Privacy Policy

Last updated September 27, 2026

This policy explains what Municipal Labs Inc. ("Bluechips", "we") collects through joinbluechips.com and the Bluechips app, why, who we share it with, how long we keep it, and your choices. Municipal Labs Inc. is a Delaware corporation at 8 10th St, Apt 2701, San Francisco, CA 94103.

What we collect

• On the waitlist: your mobile number; your referral code and who referred you; your place in line; the page you came from and campaign tags in the link (utm); and your IP address, used to stop abuse.
• In the app: your name, email (often Apple's private relay address), the photo you add, your user id, your confirmed mobile number, your device's push token, and what you do in the app (drops, packs, sets, gifts and sends).
• If you open a brokerage account: the identity details the broker needs (such as legal name, date of birth, address, Social Security number and your answers to its questions). We pass them to Alpaca Securities to open and maintain your account, and don't use them for anything else.
• If you link a brokerage through Plaid: a Plaid access token and a read-only list of your holdings, used only to show your own holdings in the app.
• If you find friends from your contacts: phone numbers from the contacts you choose are scrambled (hashed) on your phone before they're checked. We use them only to find friends already on Bluechips and don't keep them.
• Usage and diagnostics: events about how the site and app are used and error reports. Money and identity fields are masked from session recordings, and analytics carry your user id, never account numbers.

How we use it

To run the list and send your code and invitation, to operate the app and your account, to show friends to each other, to pay rewards, to prevent fraud and abuse (including SMS fraud), to understand and improve Bluechips, to meet legal obligations, and to contact you about Bluechips.

Who we share it with

We share personal information only with service providers that run Bluechips for us, under contracts that limit their use of it, and when the law requires it:

• Twilio: text messages (confirmation codes and invitations).
• PostHog: product analytics.
• Sentry: error reports.
• Cloudflare: hosting joinbluechips.com, and its bot check on the sign-up form.
• Alpaca Securities LLC: brokerage accounts and the shares that back your chips.
• Plaid: linking an outside brokerage, if you choose to.
• Coinbase: payments, once funding opens.
• Amazon Web Services: our servers and database.

Your friends on Bluechips see your name, photo and the chips you send them. If you turn it on, they also see your day's move. We don't sell your personal information, and we don't share it for cross-context behavioral advertising.

How long we keep it

Consumer data is kept only while your account is active. Analytics events are kept for one year. Database backups roll off after 7 days. A waitlist number is kept while you're on the list; it's deleted when you ask, or with your account.

Deleting your data

You can delete your account in the app. Your personal data is erased 30 days after the request (a grace period for accidental deletion). Plaid items are removed when you unlink or delete, and ledger records the broker needs are kept without your identity. To leave the list or ask about your data, email [email protected], or reply STOP to any text to stop our messages.

Security

Data is encrypted in transit (TLS 1.2+) and at rest. Vendor credentials are held only on our servers; the app holds none. Access to production is limited to the two founders, with multi-factor authentication.

Your rights

Depending on where you live (including California), you may have the right to know what we hold about you, to get a copy, to correct it, to delete it, and to not be treated differently for using these rights. Email [email protected] and we'll respond within the time the law requires. We'll confirm the request comes from you, usually by a code to your number.

Children

Bluechips is for adults 18 and older. We don't knowingly collect data from anyone under 18; if you believe we have, contact us and we'll delete it.

Changes

We'll post updates here with a new date, and tell you in the app or by text about material changes.

Contact

Municipal Labs Inc., 8 10th St, Apt 2701, San Francisco, CA 94103 · [email protected]