BackR7

Legal

Privacy Policy

Last updated: June 2, 2026 · Draft v1.0

This document is a draft prepared for R7. It should be reviewed by a qualified lawyer before public launch or before handling real user funds at scale.

1. Introduction

This Privacy Policy explains how R7 Opinion Markets (“R7,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you access or use the R7 website, Telegram Mini App, wallet features, opinion markets, smart contract features, support channels, and related services.

By using R7, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We may collect information you provide directly, information collected automatically, information received from Telegram or third-party services, and information available from public blockchain networks.

This may include account information, Telegram Mini App information, wallet information, transaction activity, market activity, device and security information, usage data, support messages, submitted content, and blockchain data.

3. Telegram Mini App Data

When you access R7 through Telegram, we may receive information provided through Telegram’s Mini App authentication or platform features.

This may include Telegram user ID, username, display name, profile photo if available, language settings, Telegram Mini App init data, session authentication data, referral data, and chat context where applicable.

Telegram may process your Telegram-side data under Telegram’s own policies and terms. R7 does not control Telegram’s independent data processing.

4. Account and Profile Information

We may collect or store information related to your R7 account, including internal user ID, Telegram ID, username, display name, profile image, account creation time, account status, role or admin status, referral information, moderation status, and security flags.

We use this information to operate accounts, personalize the Service, enforce rules, and protect R7.

5. Wallet and Blockchain Information

R7 may collect and store wallet-related information, including public wallet address, wallet provider, wallet mode, wallet connection time, wallet network, transaction hashes, smart contract addresses, market contract addresses, token balances displayed in the app, and vote, stake, claim, or refund activity.

R7 is being designed to support embedded non-custodial wallets. In non-custodial wallet mode, R7 does not receive or store private keys or seed phrases and cannot move funds without user approval through the wallet provider or signing mechanism.

Some legacy, test, administrative, or transitional wallet flows may operate differently until migration is complete. R7 may store different wallet metadata depending on the wallet mode used.

R7 will not ask you to provide your seed phrase or private key. Do not share private keys, seed phrases, passkeys, or recovery credentials with anyone.

6. Public Blockchain Data

Some activity on R7 may occur on public blockchain networks. Public blockchain data may include wallet addresses, token transfers, transaction hashes, smart contract interactions, market creation transactions, vote or stake transactions, claim or refund transactions, timestamps, contract addresses, and event logs.

Blockchain data may be visible to anyone using block explorers, indexers, analytics tools, third-party apps, or network nodes.

R7 cannot delete, edit, or hide public blockchain data once it is recorded on-chain.

7. Device and Security Data

To protect R7, we may collect device and security-related information, including device identifiers or fingerprints, browser type, operating system, device model, IP address, approximate location derived from IP address, session data, login timestamps, failed login attempts, admin access logs, wallet action logs, fraud signals, bot detection signals, and rate limit data.

We use this information to protect accounts, reduce bots, prevent fraud, enforce one-user or one-device rules, secure admin access, detect suspicious activity, and investigate misuse.

8. Market, Vote, and App Activity

We may collect information about your activity inside R7, including markets viewed, markets created, votes placed, side selected, side changes, stake amounts, claim activity, refund activity, creator earnings, market results, app navigation, interaction events, errors, and failed actions.

We use this information to operate markets, display results, calculate rewards, provide analytics, prevent abuse, and improve the Service.

9. Content You Submit

If you create markets, submit questions, contact support, send feedback, or otherwise provide content, we may collect and store that content.

R7 may review, moderate, remove, or restrict content that violates R7 rules or applicable law.

10. Cookies, Local Storage, and Similar Technologies

R7 may use cookies, local storage, session storage, device storage, or similar technologies to keep you signed in, remember preferences, secure sessions, store app state, support Telegram Mini App functionality, detect fraud or abuse, improve performance, and measure usage.

Some Service features may not work correctly if these technologies are disabled.

11. How We Use Information

We use information to provide and operate R7, authenticate users, enable Telegram Mini App access, display markets and rewards, process user-approved wallet transactions, index blockchain activity, calculate market outcomes, support claims and refunds, prevent fraud and abuse, enforce one-user or one-device protections, secure admin tools, provide support, monitor performance, comply with legal obligations, enforce our Terms, and improve the Service.

12. How We Share Information

We may share information with service providers that help operate R7, hosting providers, database providers, wallet infrastructure providers, blockchain RPC or indexing providers, analytics and monitoring providers, security and fraud prevention providers, customer support tools, legal or professional advisors, law enforcement, regulators, courts, or government authorities when required.

Public blockchain data is publicly available by design and may be accessed by anyone.

13. Third-Party Services

R7 may rely on third-party services, including Telegram, wallet providers, embedded wallet infrastructure providers, blockchain networks, RPC providers, block explorers, hosting platforms, database providers, analytics providers, security tools, and support tools.

These third parties may process information under their own terms and privacy policies. R7 is not responsible for independent third-party privacy practices.

14. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain accounts, support market history, prevent fraud, comply with legal obligations, resolve disputes, enforce agreements, maintain security records, support audits, and improve the Service.

Public blockchain data cannot be deleted by R7.

15. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, request a copy of information, withdraw consent where applicable, or complain to a data protection authority.

These rights may be subject to limitations. R7 may need to retain certain information for security, fraud prevention, legal compliance, accounting, dispute resolution, or blockchain integrity.

R7 cannot delete public blockchain data from a blockchain.

16. Children and Age Restrictions

R7 is not intended for users under 18 years old or under the age of majority in their jurisdiction.

We do not knowingly collect personal information from children. If we learn that a child has used the Service or provided personal information, we may take steps to delete the information and restrict access.

17. Security

R7 uses technical, administrative, and organizational measures designed to protect information, including access controls, encryption where appropriate, secure admin sessions, device security, audit logs, rate limits, monitoring, fraud detection, role-based permissions, and secure infrastructure practices.

No system is completely secure. We cannot guarantee that unauthorized access, hacking, data loss, or security incidents will never occur.

You are responsible for keeping your Telegram account, device, wallet, passkey, password, and recovery methods secure.

18. International Users

R7 may process information in countries other than your country of residence. Data protection laws may differ from those in your jurisdiction.

By using R7, you understand that information may be transferred, stored, and processed outside your location, subject to applicable law.

19. Legal and Compliance

R7 may preserve, disclose, or process information if we believe it is reasonably necessary to comply with law, respond to legal process, enforce our Terms, protect users, prevent fraud or abuse, investigate security incidents, protect R7’s rights, or cooperate with law enforcement or regulators where required.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the Service, website, Telegram, email, or other appropriate methods.

Your continued use of the Service after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

21. Contact

If you have questions or requests about this Privacy Policy, contact R7 Support at support@r7app.xyz or visit https://r7app.xyz/contact.