This policy explains what personal data All Will Retire ("we", "us") collects when you use our dollar-cost-averaging platform, what we do with it, and the choices you have. It sits alongside our Terms of Service.
1. Who we are
All Will Retire runs the service and decides how your data is used. To reach us about anything in this policy, see section 13.
2. The short version
- We track public blockchain data for the wallet you register, and show it back to you as stats.
- We know who you are through the social and sign-in providers you use to sign in.
- Some of what we show is public. This includes, but isn't limited to, bot replies, community pages, rankings and announcements in community groups.
- We use only the cookies needed to keep you signed in. No analytics, no ads, no tracking.
- We don't sell your data.
3. What we collect
From the account you sign in with
- X: your X user ID, name, username (handle) and profile picture.
- Telegram: your Telegram user ID, name, username and profile photo.
- The sign-in tokens X or Telegram give us, so you stay signed in. We don't ask for permission to post as you.
About your wallet and activity
- The wallet address you register, and the history of wallets you've registered.
- Our copy of that wallet's blockchain activity for the tokens you track: buys, sells, amounts, prices and transaction IDs. This data is public on the Solana blockchain; we collect and organise it.
- Your plan, your payments to us (amount, token, transaction ID and sending wallet), and payments we couldn't credit.
- The tokens you track, your stats, streaks, badges and other figures we work out from the above.
- Community contributions you make, and the wallet they came from.
When you use our bots
- Your X or Telegram user ID and handle, and the IDs of the posts you send us.
- The text of a message you send our X bot, so we can work out what you're asking. We don't keep it in our database, but it can appear in our logs (see section 8).
- For Telegram groups: the group's ID and name, and who added the bot.
When you use the website
- Your IP address and browser type (user agent), in our security logs and with your sign-in session.
- Feedback you send through the feedback form, together with your handle and wallet, so we can reply and investigate.
What we don't collect
- Your private keys or seed phrase — we never ask for them.
- Analytics or tracking data about how you browse.
4. How we use it
| Why | What it means | Legal basis (EU/UK) |
|---|---|---|
| To run the service you asked for | Track your wallet, work out your stats, answer your bot requests, show your dashboard | Contract |
| To take and match payments | Match a payment to your account through your registered wallet; record payments we can't credit and show them to you | Contract |
| To publish what the service is for | Bot replies, community pages, rankings, announcements in community groups and contributor thank-yous (see section 5) | Contract, and our legitimate interest in running a public community tracker |
| To keep the service safe | Rate limits, fraud and abuse prevention, security logs | Legitimate interest |
| To understand bot requests | When our rules can't read a message to our X bot, its text is sent to an AI model to work out what you asked | Legitimate interest |
| To fix problems and improve | Logs, feedback, error investigation | Legitimate interest |
| To meet legal duties | Respond to lawful requests | Legal obligation |
We don't sell your data, use it for advertising, or make decisions about you that have legal or similarly significant effects by automated means alone.
5. What's public
The service is built around sharing DCA progress, so some of it is public by design:
- Bot replies on X and Telegram — your handle, profile picture, a shortened wallet address (like
AbC1…xYz9) and the stats you asked for, visible to anyone who can see the conversation. - Daily rankings and announcements that our bots post, which can name you.
- Announcements in a token's community groups and channels on Telegram. When a Telegram group or channel is set to a token's community, our bot welcomes people who start tracking that token, and posts a Proof of DCA for each one's first buy of the token each day, whether or not they are in the group. Anyone who can see the group or channel can see them. They never show a money amount. To stop them, stop tracking the token. They name you by your Telegram username or name, by your X handle if you have no Telegram name, or otherwise by a shortened wallet address, and can show:
- that you started tracking the token. In an $AWR group, a welcome can also show that you hold at least 100 $AWR;
- that you bought the token that day, your daily streak, and the community's progress toward the day's mission;
- in a league fight week, the fight points your buy scored;
- a card of the buys in your current streak, with the tokens you received and the date of each buy. Buys are public on the blockchain, so a token quantity and a date can be matched to your wallet: this can link your name to your wallet;
- on that card, both the Telegram and X logos when your Telegram username is the same as your linked X handle, which shows that both accounts are yours.
- Community pages on the website — member lists show your handle (or a shortened wallet if you have none), buy volume, streaks and rank.
- Our public API for community members, which returns full wallet addresses with buy volume, streaks and rank.
- Community contributions — contributors can be named in public thank-you posts.
