Privacy Policy

When you sign up and use Clover, we collect a few different categories of information:

Account information. When you register, we collect your email address (for email/Google sign-up) or your anonymized Apple ID (for Sign in with Apple). We use this to identify your account, authenticate you, and communicate with you.

Wallet information. We create or help you access supported wallets and venue accounts tied to your Clover account. This may include a Safe smart contract wallet, a Polymarket DepositWallet or trading wallet on Polygon, a device-root execution wallet, and wallet/account information used for Hyperliquid HIP-4 markets. We store wallet addresses, trading wallet addresses, deposit addresses, and venue identifiers needed to show balances, route trades, and support deposits and withdrawals.

Activity data. We log your in-app behavior: which markets you view and trade, your portfolio positions, posts and comments you write, accounts you follow, and searches you run. This helps us show you a relevant feed and improve the product.

Device and technical data. We collect your device type, operating system, app version, IP address, and push notification token. This is used for security, crash reporting, and delivering notifications.

Communications. If you contact our support team or send us feedback, we keep a record of that exchange.

Trades and transfers made through Clover occur on third-party venues, blockchains, or venue-managed ledgers. Polymarket activity may involve Polygon blockchain transactions and public Polymarket order or activity data. Hyperliquid HIP-4 activity may involve Hyperliquid account, fill, balance, position, and settlement data. Public blockchains and public or semi-public venue APIs can reveal wallet addresses, transaction history, balances, fills, positions, and market participation.

Clover Labs does not control what is visible on-chain, and we cannot delete or modify blockchain records. If you are concerned about on-chain privacy, we recommend reading up on how public blockchains work before trading.

We use the information we collect to:

• Create and maintain your account and wallet.
• Execute, track, and display your prediction market activity.
• Run the social features of the app — feed, profiles, posts, direct messages, leaderboards.
• Calculate and apply fee tiers and referral rewards.
• Send you push notifications about market activity, social interactions, and important account events (you can manage these in your notification settings).
• Detect fraud, abuse, and restricted-jurisdiction access.
• Improve the product through analytics and usage patterns.
• Comply with applicable laws and respond to valid legal requests.

We do not use your data to serve you third-party advertising, and we do not sell your personal information to anyone.

Clover accounts may use one or more supported wallets or venue accounts. The way your wallet is secured depends on how you signed up and which features you enable:

• Email or Google: Your wallet's private key is generated and held by Magic.link, a third-party authentication provider. Clover Labs never sees this key. You can export it at any time from your account settings.
• Sign in with Apple: Your wallet may be co-managed by Clover's Operator Key system. You can add an external wallet (MetaMask, Phantom, etc.) as a co-owner where the app supports it.
• Device-root and Hyperliquid features: Some features may use a device-secured key or Hyperliquid-compatible execution wallet/account to sign orders, transfers, and related actions you authorize.

Clover may operate an Operator Key or use a device/session signer to submit actions you authorize, such as orders, gas-sponsored transactions, bridges, transfers, redemptions where supported, and venue-specific trading actions. These permissions are intended to support app functionality and do not make Clover the owner of your assets.

Your funds are held in supported wallets, smart contracts, or third-party venue accounts associated with you. Clover cannot reverse third-party transactions or change market outcomes.

We do not sell your data. We share limited information only in these situations:

• Magic.link — handles private key generation and authentication for email and Google users.
• Polymarket — your wallet address and trade data are submitted to Polymarket's infrastructure when you place, cancel, or redeem supported Polymarket orders or positions.
• Hyperliquid — your wallet/account address, order details, fills, balances, positions, and related activity may be submitted to or retrieved from Hyperliquid infrastructure when you use HIP-4 outcome markets or Hyperliquid transfer features.
• Infrastructure providers — cloud hosting, error monitoring, and analytics tools that help us run and improve the platform. These providers process data on our behalf and are contractually required to keep it confidential.
• Law enforcement and legal process — we will disclose information when required by a valid subpoena, court order, or other legal obligation, or when we believe in good faith that disclosure is necessary to prevent harm or protect our legal rights.

Clover is a social app. Parts of your activity are visible to other users by design:

• Your public profile, including display name and profile picture.
• Posts and comments you publish to the feed.
• Your prediction positions and portfolio performance, if you have not set your profile to private.
• Leaderboard rankings.

Direct messages are private and only visible to the participants in the conversation. You can adjust your visibility settings in the app at any time under Privacy & Safety.

We use analytics tools to understand how people use Clover — which features get used, where people drop off, what causes crashes. This data is aggregated and used to make product decisions. We do not use it to build advertising profiles or share it with data brokers.

Our web properties may use cookies and similar tracking technologies to maintain your session and measure traffic. You can control cookie behavior through your browser settings, though disabling certain cookies may affect functionality.

If you grant Clover permission to send push notifications, we will use your device's push token to deliver alerts about market activity, trade confirmations, social interactions, and account updates. You can revoke this permission at any time through your device's notification settings or within the Clover app under Notifications.

We take security seriously. Our infrastructure uses encrypted connections (TLS) for all data in transit, access controls that limit who on our team can view user data, secure token-based authentication, and regular security reviews of our systems and third-party integrations.

That said, no system is perfectly secure. If we become aware of a breach that affects your personal data, we will notify you as required by applicable law and take steps to contain and remediate the issue as quickly as possible.

The security of your on-chain assets ultimately depends on the security of your private key or wallet credentials. See Section 4 for how we protect those, and what you can do to take additional control.

We keep your account data for as long as your account is active, or for as long as we need it to operate the platform and meet our legal obligations. If you delete your account, we will remove your personal data from our systems within a reasonable period, except where retention is required by law.

On-chain and venue data — including wallet addresses, transaction history, token balances, order history, fills, positions, and settlement records — may not be deletable by Clover. That data lives on blockchains or third-party systems outside our control.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information in your account.
• Request deletion of your account and associated personal data.
• Export your private key (email/Google users) or add a co-owner wallet (Apple users) to gain independent wallet access.
• Opt out of non-essential communications.
• Object to or restrict certain types of processing (where applicable under GDPR or similar laws).

To exercise any of these rights, email us at main@clover.fun. We will respond within 30 days. We may need to verify your identity before processing certain requests.

If you are a California resident, you have additional rights under the California Consumer Privacy Act. You have the right to know what personal information we collect and how we use it, the right to request deletion of your personal information, and the right to opt out of the sale of your personal information. Clover Labs does not sell personal information. To submit a request, contact us at main@clover.fun.

Clover is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a minor, we will delete it promptly. If you believe a minor has created a Clover account, please contact us at main@clover.fun.

Clover Labs is based in the United States. If you access the Services from outside the US, your data may be transferred to and processed on servers located in the US or other countries. By using Clover, you acknowledge this and consent to the transfer. We take steps to ensure that international data transfers are handled in accordance with applicable law.

We may update this privacy policy as the product evolves or as legal requirements change. When we make material changes, we will let you know through the app or via email. The "Last updated" date at the top of this page always reflects the most current version. Continued use of Clover after a policy update means you accept the revised terms.

If you have questions, concerns, or requests related to this privacy policy or how we handle your data, reach us at main@clover.fun or through in-app support. We aim to respond to all privacy inquiries within 30 days.