Privacy Policy

1. Scope

This Privacy Policy explains how Every Bit Works, Inc. (“Every Bit Works,” “we,” “us,” or “our”) handles information in the Damage Report application and on everybitworks.com.

2. Information handled by Damage Report

Kalshi credentials

To connect Damage Report, you select a Kalshi private-key file and enter its API key ID. Damage Report stores these credentials in the iOS Keychain using a device-only protection class. Your private key is used on your device to sign requests sent directly to Kalshi; the API key ID and request signature are sent to Kalshi to authenticate those requests. Every Bit Works does not receive or store your credentials.

Kalshi account information

Damage Report retrieves information needed to provide its features, including balances, positions, fills, settlements, deposits, withdrawals, transfers, fees, and market information. This information is processed and stored locally on your device. Every Bit Works does not operate a server that receives this data.

Account statements

If you choose Account Statements, the app can read an activity CSV selected from Files or downloaded in an in-app Kalshi browser. After you confirm a preview, it stores the original CSV and supported credit evidence locally to reconcile funding. The CSV may contain additional account activity even though only supported applied credits are imported into funding totals.

The in-app browser sends your sign-in information directly to Kalshi and its sign-in providers. Its cookies and website session data use an account-scoped, nonpersistent WebKit store, which may be reused while the app is running. That store is discarded when the app terminates, you disconnect, or the connected account credentials change or become invalid. Every Bit Works does not receive your Kalshi website password.

Local diagnostics

Damage Report keeps recent app logs, limited statement-import event history, and available Apple MetricKit performance, crash, and hang reports on your device to help investigate issues. Saved app logs are limited to seven days and 10 MiB; MetricKit reports have an approximately 30-day retention window. Cleanup runs when the app executes. Logs and MetricKit files are excluded from device backups. Diagnostic files are not automatically sent to Every Bit Works.

Demo mode

Demo mode uses a separate, temporary store of curated example records. Your personal records and credentials remain separate. Public connection checks may contact Kalshi’s exchange-status endpoint without account credentials or cookies. Demo syncs are simulated, and demo exports exclude your personal diagnostic history.

3. How information is used

Information handled by the app is used to authenticate direct requests to Kalshi, synchronize records, calculate and display performance information, identify data-quality issues, reconcile statement credits you confirm, and create exports you request. We do not use Damage Report data for advertising, tracking, profiling, or sale.

4. Sharing and third parties

Damage Report communicates directly with Kalshi to provide its core functionality. Kalshi receives API requests under your Kalshi account and handles them under its own terms and privacy practices. Kalshi website sign-in and statement downloads are also subject to Kalshi’s and its sign-in providers’ privacy practices. Apple provides the operating system, Keychain, document picker, share sheet, WebKit, and MetricKit services used by the app. Apple may separately handle device diagnostics under your system privacy settings.

Damage Report lets you create CSV files and diagnostic bundles. Those files leave the app only when you use Apple’s share sheet and choose a destination. A diagnostic bundle can contain financial records, sync state, balances, positions, raw API records, statement-credit evidence, statement-import event history, recent app logs, and system diagnostics. It is not an anonymous report. You can save an export to Files and inspect it before sharing. Review the destination and share these files only with a recipient you trust; a cloud or messaging destination handles your copy under its own privacy practices.

We do not sell personal information. We do not share app data with advertising networks or analytics providers, and the app includes no third-party advertising or analytics SDKs.

5. Support communications

If you email support or choose to send us an export, we receive the email address, message, attachments, and other information you choose to provide. We use that information to respond, investigate issues, improve Damage Report, protect the service, and meet legal obligations. Do not send us your Kalshi password, private key, or API key file.

6. Retention and deletion

Damage Report keeps local account records and confirmed statement evidence until you remove them. To remove stored credentials and local records, leave demo mode if it is active, then use Settings → Disconnect and Wipe Data and confirm. This also removes app-owned saved diagnostic files and statement-import history. If the app reports Wipe Incomplete, retry. A small amount of nonidentifying reset metadata remains to prevent older system diagnostics from being reimported.

To revoke API access, revoke the key on the Kalshi account page. Disconnecting does not close your Kalshi account or delete records held by Kalshi. Deleting Damage Report removes local app data, but Keychain credentials may survive uninstall, so use the in-app wipe first. The wipe cannot remove original key or statement files in Files, device backups, Apple’s system logs, or copies of exports you already shared. Manage those copies with their respective storage provider or recipient. Ordinary app data may be included in device backups depending on your Apple settings; Damage Report does not operate its own cloud backup service.

Information you send to support is retained only as long as reasonably needed for support, security, recordkeeping, and legal obligations. You may ask us to delete support information by emailing support@everybitworks.com. We may retain limited information when required by law or necessary to establish, exercise, or defend legal claims.

7. Website privacy

Everybitworks.com is a static website. We do not place advertising or analytics cookies, run behavioral tracking scripts, or provide a web account or contact form. Cloudflare hosts and delivers this site and may process ordinary technical request information such as IP address, browser type, requested URL, and timestamps to deliver and protect it under its privacy policy. Our website source is stored on GitHub; visiting this site does not itself load GitHub resources.

8. Security

We use safeguards appropriate to the app’s design, including the iOS Keychain for credentials, device-local storage, read-only Kalshi access, and encrypted HTTPS connections. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

9. Children

Damage Report is not directed to children, and we do not knowingly collect personal information from children through the app.

10. Changes

We may update this policy as Damage Report changes. We will post the revised policy here and update the effective date. Material changes will be communicated as required by applicable law.

11. Contact

Questions or privacy requests may be sent to support@everybitworks.com.