities and infrastructure and undertake quality and safety assurance measures. We have a legitimate interest in securing our assets and protecting our rights.
Compliance and Legal Process. To comply with the law and our legal obligations and respond to the legal process and related legal proceedings. In this regard, we will process your Personal Information to comply with our legal obligations, and in our legitimate interest.
Business Transfers. To consider and implement mergers, acquisitions, reorganizations, and other business transactions, and to administer our general business, accounting, recordkeeping, and legal functions. Any such processing of your Personal Information will be in our legitimate interest.

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose Personal Information for the purposes described in this Privacy Policy to the following parties:

Vendors and Service Providers. We may disclose Personal Information we collect to our service providers, processors, and vendors who perform functions on our behalf to allow us to provide the Services.
Third Party Platforms and Networks. We may disclose or make available Personal Information to third parties in support of our marketing, advertising, and campaign management as further explained in the How We Use Personal Information Section above.
Business Partners. If we, our affiliates, or subsidiaries are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. We may also disclose certain Personal Information as necessary prior to the completion of such a transaction or corporate transactions such as financings or restructurings, to lenders, auditors, and third-party advisors, including attorneys and consultants, as part of due diligence or as necessary to plan for a transaction.
Others as permitted or required by applicable law. We may disclose Personal Information to third parties to the extent permitted or required by applicable law. This may include regulators, government entities, and law enforcement. It may also include certain disclosures that we are required to make.
Security and protection of rights. We may disclose your Personal Information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Privacy Policy, or as evidence in litigation in which we are involved.

We will take the necessary steps to ensure that international transfers of personal data (including Personal Information) meet all requirements under applicable data protection laws. When personal data collected within the European Economic Area (“EEA“) or the UK is transferred outside those markets, we will take the steps necessary to ensure that sufficient safeguards are provided to such data during its transfer and processing outside of the EEA or the UK. Some of the measures implemented to safeguard your Personal Information include ensuring that the recipient is bound by specific contractual clauses approved by the European Commission and / or the UK Government to provide adequate protection for Personal Information. Where applicable, you can request a copy of the relevant contractual safeguards that we have put in place.

AGGREGATED DATA AND NON-IDENTIFIABLE DATA

We may use and disclose aggregated and other non-identifiable data related to our business and the Services for quality control, analytics, research, development, and other purposes. Some of this information may be considered “deidentified” under U.S. privacy laws (i.e., data that is no longer linked or reasonably linkable to an identified or identifiable consumer). Where we rely on data that has been “de-identified” as defined by U.S. privacy laws, we will: (i) take reasonable measures to ensure that the de-identified information cannot be associated with an individual, household, or device; (ii) commit to maintain and use the information in de-identified form and not attempt to re-identify the information; and (iii) contractually obligate any further recipient to comply with this Section 4.

COOKIES, PIXELS, AND OTHER TECHNOLOGIES

Our App may use certain monitoring technologies including:

Cookies. A cookie is a piece of information that a website stores on a user’s computer, and that the user’s browser provides to the website each time the user submits a query to the website using that browser. When you access our Website, we place cookies on your computer. Some cookies allow us to make it easier for you to navigate our Sites, while others are used to enable a faster log-in process or to allow us to track your activities on our Sites. There are two types of cookies: session and persistent cookies.
Pixel Tags. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users and help us manage content and compile usage statistics.
Software Development Kits. A software development kit (“SDK(s)”) is a set of software tools and code that developers integrate into an app to enable specific functions—such as analytics, advertising, crash reporting, or content filtering—without having to build those features from scratch. These SDKs may collect and process certain information automatically, such as device identifiers, usage data, and interactions with app features. Our Apps may use SDKs provided by third-party service providers to help us deliver, maintain, and improve our Services. Some of this information may be considered personal under applicable privacy laws, and we may request your consent before collecting or processing it. We take steps to ensure that data collected through SDKs is handled responsibly and shared only with authorized third parties under appropriate protections.You can manage your consent or opt out of certain data collection through the App’s settings or via “Your Privacy Choices” within the settings menu.

Our App uses the following third-party analytics tools to help us understand how users interact with our app and to improve performance and user experience. These tools include:

AppsFlyer

We use AppsFlyer, a mobile attribution and marketing analytics tool provided by AppsFlyer Ltd., to measure the effectiveness of our marketing campaigns and understand how users discover and install our app. This may include data such as device information, install source, advertising identifiers, and in-app events. AppsFlyer helps us attribute app installs to specific campaigns, analyze user acquisition channels, and optimize our marketing efforts based on aggregated insights.

