Privacy Policy 隱私政策

Important Disclaimer

DappGo is not a registered investment advisor, broker-dealer, bank, or financial services provider in any jurisdiction. All content (AI analysis, research signals, research notes, technical indicators, research labels, options strategies) is for educational and informational purposes only and does NOT constitute investment advice, instructions to buy or sell any security, personal financial or tax counsel, or financial services of any kind. Past performance does not predict future results. All investments carry risk including loss of principal. Consult a licensed financial advisor before making decisions.

Who we are

DappGo is operated by Yenlung Lai (doing business as DappGo) as a sole proprietor, primarily based in California, United States. This statement will be updated if the operating entity changes.

Controller: Yenlung Lai (DBA DappGo), sole proprietor based in California, United States. Contact: [email protected]. A postal mailing address is available on request via the contact email.

Number Merge (Number Merge - DappGo)

Number Merge does not require an account or sign-in, and the core game works offline. Game settings and local records remain on your device. When using the online leaderboard, the app sends a randomly generated player identifier, score, highest tile, platform, app version and submission time to DappGo's leaderboard service. Profile updates also send your chosen display name, pet and optional country code. Leaderboards may publicly display these names, scores and profile details. A country code is not precise location; do not include your real name, email or sensitive information in your display name. Number Merge does not use the stock-app Firebase uid, push notification or feedback flows.

Number Merge includes Google AdMob banner ads and an optional rewarded ad that opens only when a player chooses “Watch ad +1”. The Google Mobile Ads SDK may process device identifiers, advertising identifiers, coarse location inferred from network information, diagnostic data, performance data, and ad-interaction data for serving, measurement, frequency control, and fraud prevention. Actual processing depends on AdMob configuration, region, consent status, and device settings. DappGo does not connect this information to your name, email, or financial data.

Where user choice is required, Google User Messaging Platform (UMP) handles the advertising consent message. You can provide, decline, or change your choice through the device or advertising privacy controls; declining may still allow non-personalized or limited ads.

Website verification and consent management

The dappgo.com homepage loads Google's AdSense code for site review and consent messaging. Google may process your IP address, browser information and page URL when receiving requests. This does not mean the site is approved to serve ads. Once published and verified, applicable consent messages will offer accept, reject and manage choices; we do not consent on your behalf.

Stocks and Options browser editions

stocks.dappgo.com/us, stocks.dappgo.com/tw and options.dappgo.com/us use browser-local storage for preferences, watchlists, search history and offline caches, separated by product and market. Ordinary browsing does not upload these saved records to DappGo. Your browser can clear all local data for that website. US/TW settings offer watchlist clearing; Options settings also offer product-data clearing. If storage is blocked or quota is exhausted, data may last only until the current page closes.

Public reports may come from local caches, jsDelivr, DappGo data services (through Cloudflare), or GitHub, depending on the product and availability. Cached reads need not make a network request. Providers receiving requests may process connection information such as IP address, request time and URL. Browser editions do not initialize native AdMob, Firebase sign-in or native push notifications. Web advertising is currently disabled. AdSense will only be activated after site review and applicable consent management are verified, with this disclosure updated accordingly.

What we collect

The Firebase / Firestore items below vary by app: TW Stocks, US Stocks, and Options Explorer use different optional flows. See the Number Merge section above for that game's separate data flow.

App usage

• Anonymous Firebase uid (auto-generated by Firebase Anonymous Auth, stored on device) — backend features in applicable older TW Stocks / US Stocks versions and explicit feedback or optional push flows in Options Explorer may use this identifier to link service records; it is not linked to your name or email. Anonymous authentication, remote push registration, and Firestore user-data features remain paused in the new TW Stocks / US Stocks versions, separately from native Analytics and advertising SDKs.
• Usage events: new research-app versions process limited measurement signals and optional detailed custom events as described in the Advanced Consent Mode section above. Older Options Explorer versions had product-usage analytics disabled. Google Mobile Ads data handling is independent and follows advertising configuration, consent, and device controls.

