Privacy Policy

Company: Goldfish Context Co, LLC ("Bloc," "we," "us," or "our")
Contact: support@heybloc.com

1. Scope

This Privacy Policy explains how Goldfish Context Co, LLC collects, uses, discloses, and protects information when you use Bloc's websites, mobile applications, software, and related services (collectively, the "Service").

This policy should be read together with Bloc's Terms of Service.

2. Information We Collect

Depending on how you use Bloc, we may collect the following categories of information.

Account and profile information

• mobile phone number;
• authentication and verification information;
• display name, username, profile image, and other profile information you choose to provide;
• account status, membership, roles, permissions, and settings.

Contacts and invitations

If you choose to use contact-based invitation features and grant the required device permission, Bloc may access information needed to help you find or invite people, such as names and phone numbers from contacts you select. We may also process phone numbers, invitation links, and pending invitation information needed to deliver and manage invitations.

We do not require you to upload your entire address book when a more limited method is available.

Bloc content and communications

We may process content you create or provide through the Service, including:

• messages and group communications;
• proposals, votes, reactions, comments, and other group activity;
• Bloc names, descriptions, membership information, and settings;
• images, files, screenshots, spreadsheets, statements, and other uploads.

Financial and position records

Bloc may process information that you or other members enter or upload to organize and track group activity, including:

• cash amounts and ownership percentages;
• investment holdings, securities, options, cryptocurrency, prediction-market positions, sports wagers, and related records;
• cost basis, entry prices, odds, risk amounts, payouts, outcomes, and performance information;
• names or descriptions of external accounts and designated custodians.

Connected financial account information

If you are a Bloc custodian, you may choose to connect a supported brokerage or prediction-market account. Depending on the account, the provider, and the permissions you authorize, Bloc may access account identifiers and characteristics, balances, holdings, positions, securities and contracts, investment transactions, trades, fills, and settlement history. For a connected cryptocurrency wallet, this may include the wallet address and publicly available blockchain activity.

Accounts connect in one of two ways:

• Through a financial-data provider. A provider such as Plaid handles sign-in with the financial institution. Bloc does not receive or store your username or password for that institution. Bloc stores the access token the provider issues to maintain the connection on its servers and never sends it to the Bloc app.
• Through a direct integration. Some platforms, such as Kalshi, may require you to create read-only API credentials in your account with that platform. Bloc uses these credentials only to retrieve the account information you authorize. For Kalshi, the private signing key is transferred to your mobile device in encrypted form and kept in your device's protected storage. Bloc's servers relay the key only in encrypted form and do not store it.

Bloc does not collect or hold user funds and does not execute wagers, trades, transfers, or other financial transactions. Bloc does not require or store your passwords for brokerage, bank, sportsbook, prediction-market, or cryptocurrency accounts, and does not ask for cryptocurrency wallet private keys.

Usage, device, and technical information

We and our service providers may automatically collect information such as:

• device and operating-system information;
• app version and language;
• IP address and approximate location derived from IP where applicable;
• device or app identifiers;
• log, crash, diagnostic, security, and performance information;
• interactions with features, screens, notifications, and the Service.

Market and third-party information

Bloc may combine information you provide with market prices, odds, securities information, sports information, prediction-market data, or other information obtained from third-party data providers in order to provide the Service.

Support and communications

If you contact us, we may collect your contact information, the content of your request, attachments, and information needed to investigate or respond.

3. How We Use Information

We may use information to:

• create, authenticate, secure, and maintain your account;
• provide private group messaging and collaboration features;
• create and manage Blocs, memberships, invitations, roles, and permissions;
• record and display proposals, votes, positions, ownership, balances, performance, and group activity;
• process uploads and, where offered, classify or normalize information using automated or AI-assisted systems;
• obtain, match, cache, and display relevant market information;
• connect supported external financial accounts at the direction of custodians;
• retrieve holdings, balances, transactions, and settlement activity from connected accounts;
• identify potential matches between connected-account activity and approved Bloc activity;
• let custodians select existing investments as a Bloc's starting positions;
• maintain a Bloc's confirmed transaction and position history;
• send authentication codes, security messages, invitations, notifications, and other service communications;
• personalize and improve the Service;
• measure product performance and understand how features are used;
• detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms;
• provide customer support;
• comply with law and enforce our agreements; and
• protect Bloc, our users, and others.

We do not use information to execute financial transactions or move user funds because Bloc does not provide those functions. Connecting an account does not authorize Bloc to execute trades, place wagers, or transfer funds.