You can opt out of AppsFlyer tracking by submitting a request via their online form: https://www.appsflyer.com/legal/opt-out/. For more information about AppsFlyer’s privacy practices, please visit its privacy policy here:https://www.appsflyer.com/legal/privacy-policy/.

Braze

We use Braze, a customer engagement platform provided by Braze, Inc., to send in-app messages, push notifications, emails, and other communications, and to analyze how users interact with our app. This includes data such as device information, session events, notification/ message engagement, and usage patterns. Braze helps us improve user communications, personalize content, reduce churn, and generally enhance the experience based on aggregated behavior.

For more information regarding Braze’s privacy practices please visit its privacy policy here: https://www.braze.com/company/legal/privacy.

Firebase (by Google)

We use Firebase, a suite of services provided by Google LLC, which includes tools such as Firebase Analytics and Crashlytics. Firebase may collect information such as device identifiers, usage data, crash reports, and performance metrics. Firebase Analytics helps us understand how users interact with our App, while Crashlytics provides us with crash reports to improve App stability.

For more information about how Google uses data from Firebase services, please visit:
https://firebase.google.com/support/privacy

Mixpanel

We use Mixpanel, a product analytics tool provided by Mixpanel, Inc., to collect and analyze user behavior within our app. This includes data such as features used, actions taken, session durations, and device information. Mixpanel helps us understand how users engage with our app so that we can make improvements based on aggregated usage patterns.

You can opt out of Mixpanel tracking by following the instructions provided at: https://mixpanel.com/optout/ and please see Mixpanel’s privacy policy here for more information about their privacy practices: https://mixpanel.com/legal/privacy-policy/.

HOW WE PROTECT AND STORE YOUR PERSONAL INFORMATION

Security

We have implemented and maintain appropriate technical and organizational security measures, policies and procedures designed to reduce the risk of accidental destruction or loss, or the unlawful or unauthorized destruction, loss, alteration, disclosure or access to your personal information. Although we take the above measures to secure the Personal Information, we cannot guarantee the security of information transmitted through the internet. As the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect your user IDs and passwords, please take appropriate measures to protect this information.

Retention of Your Personal Information

We store your Personal Information for as long as is reasonably necessary for the purposes for which it was collected, as explained in this Privacy Policy. In some circumstances we may store your Personal Information for longer periods of time, including where we are permitted or required to do so in accordance with legal, regulatory, tax or accounting requirements, in the event of any legal complaints, or if we reasonably believe there is a prospect of litigation relating to your Personal Information or dealings.

USER RIGHTS

To confirm with us whether your Personal Information is processed, and if it is, to request access to the Personal Information processed, the purpose of the processing, and the recipients or categories of recipients of your Personal Information.
To rectify inaccurate or incomplete Personal Information concerning you. We encourage you to review your information on the Services regularly to ensure that it is accurate and up to date.
In certain circumstances, to ask us to erase Personal Information concerning you (i.e., delete your Personal Information);
To request that we restrict the processing of your Personal Information in certain circumstances.
To object to the processing of your Personal Information, where we are relying on a legitimate interest for such processing.
To object to us processing your Personal Information for direct marketing purposes.
To receive your Personal Information in a structured, commonly used and machine-readable format or ask that we transfer the Personal Information, to another organization. This right only applies if our lawful basis for such processing is your consent or a contract, we have entered into with you.
To withdraw your consent at any time, where we are relying on consent to process your Personal information. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

Note that where your Personal Information has been de-identified, we will not be able to identify you or comply with some of the rights mentioned above. These rights do not apply to de-identified information. Additionally, these rights are not absolute and may therefore be subject to applicable exceptions, such as the interest of other individuals, in order to preserve that information for anticipated litigation or demands from a regulator.

Retention of Your Personal Information

USER RIGHTS

Where provided under applicable law (e.g., within the European Union and United Kingdom), you may have the right:

To confirm with us whether your Personal Information is processed, and if it is, to request access to the Personal Information processed, the purpose of the processing, and the recipients or categories of recipients of your Personal Information.
To rectify inaccurate or incomplete Personal Information concerning you. We encourage you to review your information on the BlockSite Services regularly to ensure that it is accurate and up to date.
In certain circumstances, to ask us to erase Personal Information concerning you (i.e., delete your Personal Information);
To request that we restrict the processing of your Personal Information in certain circumstances.
To object to the processing of your Personal Information, where we are relying on a legitimate interest for such processing.
To object to us processing your Personal Information for direct marketing purposes.
To receive your Personal Information in a structured, commonly used and machine-readable format or ask that we transfer the Personal Information, to another organization. This right only applies if our lawful basis for such processing is your consent or a contract, we have entered into with you.
To withdraw your consent at any time, where we are relying on consent to process your Personal information. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