Subscription email

• Email address — only collected when you opt-in via the website popup, used to send the daily report.
• Language preference and subscription date.

Form submissions

When you voluntarily submit via the website Contact Form (business inquiries) or the In-App Feedback Form (product feedback), we receive the content you fill in:

• Contact Form: Company / Name / Email / Message / Phone (optional).
• Feedback Form: Email (optional) / Product / Type / Message / App version (optional).

Form data is processed by Google Forms (Google as DappGo's data processor), stored in Google Workspace under [email protected], retained for 3 years (then permanently deleted — all identifying fields removed; no re-identifiable data is retained), and used only to reply to your submission and improve the product. It is not used for marketing or resold to third parties; processing by the disclosed service providers still applies.

Website analytics

The site uses Google Analytics 4 with automatic IP anonymization. We don't do cross-site tracking, and we don't set non-essential cookies for marketing or advertising. Use private browsing, an ad blocker, or DNT to opt out.

Firestore collections stored on our backend

When a feature needs a backend service, the app may obtain an anonymous uid via Firebase Anonymous Authentication. This is a random identifier issued by Firebase and contains no name, email, Apple ID, or other directly-identifying information. The current Options Explorer version does not create it at launch or during ordinary browsing; it uses it only for explicit feedback submission or optional push registration.

The following collections describe applicable older versions, historical records, and optional features that remain enabled (Firebase acts as data processor). New TW Stocks / US Stocks versions do not add anonymous authentication, remote push registrations, or Firestore user data. Options Explorer uses these services only when an explicitly selected backend feature needs them, not for ordinary browsing:

• events/ — anonymous product-event records from some other stock-app versions. The current Options Explorer version does not write to this collection; legacy records follow their existing retention policy.
• feedback/ — user-submitted text feedback from the in-app Feedback form: uid, category, rating, body, app version. Used for product improvement and audit. Retention: identifying fields removed after 3 years.
• users/{uid} — APNs device token, notification preferences, locale, device_tz, bundle_id, markets_subscribed. The APNs token is a per-device opaque identifier issued by Apple and is not a personal identifier. Retention: until you opt out of notifications or delete your data.
• push_log/ — record of push delivery attempts: uid, market, outcome (success/failure), timestamp. Used for debugging and delivery-quality monitoring. Retention: 30+ days as needed for debugging.
• iv_history/{ticker} — per-ticker daily IV snapshot. Not user-scoped, no privacy impact.

You can tap the "Delete my data" button in the app's Settings at any time to immediately clear all Firestore documents tied to your uid. For more advanced requests (export, field-level correction), email [email protected].

AI Processing

DappGo uses third-party large language models (Google Gemini) to generate analysis and insights on public market data. Key points:

• AI prompts contain ONLY public market data (prices, volume, earnings, news headlines) — never your personal info, watchlist, form submissions, or app usage.
• AI-generated content is the model's interpretation of public data and does NOT constitute investment advice or a substitute for professional counsel.
• We do NOT use your data to train any ML model.
• Third-party AI provider: Google Gemini API (processed under Google's Privacy Policy).

What we DON'T collect

• Number Merge does not request location, contacts, photos, microphone, camera, or audio permissions; AdMob may process ad-related identifiers and diagnostic data according to its configuration.
• Research apps do not request GPS location, contacts, photos, microphone, camera, or audio permissions; an ad SDK may still infer coarse location from network information.
• Cross-company advertising tracking in the new iOS research apps follows the ATT authorization section above; refusal does not affect core use. Number Merge's advertising data processing follows its separate disclosure.
• No user-input financial info. We only analyze public market data — no broker connection, no portfolio input required.
• We don't use your data to train ML models, and we don't sell or rent it.

