Flagged Privacy Policy

Last updated: September 27, 2026

Flagged sends you news alerts relevant to the prediction market positions you hold. It is an independent, informational app: it is not affiliated with Polymarket or Kalshi, it never places trades, and it never moves your money.

Data we collect

Account: your Apple account identifier and, if you share them, your name and email address (via Sign in with Apple).
Wallet addresses you choose to track. These are public blockchain addresses; we read only public position data.
Exchange API credentials you choose to link — a Polymarket US Key ID and secret, or a Kalshi Key ID and private key. The secret or private key is stored encrypted and is used only to read your positions — never to place orders or move funds. Create Kalshi keys as read-only keys. Polymarket US does not offer read-only keys, so a Polymarket US key could be used to place orders (though not to withdraw funds); Flagged only ever reads your positions with it. You can remove either at any time in Settings, which deletes it from Flagged.
Positions fetched from Polymarket and Kalshi for the wallets and accounts you connect.
Trading profile: your optional questionnaire answers (market interests, experience, trade frequency).
Preferences and push token: your alert settings and your device's Apple Push Notification service (APNs) token — a device identifier — so we can deliver alerts to that device.
Price alert rules: the per-market price thresholds and price targets you set, so we can notify you when a market moves.
Alert reactions: when you mark an alert "not relevant" or "useful", we store that verdict against the alert so we can tune what we send you and measure alert quality.
Feedback you send us: the message you type in Settings → Send feedback and the topic you pick for it, together with the app and iOS version your device reported at the time, so a report can be tied to a build.

How we use it

Only to operate the service: fetching your positions, matching news to the markets you hold, delivering the alerts you asked for, and improving alert quality. We do not show ads, do not track you across apps or websites, do not use third-party analytics, and do not sell or share your personal data.

Service providers

We use hosting infrastructure to run the service, Apple's Push Notification service to deliver alerts, and Polymarket's and Kalshi's APIs to read position data. News article text (never your personal data) is processed with AI providers to judge relevance to markets.

Retention and deletion

Your data is kept only while you have an account. Settings → Delete Account permanently deletes everything we hold for you — your wallets, credentials, positions, profile, preferences, devices and push tokens, alerts and alert reactions, price alert rules, feedback, and email — from our systems, immediately and in-app.

One thing is kept, in a form that is no longer linked to you: the "useful" and "not relevant" ratings you gave alerts. We keep each rating with only the news story, the market, the relevance score we had given it, and the day it was made — no account, wallet, device, position, or exact time — so we can keep measuring and improving alert quality.

You can also get a copy of that same data as a JSON file, from the app or by asking us at nitant04@gmail.com. The export leaves out any encrypted exchange secret or private key, and shows only the last few characters of a device push token.

Security

Data is encrypted in transit (TLS). API secrets are encrypted at rest.

Children

Flagged is intended for adults and is not directed at children.

Contact

Questions or requests: nitant04@gmail.com. If this policy changes materially, we will update this page and the date above.