DELETE DATA AND EXERCISE RIGHTS

Please contact our Data Protection Officer at: dpo@blocksite.co if you would like to exercise any of the rights included in Section 8 above, Section 13 or 14 below. Note that we may request proof of your identity, and we reserve the right to charge a fee where permitted by law, such as in circumstances where your request is deemed to be excessive. You may have the right to lodge a complaint with a data protection authority, subject to applicable law (as is the case in the European Union and the UK). You can find information on the relevant EU data protection authorities here and the UK Information Commissioner’s Office here.

If you would like to delete your Personal Information or data please do so by choosing one of the following options:

Permanently delete your account:

You can also choose to delete your account and the data associated with your account by visiting the menu of the App and clicking the “Delete My Account” button.

Delete some or all of your data or information (including your Personal Information):

Please email us at: dpo@blocksite.co to request that we delete some or all of your data (including your Personal Information).

USE BY CHILDREN

If you are considered a “child” or a “minor” in your jurisdiction you are prohibited from using the Services. In the event that we become aware that a child has provided any Personal Information to us, we will discard such information. If you have any reason to believe that a child has shared any Personal Information with us, please contact our Data Protection Officer at: dpo@blocksite.co. If you are under 18, please be sure to read this Privacy Policy with your parents or legal guardians and ask questions about things you do not understand.

CHANGES TO THIS POLICY

This Privacy Policy is current as of the Last Updated date set forth above. We may change this Privacy Policy from time to time, so please be sure to check back periodically. We will post any updates to the Privacy Policy on the App. We will not make material changes to how we collect, use and disclose the Personal Information we have previously collected about you without prior notice.

HOW TO CONTACT US

If you have any questions about this Privacy Policy or how we collect and use Personal Information, please contact us at: dpo@blocksite.co.

ADDITIONAL PRIVACY INFORMATION FOR CALIFORNIA RESIDENTS

This section of the Privacy Policy provides additional information for California residents and describes our information practices pursuant to applicable California privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (the “CCPA”). To the extent you are a resident of California, and we collect “Personal Information” subject to CCPA, the following applies.

This section does not address or apply to our handling of publicly available information or to Personal Information that is otherwise exempt under the CCPA. This section also does not address or apply to Personal Information we collect and process about our employees, personnel, and job applicants, which are subject to different privacy notices.

Categories of Personal Information Collected and Disclosed. While our processing of Personal Information varies based upon our relationship and interactions with you, the table below identifies the categories of Personal Information we may collect about you (and may have collected in the prior 12 months), as defined by the CCPA, as well as the categories of third parties to whom we disclosed Personal Information for a business or commercial purpose.

Categories of Personal Information Collected		Categories of Third-Party Disclosures
Identifiers	Includes direct identifiers, such as name, alias, account number or unique personal identifier; email address, and other contact information; IP address and other online identifiers.	Affiliates Advisors and agents Data analytics providers Regulators, government entities, and law enforcement (if required to do so by law or court order) Others as required by law
Customer Records	Includes information such as name, user ID, account name, contact information, and other similar information.	Affiliates Advisors and agents Regulators, government entities, and law enforcement (if required to do so by law or court order) Others as required by law
Location Data	Such as general location information about a particular individual or device (country level).	Affiliates Advisors and agents Regulators, government entities, and law enforcement (if required to do so by law or court order) Others as required by law

Sources of Personal Information. We generally collect Personal Information from the following categories of sources: directly and indirectly from you; affiliates; vendors and service providers.

Purposes of Collection, Use, and Disclosure. As described above in Section 2. How We Use Personal Information and Section 3. How We Disclose Personal Information, in general, we may collect, use, disclose and otherwise process the above personal information for the following business or commercial purposes and as otherwise directed or consented to by you:

Operating Services and providing related support
Analytics and improvement
Security and protection of rights
Compliance and legal process
Business transfers
Provision of Services by us and by our service providers, processors, and vendors.

Retention. We retain the personal information we collect only as reasonably necessary for the purposes described above or otherwise disclosed to you at the time of collection. For example, we will retain your account information for as long as you have an active account with us and additional information as necessary to comply with our legal, tax, accounting and recordkeeping obligations, to provide you with the services you have requested, as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and comply with our legal obligations.