4. SMS and Mobile Information

Bloc may use your mobile phone number to authenticate your account and send one-time verification codes and other service-related text messages that you have agreed to receive.

Mobile information, including mobile phone numbers and text-messaging opt-in data and consent, will not be sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. We may provide mobile information to service providers that help us deliver and support text messaging, authentication, security, or customer service, solely as necessary to provide those services on our behalf.

Message frequency varies based on authentication and account activity. Message and data rates may apply. Where applicable, you may reply STOP to stop text messages and HELP for help. Opting out of authentication messages may prevent use of features that require phone verification.

5. How We Disclose Information

We may disclose information in the following circumstances.

Other members of your Bloc

Information you post, record, connect, or share within a Bloc may be visible to other members of that Bloc according to the Service's permissions and settings. This can include messages, profile information, proposals, votes, positions, performance, ownership records, account labels, and financial information associated with the Bloc.

Connecting an external account does not share its whole portfolio with the Bloc. Other members see only financial information associated with the Bloc, according to its permissions and settings, and never the full account number. A custodian's unrelated personal holdings and transactions remain private.

Other users may copy, screenshot, export, or otherwise disclose information they can access. Bloc cannot control what another member does with information after receiving it.

Service providers

We may use vendors and service providers to perform services on our behalf, such as cloud hosting, databases, authentication, SMS delivery, notifications, analytics, crash reporting, security, customer support, AI processing, market-data services, and financial-data connectivity. They may process information only as needed to provide their services to us and subject to applicable contractual and legal protections.

Legal and safety reasons

We may disclose information when we reasonably believe disclosure is necessary to comply with law, legal process, or government requests; enforce our agreements; detect or prevent fraud or abuse; protect the security or integrity of the Service; or protect the rights, property, or safety of Bloc, our users, or others.

Business transfers

If Bloc or Goldfish Context Co, LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable law.

With your direction or consent

We may disclose information when you direct us to do so or otherwise consent.

We do not sell or share text-messaging originator opt-in data or consent with third parties for marketing or promotional purposes.

6. Connected Accounts, Third-Party Services, and Links

Bloc may allow custodians to connect supported external financial accounts, either through a financial-data provider or through a direct integration with the platform.

Connections are read-only. Bloc does not request authorization to place trades, wagers, or transfers through a connected account, and cannot do so. Connecting an account does not make Bloc a party to any transaction in it.

Financial-data providers. Plaid is an example. When a custodian connects through Plaid, the custodian directs Bloc and Plaid to access and process the authorized account information. Plaid handles sign-in with the financial institution; Bloc does not receive or store the username or password used. Bloc, not Plaid, matches the retrieved information to Bloc activity. Plaid's handling of your information is described in the Plaid End User Privacy Policy.

Direct integrations. Kalshi is an example. A direct integration may use read-only API credentials that you create in your account with the platform. For Kalshi, these credentials are kept on the custodian's mobile device rather than on Bloc's servers, so information is retrieved through that device. Synchronization may pause while the device is offline, or when its operating system limits background activity, and is not continuous.

Ending a connection. A custodian may disconnect a connected account at any time. When a custodian leaves a Bloc, stops being its custodian, or deletes their Bloc account, Bloc ends that custodian's connection authorization for the Bloc. If another custodian of the Bloc has their own authorized connection to the same external account, that connection may continue. Otherwise, synchronization stops and the connection is terminated.

When a direct-integration connection ends, Bloc stops using the credentials and deletes them from the device that holds them. The credentials remain valid at the platform until you revoke them there, for example in your Kalshi account settings.

GIF search. Bloc's GIF search is provided by KLIPY. When you search for, send, or view a GIF, your device connects to KLIPY directly and shares your search terms, your IP address, basic device information, and a random identifier that Bloc creates only for GIF search. KLIPY does not receive your name, phone number, messages, Bloc memberships, or any financial information. KLIPY's own privacy policy governs how it uses this information.

Ending a connection does not delete positions and transactions already confirmed as part of a Bloc. They remain part of the Bloc's history, as described in Data Retention below.

Bloc may also display information from or link to third-party services such as market-data providers, sportsbooks, brokerages, prediction markets, or other websites and applications. Plaid, Kalshi, and these other services are independent from Bloc and have their own terms and privacy practices.

7. AI and Automated Processing

Bloc may use automated systems or artificial intelligence to classify uploads, normalize holdings, match markets, summarize information, calculate fields, or assist with other product features.