Third parties

• Google Analytics 4 (privacy, Google LLC) — anonymized website visitor analytics; IP anonymization enabled; US data center.
• Firebase Analytics (GA4 in-app, Google LLC) — the old integration was retired on 2026-05-18. New research-app versions use Advanced Consent Mode as described above. Detailed custom events require explicit opt-in; limited SDK signals do not constitute consent. New product-analytics events are not stored in Firestore.
• Firebase Firestore & Anonymous Auth (Google LLC) — backend database for applicable older versions and optional features that remain enabled, storing feedback, push-registration, shared market-data, and legacy event records. Options Explorer's explicitly selected feedback / push flows may use an anonymous service identifier; this flow remains paused in new TW Stocks / US Stocks versions. US data center (multi-region nam5); EU transfers are governed by Google's DPF certification and SCCs in the Firebase DPA.
• Apple Push Notification Service (APNs) (Apple Inc.) — delivers push notifications to your device. We store the opaque APNs device token Apple provides in users/{uid} and send notification payloads via Apple's servers. Apple does not disclose your Apple ID to us. Governed by Apple's privacy policy.
• Google Forms (Google LLC) — processes Contact and Feedback form submissions on DappGo's behalf.
• Google Workspace (Google LLC) — [email protected] mailbox, Drive storage of form responses, Apps Script for scheduled tasks (weekly digest, daily report sending).
• Google Gemini API (Google LLC) — AI analysis on public market data only (no personal data); see "AI Processing" above.
• Google Mobile Ads / AdMob (Google LLC) — banner and optional rewarded ads in Number Merge, plus consent-controlled banners and cooldown-limited full-screen ads in the three research apps; may process device identifiers, network-inferred coarse location, product interaction, advertising data, diagnostics, and performance data depending on AdMob configuration, UMP, ATT (new iOS research apps), region, and device settings. Cross-company tracking purposes are described in the version-scoped ATT section above.
• GitHub Pages / GitHub Inc. (Microsoft Corp.) — hosts this website; subscriber list stored in a private repository; US data center. GitHub (Microsoft) is the data processor for the stored subscriber list; processing is governed by the GitHub Customer Terms, including its Data Protection Agreement, and Microsoft's DPF certification.
• jsDelivr — CDN serving daily report JSON files.
• Subscription flow — Subscription emails are collected via Google Forms (data residency follows Google Workspace; governed by Google's DPA). FormSubmit has been removed from the data flow as of 2026-05-10.
• Apple Inc. (via App Store and TestFlight) — distribution; if paid subscriptions launch, payments will be processed via Apple In-App Purchase (see §Subscriptions).

Data retention

• Form submissions (Contact / Feedback): permanently deleted 3 years after receipt — name, email, and any identifying fields are removed; no re-identifiable data is retained.
• Subscription email: until you unsubscribe.

International transfers

Some service providers (GitHub, Google) process data outside the EU (primarily US). These transfers rely on:

• Standard Contractual Clauses (SCCs) — in place with all vendors via their data processing addenda.
• EU-US Data Privacy Framework certification (Google, Microsoft / GitHub).

If you are an EU user and prefer your data not to leave the EU, contact [email protected].

Should the EU-US Data Privacy Framework adequacy decision be suspended or invalidated, transfers will continue under the Standard Contractual Clauses (SCCs) incorporated in each vendor's Data Processing Agreement, without interruption.

Your rights

• In-app "Delete my data" button: Apps that support this feature expose a one-tap delete button that purges Firestore documents tied to your anonymous uid (for example feedback, users/{uid}, and push_log; legacy events are also handled where applicable). New product-analytics events are not written to Firestore; Firebase Analytics behavior and deletion requests are described in the Advanced Consent Mode section above.
• GDPR (EU users, Arts. 15–22): you may exercise the right of access (Art. 15), rectification (Art. 16), erasure / right to be forgotten (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and the right to not be subject to automated decision-making (Art. 22). Use the in-app "Delete my data" button (for erasure) or email [email protected] for any other right. We reply within 30 days of a verifiable request. You also have the right to lodge a complaint with your local EU supervisory authority — directory at EDPB member directory.
• CCPA / CPRA (California users, §1798.100 et seq.): you may exercise the right to know (§1798.110), delete (§1798.105), correct (§1798.106), limit use of sensitive personal information (§1798.121), and opt out of sale/sharing (§1798.120). See the version-scoped ATT and advertising sections above for advertising processing and controls; ATT does not replace other applicable privacy choices. Use the in-app "Delete my data" button or email [email protected].
• Response time limits: Time limits for responding to access/deletion requests are calculated from the date we receive a verifiable request, in accordance with GDPR Article 12(3) (1 month, extendable by 2 additional months for complex requests) and CCPA §1798.130 (45 days, extendable once).
• Unsubscribe by replying unsubscribe or emailing [email protected].

