01We never hold your funds

Flux is intelligence, not custody. We do not take deposits, we do not control any wallet, and we can never move your tokens. When you connect a wallet, Flux only reads your public address to show balances and context. Every transaction is signed by you, in your own wallet.

02We will never ask for your seed phrase

No one at Flux will ever ask for your seed phrase, private key or wallet password — not in the app, not by email, not in DMs, not ever. Any message claiming to be Flux and asking for those is a scam. A legitimate wallet connection only ever asks you to approve a signature in your wallet; it never asks you to type your secret words into a website.

03How we protect your account

• Sign-in runs over encrypted connections (HTTPS/TLS) through a dedicated authentication provider.
• We store an email and session token — never a password you reuse elsewhere in plain text.
• Sessions can be revoked by signing out, and sensitive actions are scoped to your session only.
• Public config keys shipped in the app are exactly that — public — and carry no access to your data.

04Data minimization

We collect the least we can and keep it only as long as it's useful. On-chain data is already public; your account data is limited to what signing in and sending your alerts requires. See the Policy for the full breakdown.

05Staying safe on Solana

• Verify the contract address before you trade — copy it from Flux and check it matches on a block explorer.
• Bookmark the real Flux URL. Don't trust links from DMs, replies or lookalike domains.
• Use a burner wallet for memecoin trading, kept separate from your main holdings.
• Revoke stale approvals regularly, and reject any signature request you don't understand.
• Assume urgency is a trap — "claim now", "airdrop closing", "verify your wallet" are classic scams.

06Responsible disclosure

If you find a security vulnerability in Flux, we want to hear about it before anyone else does. Please report it privately via X @FluxEngine, with enough detail to reproduce it, and give us reasonable time to fix it. We don't pursue good-faith researchers who follow responsible disclosure.