Information submitted to these features may be processed by service providers acting on our behalf. We will configure and contract with providers as appropriate for the intended use. Users should not upload passwords, private keys, full payment-card information, or other credentials that Bloc does not request.

Statements you upload. If you upload a statement, screenshot, or bet slip to add positions, Bloc reads it to prepare draft positions for you to review and save. Bloc only needs your positions; it does not need your name, account numbers, or other personal details, and you can remove them before uploading. A simple CSV export of your positions works best. Bloc may send the file to an AI service provider to read it. Bloc does not keep the file after reading it. Our AI provider does not use these files to train its models.

8. Data Retention

We retain information only for as long as reasonably necessary to provide the Service, maintain legitimate business and shared Bloc records, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud and abuse, and protect the Service.

Retention periods vary by category and purpose of the information. Information associated with an active account or Bloc may be retained while needed to provide the Service.

Temporary connected-account information. While an account remains connected, Bloc may retrieve and temporarily retain its holdings and transactions to identify potential matches with Bloc activity. This information is private to the custodian and is not part of any Bloc's records.

Confirmed Bloc records. Only positions and transactions confirmed as belonging to a Bloc become part of its permanent position and transaction history. This includes existing holdings, and historical transactions related to them, that a custodian selects and confirms as a Bloc's starting positions. Unmatched information from a connected account is never added to permanent Bloc records.

When a connection ends, Bloc deletes temporary unmatched information from that connection. Confirmed Bloc records remain, including after the custodian leaves the Bloc or deletes their Bloc account.

Account deletion. When you delete your account, we will delete or de-identify personal information associated with your account within a reasonable period, except where retention is required or permitted for legal, security, fraud-prevention, dispute-resolution, backup, shared-record, or other legitimate purposes.

Shared Bloc records. Messages, transactions, positions, proposals, votes, ownership records, and other information involving multiple Bloc members may remain where reasonably necessary to preserve the integrity of the Bloc's history, and may remain available to other members after you delete your account. Where appropriate, retained records may be associated with a deleted-user indicator rather than an active profile.

Backups and system records. Information may remain temporarily in backups, security logs, and other system records until those records are overwritten or expire through normal system processes.

We review our retention and deletion practices periodically and when we make material changes to the Service or how we handle information.

9. Your Choices and Rights

Depending on where you live, you may have rights concerning your personal information, including rights to access, correct, delete, or obtain a copy of certain information, or to object to or restrict certain processing.

You can manage certain profile information, permissions, notification settings, and group activity through the Service. You may also request assistance by contacting support@heybloc.com.

You may delete your Bloc account through the account-deletion functionality provided by the Service or by following the published account-deletion process.

If you are the custodian for a connected account, you may disconnect it. Disconnecting stops future access through that connection but does not delete confirmed Bloc records, as described in Data Retention above. For a direct integration that keeps credentials on your device, disconnecting also deletes those credentials from the device; revoke them with the platform to invalidate them entirely.

We may need to verify your identity before completing certain requests.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting access to your phone, devices, authentication methods, and Bloc account. Contact us promptly if you believe your account has been compromised.

11. Children and Age Eligibility

Bloc is intended for users who meet the eligibility requirements stated in our Terms of Service. Bloc's launch eligibility is 18 years of age or older. We do not knowingly permit children under 18 to create Bloc accounts.

If we learn that we collected personal information from a person who was not eligible to create an account, we may delete or restrict the account and associated information as appropriate.

12. U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable law. Depending on the law and our practices, these may include rights to know or access personal information, correct inaccurate information, delete information, obtain a portable copy, and opt out of certain forms of sale, sharing, targeted advertising, or profiling.

Bloc does not sell mobile phone numbers or SMS opt-in data or consent for marketing or promotional purposes. If our practices change in a way that creates additional opt-out rights, we will provide the required controls and update this policy.

You may submit a privacy request at support@heybloc.com. We will respond as required by applicable law.

13. International Users

Bloc is initially designed for U.S. users. If the Service becomes available in additional jurisdictions, additional privacy disclosures, rights, transfer mechanisms, or terms may apply.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the effective date when we make changes and provide additional notice when required by law or when changes are material.

If a change materially affects how we use previously collected information, we will take additional steps where required by law.

15. Contact Us

For privacy questions or requests, contact:

Goldfish Context Co, LLC
Bloc
Email: support@heybloc.com
Address: 202 N Cedar Ave Ste 1, Owatonna, MN 55060-2306, USA