- Stream overlays — when a streamer shows their community's buys live, your display name can appear on their stream.
Your blockchain activity is public anyway: anyone can look up a Solana wallet. Linking it to your handle is what we add.
6. Who we share it with
We use these providers to run the service. They process data on our behalf or as part of providing their service:
| Provider | What they get | Why |
|---|---|---|
| Amazon Web Services (US) | Everything we hold | Hosting, database, file storage, email to our team, logs |
| Anthropic's Claude model, run on Amazon Bedrock (US) | The text of an X message we couldn't read with our rules — not your handle or ID | Working out what you asked the bot |
| X | Your bot requests and our replies; sign-in; your IP address when your browser loads your X profile picture from X's servers | Running the X bot and X sign-in; showing your picture |
| Telegram | Your bot requests and our replies; sign-in; your IP address when your browser loads your Telegram profile photo from Telegram's servers | Running the Telegram bot and Telegram sign-in; showing your photo |
| QuickNode (Solana node provider) | Wallet addresses and tokens we look up | Reading the Solana blockchain |
| Google Fonts and Fontshare | Your IP address, when your browser loads our fonts | Showing the website's typefaces |
| Jupiter, Coinbase, Raydium | Token addresses only — no personal data | Token prices and details |
We may also share data if the law requires it, to protect people or the service from harm, or with a buyer or successor if the service changes hands.
International transfers. Our servers are in the United States. If you use the service from elsewhere, your data is transferred to and stored in the US.
7. Cookies and local storage
We use cookies and your browser's local storage only for what the platform needs to work:
- Signing in — keeping you signed in, securing the sign-in exchange with your sign-in provider, and returning you to the right page afterwards.
- Two choices you make — which sign-in provider you last used, and light or dark mode.
There are no analytics, advertising or tracking cookies, so we don't show a cookie banner. Sign-in cookies last from a few minutes up to 30 days; the two choices stay until you clear them.
8. How long we keep it
| Data | How long |
|---|---|
| Your account, wallet, tracked tokens, history, payments and stats | Until your account is deleted |
| Sign-in sessions (with the IP address and browser type) | Deleted a day after they expire; each expires 7 days after you last used it |
| Payment quotes | Every quote expires after 30 minutes. A plan quote's record stays with your payment history until your account is deleted; other quotes are deleted when they expire |
| Feedback you send | Kept in our team's email |
| Wallet-verification attempts | 30 days |
| Server and security logs (including IP addresses and some bot message text) | 30 days |
| Records of buys shown on live streams (your display name, the amount and the transaction) | Kept in our database with no set end date; a copy in our event archive for 1 year |
| Records of the announcements our bots post to Telegram groups and channels (which member, which group, which day) | Up to 8 days; deleted with your account. The announcements themselves stay where they were posted |
| Cached profile pictures | Up to 120 days |
| Database backups | 7 days |
Blockchain data stays on the blockchain forever; deleting your account removes our copy and the link to you, not the public record.
9. Your rights
Depending on where you live, you can ask us to:
- see the personal data we hold about you, and get a copy in a portable format;
- correct it if it's wrong;
- delete your account and the data linked to it;
- restrict or object to how we use it, including the uses based on our legitimate interests;
- stop processing that relies on your consent, where any does.
To make a request, use the method in section 13. We may need to confirm the request comes from you, for example through your signed-in account. We'll answer within one month.
What deletion can't undo: public blockchain records, and copies of our public bot posts that others have shared or saved. Posts our bots have already made on X and Telegram stay where they were posted. Deleting your account stops new ones. If you added our bot to a Telegram group, that group's settings stay so the group keeps working, including the record that you added it, unless you ask us to remove those too. Deletion also doesn't yet remove records of buys shown on live streams, or our log of actions our team took on your account.
You can also complain to the data protection authority where you live — in the UK, the Information Commissioner's Office; in the EU, your national authority.
10. Security
We use encrypted connections (HTTPS) for everything you send us, encrypt the long-lived sign-in tokens we store, keep secrets in a managed vault, and limit who can access our systems. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities where the law requires.
11. Children
The service is for people 18 and older. We don't knowingly collect data from anyone younger. If you believe a child is using it, contact us and we'll delete the account.
12. Changes to this policy
We'll update this policy when what we collect or how we use it changes. The version and date at the top show which one is current. When a change is significant, we'll point it out on the website.
13. Contact
For questions about this policy or to exercise your rights, use the feedback form on the website while signed in. Choose General, start your message with "Privacy request", and tell us what you need.