Sales and Sharing of Personal Information. CCPA defines a “sale” as disclosing or making Personal Information available to a third party in exchange for monetary or other valuable consideration. CCPA also defines “sharing” as disclosing or making available Personal Information to a third party for purposes of cross-context behavioral advertising.

While we do not disclose Personal Information to third parties in exchange for monetary compensation, we may “sell” or “share” (as such terms are defined under the CCPA) the following categories of Personal Information in the following limited circumstances:

Identifiers:

We may “sell” or “share” Identifiers with (1) social networks to enable you to login to the Services using your social network credentials and (2) affiliates in order to provide and improve the Services as further explained in Section 1: Personal Information We Collect and Section 3: How We Disclose Personal Information, above.

We do not sell or share sensitive Personal Information, nor do we sell or share any Personal Information about individuals who we know are under sixteen (16) years old.

Your California Privacy Rights. The CCPA provides California residents with specific rights regarding their Personal Information. If you are a California resident, subject to certain conditions and exceptions, you may have the following rights to your Personal Information:

Right to Know: With respect to the Personal Information we have collected about you in the prior 12 months, you have the right to request: (i) the categories of Personal Information about you we have collected; (ii) the sources from which we have collected that Personal Information; (iii) our business or commercial purposes for collecting, selling, or sharing that Personal Information; (iv) the categories of third parties to whom we have disclosed that Personal Information; and (v) a copy of the specific pieces of your Personal Information we have collected.
Right to Correct: You have the right to request that we correct inaccuracies in your Personal Information.
Right to Delete: Subject to certain conditions and exceptions, you may have the right to request deletion of Personal Information that we have collected about you.
Right to Opt-Out of Sale/Sharing: You may have the right to opt-out of the “sale” or “sharing” of your Personal Information.
Right to Limit Use and Disclosure: You have the right to limit use and disclosure of your sensitive Personal Information. However, we do not collect, use, or disclose Sensitive Personal Information; thus, this right is not available to California residents.
Right to Non-Discrimination: We will not discriminate against you for exercising any of the rights described in this section.

Authorized Agent: You may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.

Submitting CCPA Requests. California residents may exercise the rights described above via the methods described below:

Right to Know, Delete, and Correct: California residents may submit CCPA requests to access/know, delete, and correct Personal Information by contacting us at dpo@blocksite.co. You can also choose to delete your account and the data associated with your account by visiting the account setting page here and clicking the “Delete My Account” button.
When you submit a request, we will take steps to verify your identity and request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.
You may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.
Right to Opt-Out of Sale/Sharing:

Currently the App does not sell/share your Personal Information with a third party.

Additional Privacy Information for Residents of Other U.S. States
Depending on your state of residence (e.g., without limitation Colorado, Connecticut, Virginia, Washington, Nevada, Utah), you may have additional privacy rights, subject to certain exceptions. These rights may include:Authorized Agent: You may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.Sbmitting CCPA Requests. California residents may exercise the rights described above via the methods described below:

Access: You may request confirmation of whether we process your Personal Information, and where applicable, request a copy of such data in a portable and, when feasible, readily usable format.
Deletion: You may have the right to ask us to delete Personal Information you have provided or that we have otherwise collected about you.
Correction: You may request that we rectify any inaccuracies in your Personal Information, based on the nature of the information and our use of it.
Right to Know: You may request information about the categories of Personal Information collected, the purposes for which it is used, and the categories of third parties with whom it is shared.
Opt-Out Rights: You may request to opt out of the following:
- The sale of your Personal Information;
- The use of your Personal Information for targeted advertising;
- Automated processing of your Personal Information when it results in legal or similarly significant effects.
Right to Non-Discrimination: You have the right to not be discriminated against for exercising your privacy rights.

If you have any questions about our privacy practices or this Privacy Policy, please contact us as noted above in Section 12. How to Contact Us. If you would like to submit a request to exercise any of the above rights please email us at: dpo@blocksite.co (including the opt-ing out of a sale). You can also choose to delete your account and the data associated with your account by visiting the account setting page here and clicking the “Delete My Account” button. When you make a request, we will attempt to confirm both your identity and the legitimacy of the request by comparing the details you provide with information we already hold. In certain situations, we may need to ask for additional details to complete this verification process or to proceed with your request. If we are unable to confirm your identity, we may be required to decline your request. Should that happen, we will inform you of the reason for the denial and, where applicable, let you know how to address any issues so the request can be properly submitted.

Balance / Privacy Policy