Legal Basis for Processing (Art. 6 GDPR)

• Optional Firebase services: Article 6(1)(a) or Article 6(1)(b), depending on the feature. Options Explorer uses an anonymous service identifier only when its explicitly selected feedback / push features require it; users may request deletion through "Settings → Delete my data" or by emailing [email protected].
• Voluntary feedback / contact form submissions: Article 6(1)(a) (explicit consent) or Article 6(1)(b) GDPR where the submission relates to a business inquiry (pre-contractual steps). You may withdraw consent at any time by emailing [email protected] requesting deletion of any submitted information.
• Email newsletter subscription (when implemented): Article 6(1)(a) — explicit opt-in. Unsubscribe link in every email.
• Website analytics via Google Analytics 4: Article 6(1)(f) — legitimate interests in website performance. You can opt out via your browser's "do not track" settings or by blocking GA cookies.
• AI commentary via Google Gemini: Article 6(1)(f) GDPR — legitimate interests in providing core app functionality. Prompts contain only public market data (no personal information, no user identifiers, no behavioral data). Google's processing is governed by their AI/ML terms; outputs are returned to our engine and rendered to all users identically — no per-user training.

Children & COPPA

Options Explorer is an iOS and Android public-market and options-research tool. It has no social feed, chat, gambling, rewards, or child-directed features. It does not create a Firebase Anonymous Auth uid at install, launch, or during ordinary browsing; this service identifier may be used only when the user submits feedback or enables optional push notifications. Ordinary browsing does not require names, email addresses, or GPS / precise-location permission. The ad SDK may still process device identifiers and network-inferred coarse location according to the choices and settings above; native Analytics is described separately above. The App Store age rating is calculated from Apple's App Store Connect questionnaire; the recommended answers are recorded in docs/app-store/age-rating.md. If a child or parent believes we received a child's personal information, contact [email protected]; we will review and delete it.

Security

Subscriber emails and form responses are stored under the [email protected] Workspace (private GitHub repo and Google Drive), accessible only by the DappGo operator. All transit is HTTPS/TLS. This subscription / form flow uses the service providers listed above; it does not imply the absence of DappGo market-data and leaderboard services described separately in this policy.

Subscriptions & Paid Features (future)

DappGo App and daily reports are currently free. Paid subscription tiers may launch in the future to expand features. When paid features go live:

• App Store subscriptions are processed by Apple In-App Purchase. Apple is the payment processor between you and us; we never receive your credit card or bank info.
• We receive an anonymous receipt token from Apple to verify your subscription status. Receipts do NOT contain your Apple ID or contact info.
• Cancel or refund subscriptions via Apple Settings → Apple ID → Subscriptions, per Apple's standard terms.
• EU users have a 14-day cooling-off period; refund requests through Apple.
• Any pricing or feature changes will be notified in advance and require re-confirmation.

Changes

Material changes will be announced on this page. We will:

• Update the "Last updated" date above;
• Notify email subscribers via the daily report footer;
• Display a one-time prompt in-app on launch when a new policy version is detected.

For material changes that affect consent-based processing (e.g., introducing a new data use for an existing data type), we will request affirmative re-consent rather than relying on passive notification. We recommend reviewing this page periodically.

Contact

Questions about privacy or your data: email [email protected]. Reply within 30 days of a reasonable verifiable request.