Your keys stay on your phone. So does almost everything else.

Effective 28 October 2026.

The short version

The app has no passwords and no analytics. Your keys are made and kept on your iPhone. Our server learns only what it needs to send the push notifications you ask for, the public wallet addresses you look at, and the public name and picture of your Desk profile, if you set one. Signing out deletes your alert subscription from the server. Delete account in Settings also deletes your profile. The one exception to “no tracking” is the X ad pixel on this site’s home page, described below.

What stays on your iPhone

• Your passkey. Created by iOS and kept in your iCloud Keychain. Apple syncs it between your devices; we never see it.
• Your keys. Both are derived from the passkey on the phone. The wallet key that moves your AUSD is never stored: it is made again for each transaction. The order key, which can place and close orders but can’t withdraw, is sealed in the iOS keychain so only this iPhone’s Face ID opens it. Neither key is ever sent anywhere.
• Your settings and history. Watchlist, tracked wallets and the names you give them, copy rules and the copy log, positions you have closed, your display currency, and the spot tokens you bought through Desk. Stored in the app's own storage on the phone.

What our server holds, and for how long

The server at trydesk.trade holds nothing about you until you turn on alerts, follow a trader, track a wallet, switch on away copying, or set up a Desk profile. For alerts, tracking and away copying, the phone sends:

• A random install secret the app generated, which is how the phone proves a later request is its own. It is not derived from your wallet or your device.
• The Apple push token for this install, so we can send the notification.
• The trader addresses you follow and the names you gave them, the traders you copy with away copying on, the wallet addresses you track with their names and minimums, the market symbols on your watchlist, whether price alerts are on, and any price targets you set.
• Your own Desk wallet address, when deposit alerts are on. It is stored with your push token so Desk can tell you when MON or AUSD arrives in your wallet. The Deposit alerts switch in Settings turns this off, and the address is removed on the next sync.

This is stored for sixty days from the last time the app refreshed it, in a Redis database hosted by Upstash through Vercel. It is deleted when you sign out, delete your account, or turn everything off. It is never sold, shared or used for anything but sending the pushes you asked for.

If you set up a Desk profile, the server keeps the name and picture you chose, linked to your wallet address, in the same database. A profile is public: anyone who opens your wallet in Desk can see it. It is kept until you delete it with Delete account in Settings. Signing out does not delete it.

Every other request the app makes carries at most a public wallet address: yours, when it asks for your balances or history, or someone else's when you open their profile. Addresses on a public blockchain are public by design.

If you joined the waitlist on this site, we hold that email address until the invite has gone out, and delete it on request.

Our hosts, Vercel and Railway, keep ordinary request logs, including IP addresses, for a short time. We use the IP address only for rate limits and never to identify anyone.

In ChatGPT, Claude and other assistants

Desk’s plugin lets an assistant read public market data from Desk: token prices and risk, wallet portfolios and trading records, smart-money trades, and Perpl’s traders and markets. It only reads. It can’t trade, move money, sign anything or open your Desk wallet, and it needs no sign-in, so Desk never learns who you are in ChatGPT or Claude.

• What the assistant sends. Only what a question needs: a wallet address or a public name such as vitalik.eth, a token’s name or contract address, a market such as BTC, or how many results to show. Never your conversation.
• What ChatGPT adds. An anonymous ID that OpenAI makes for each user. Desk uses it for one thing: counting wallet lookups per minute, so one person can’t exhaust the service for everyone. That count is kept for two minutes. ChatGPT may also send a coarse locale, location and app version with a request; Desk doesn’t use or keep them.
• What Desk keeps. Answers about public addresses and tokens are cached for up to a day, so the next question is answered faster. A wallet someone looks up joins the list of public wallets Desk keeps indexed, so its Monad trading record stays current. Neither is linked to you or to your assistant account.
• Who answers. The services listed below answer those lookups and receive the public addresses and tokens involved. OpenAI and Anthropic hold your conversation under their own privacy policies.

Who else receives something

Desk reads from and writes to services it does not run. Each receives only what the request needs:

• Perpl, the exchange on Monad, receives the orders you sign and your wallet address. Trades settle on the Monad blockchain, where they are public and permanent.
• Monad RPC nodes receive your address to read balances and positions, and your signed transactions to send them.
• OKX, 0x and Relay receive token addresses, and your wallet address when quoting a swap or reading what you hold.
• Etherscan and Envio HyperSync receive a wallet address to read its history. When deposit alerts are on, HyperSync also receives your Desk wallet address to see what arrives in it.
• Nad Name Service, nad.fun, ENS, Neynar (Farcaster) and Bonfida (Solana names) receive wallet addresses to look up public names and pictures.
• CoinGecko and OKX image servers serve token logos; like any image, they see your IP address.
• Apple receives push notifications addressed to your device token.
• X (Twitter) receives a visit to this site’s home page through its ad pixel: the page address, your IP address and browser details, and it may set cookies. When you tap Get the app there, X also receives that click, so we can count how many people go on to TestFlight. Only the home page loads it. The app and this site’s other pages do not.
• Anthropic receives a public trader's aggregate figures to write a one-paragraph summary of their style. Never your data, and never an address.
• OpenAI and Anthropic, when you use Desk’s plugin in ChatGPT or Claude, receive Desk’s answers to the questions you ask there.

The full list, with what each service is used for, is kept in the open repository.

What we do not do

• No analytics, advertising or crash-reporting SDKs in the app, and no tracking identifier. The only tracking anywhere is the X pixel on this site’s home page.
• No email, phone number or password is needed to use Desk.
• We do not sell data and we do not share it beyond the services above.
• Trading with Desk is only for people 18 and older. The plugin for ChatGPT and Claude only shows public market data.

Your choices

• Sign out in the app: the server deletes your alert subscription, with your push token, your Desk wallet address, followed traders, tracked wallets and watchlist. This phone clears your followed traders, copy settings and tracked wallets. Your Desk profile stays.
• Delete account in Settings: the server deletes your Desk profile and your alert subscription, with your Desk wallet address, and this iPhone forgets its keys. Your wallet and Perpl account live on the blockchain and stay, and your passkey still opens them.
• Turn off alerts, deposit alerts, tracking or away copying and the matching data is removed from the server on the next sync.
• Block the X pixel with any content blocker. The site works the same without it.
• Ask us to delete a waitlist email or anything else, through the contact on the support page.

Changes

If this policy changes, the new version appears here with a new effective date. The repository history shows exactly what changed.