Privacy Policy

1. Introduction

This Privacy Policy describes how KTON collects, uses, and protects your information when you use our platform, services, and applications. By accessing or using KTON, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree, please do not use the platform.

2. Information We Collect

2.1 Information You Provide

We may collect the following information directly from you:

Contact Information: Email address or other contact details when you reach out to us.

Staking Information: TON or KTON transaction data when you participate in staking or unstaking activities.

2.2 Information We Collect Automatically

When you use KTON, we may automatically collect:

Blockchain Data: Public wallet addresses and transaction details visible on the blockchain.

Usage Data: Interaction data such as page views, clicks, and other usage metrics to help us improve the platform.

Device Information: IP address, browser type, and operating system for security and analytics purposes.

2.3 Third-Party Information

We may receive limited information from third-party services integrated into the KTON platform, such as wallet providers or analytics tools.

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To enable staking, unstaking, and other platform functionalities.

Platform Improvements: To monitor, analyze, and enhance the performance of our services.

Security and Compliance: To detect and prevent fraudulent activities, unauthorized access, or breaches of our Terms and Conditions.

Communication: To respond to user inquiries, provide updates, and notify users of changes to our policies or services.

Legal Obligations: To comply with applicable laws, regulations, and legal processes.

4. How We Share Your Information

KTON does not sell, trade, or rent your personal information to third parties. However, we may share information in the following cases:

With Service Providers: Limited information may be shared with third-party service providers to facilitate operations (e.g., analytics or hosting services).

With Legal Authorities: Information may be shared in response to legal requests, subpoenas, or to comply with applicable laws.

For Security Reasons: To prevent fraud, detect breaches, or enforce our Terms and Conditions.

Aggregated Data: Non-identifiable data may be shared for research or statistical purposes.

5. Data Retention

We retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Blockchain transaction data, being public and immutable, will remain on the blockchain indefinitely.

6. Security Measures

We implement industry-standard security measures to protect your information, including:

Data encryption for sensitive information.

Secure hosting and storage.

Regular security audits and vulnerability assessments.
However, no system is completely secure, and we cannot guarantee absolute security. Users are responsible for safeguarding their private keys and wallet credentials.

7. Your Rights

As a user, you may have the following rights:

Access and Review: Request a copy of the information we hold about you.

Correction: Request corrections to inaccurate or incomplete information.

Deletion: Request deletion of your data, subject to legal and operational constraints.

Opt-Out: Opt-out of non-essential communications.

To exercise your rights, please contact us at [email protected].

8. Use of Cookies

We may use cookies and similar technologies to:

Enhance user experience by remembering preferences.

Track usage patterns for analytics purposes.

Improve security by identifying potential malicious activity.

You can manage your cookie preferences through your browser settings.

9. Third-Party Links

KTON may contain links to third-party websites or services. We are not responsible for the privacy practices of these external platforms. We encourage you to review the privacy policies of any third-party services you interact with.

10. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Users will be notified of significant changes through our platform or other official communication channels. Continued use of KTON after changes are made constitutes acceptance of the updated Privacy Policy.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: [email protected]

Telegram: Official Telegram Channel

12. Additional Information for Certain Jurisdictions

12.1 European Union (GDPR Compliance)

Data Controller: KTON operates as a data controller for personal information collected.

Legal Basis for Processing: Information is processed based on user consent, contractual necessity, or legal compliance.

Data Portability: Users can request data portability in a structured, machine-readable format.

12.2 California Residents (CCPA Compliance)

Do Not Sell: KTON does not sell personal information.

Right to Know: California residents can request disclosure of specific data categories collected.

Right to Delete: California residents may request the deletion of personal information, subject to legal constraints.

13. KTON Bot and Mini App in Telegram

This section covers the KTON bot in Telegram (@ktonio_bot) and the KTON app when it is opened inside Telegram. It was added on 19 October 2026 and updated on 24 October 2026 (sharing on X, where people come from, channel posts, and error reports).

13.1 What we keep

When you open the KTON app inside Telegram, we keep your Telegram user ID with the time zone the app reports, so times the bot writes are in your own time. A file you ask the bot to send (a CSV export or a story video) is kept with your user ID for the minutes listed below. When you link a wallet to the bot, we also keep the rest of this list:

Your Telegram user ID, so the bot can send you messages. We do not keep your name, username, phone number, contacts, or the text of your messages.
The wallet addresses you link (up to five) and the time each wallet signed its proof that it is yours. The proof is checked when you link the wallet; the signature itself is not kept.
Your settings: which notifications are on and the language your Telegram app uses.
Records needed to send messages once: which notifications were sent (kept for 30 days), the payouts worked out for your wallets (used for the monthly statement), and the message IDs of the bot's own messages, so it can update them instead of sending new ones.
Short-lived working data: the latest balances read for your wallets, the amount you last asked a quote for (10 minutes), a CSV export you asked for (10 minutes), a story video you are sharing (30 minutes), and links to an earnings card you share (valid for 24 hours).
One-tap confirm, if you turn it on: a TonConnect session the bot holds with your Telegram wallet, stored encrypted. It can only send a request that your wallet then shows you to confirm or decline. It cannot sign anything or move your funds.
An earnings card you share on X: the picture and its line (what you earned and for how long; no wallet address and no KTON amount), kept for 90 days at a link of its own so X can show it. Your five latest are kept with your user ID; a newer share replaces the oldest.
Where you first came from: if you first opened KTON from a shared link (on X, in a group, in a channel, or a card someone sent), the kind of place is counted once, by day, when you link your first wallet. The count is not kept with your user ID or your wallet.
A channel you add the bot to: if you make the bot an admin of a channel so it posts the pool's card there, the channel's ID, title and public username, your user ID as the one who added it, and whether posting is on.

When the KTON app (app.kton.io and its test site) runs into an error, it sends us the page, the app version and the error message, with wallet addresses and long numbers taken out first. We keep a day of them to find and fix problems. They are not linked to your user ID or your wallet.

Everything the bot reads about your wallets (balances, stakes, withdrawals, payouts) is public on the TON blockchain.

13.2 Services involved

Telegram delivers the bot's messages and runs the app inside Telegram. Telegram's own privacy policy applies to what Telegram processes.
Cloudflare hosts the bot and its database, and keeps short-lived technical logs for running it.
TON Center is asked for public blockchain data about the wallet addresses you linked.

We do not use this data for advertising and do not sell or share it with anyone else.

13.3 In groups and in other chats

When the bot answers in a group, through inline mode, or as a guest in a chat it is not a member of, it shows only the pool's public figures and keeps nothing about the people in that chat, apart from a count lasting about a minute that limits how often it answers. An earnings card you choose to share shows the amounts on that card.

13.4 Deleting your data

Send /stop to the bot, remove your last wallet in the bot's settings or in the KTON app, or block the bot. Any of these deletes everything listed in 13.1: your linked wallets, settings, records, working data, and the one-tap confirm session (your wallet is told the session has ended). Removing one of several wallets deletes what was kept about that wallet. Public blockchain data cannot be deleted.

On your own device, the KTON app keeps your wallet's signed proof for 30 days, so you can turn notifications back on with one tap. It stays on that device and is removed when you clear the app's data.