CoinBucha app — privacy.
The app shows CoinBucha's public Bitcoin signals on your phone. It is short on data because it does very little with it.
What the app keeps on your phone
The last snapshot. A copy of the public signal set, the sovereign reserve table, the Listed Bitcoin index and its calendar is bundled into the app when it is built, so it works with no connection. When you are online the app refreshes them and keeps the newest copy in its own storage.
Your watchlist and settings. The signals, states and companies you star, whether alerts are on, the last time you looked at the sovereign table, and the last 30 alerts the app showed you. All of it stays in the app’s own storage. There is no account to sync to.
The only requests it makes
HTTPS GETs to coinbucha.com for four public files: /signals.json, /sovereigns.json, /api/listed-bitcoin and /api/listed-bitcoin/calendar. They carry no identifier, no location and no personal data: only standard request headers and, when the app already has a copy, its ETag or date so an unchanged file is not downloaded again. coinbucha.com is hosted on Vercel, whose servers see the request’s IP address in ordinary server logs; CoinBucha reads no per-request data from them.
App updates. The app checks u.expo.dev (Expo, the update service) for a newer version of its own code when it opens. That request carries the app’s version and platform and a random ID created for this installation, which the update service uses to deliver the right update. It is not linked to you, carries nothing you entered, and resets if you reinstall. No other host is contacted.
Your portfolio
The bitcoin and the shares you enter in Portfolio, your starred companies and your settings are stored only on your phone. The bitcoin exposure is calculated on the phone from the public per-share figures; nothing you enter is sent anywhere. Uninstalling the app deletes it.
Alerts
If you turn on alerts (About → Settings → Alerts), the app asks for notification permission at that moment, never at launch. It then compares the newest public files with the copy it saw last, on the phone, at least once a day and whenever you open it, and shows a local notification when the record changes. There is no push server and no push token: nothing about you or your device is sent anywhere to make alerts work. Turn it off in the app or in your phone’s settings at any time.
What the app does not do
- No account, sign-in or registration.
- No analytics or crash-reporting SDK, no advertising and no advertising identifier.
- No payments, in-app purchases, trading, wallet or exchange.
- No location, contacts, camera, microphone or photos.
- No WebView: links open in your browser. Links to CoinBucha’s and the studio’s own websites carry plain UTM tags so coinbucha.com, which counts its own visits with Google Analytics, can tell app visits from web visits; links to primary sources open untouched.
Deleting your data
Everything the app holds is on your phone. Uninstalling the app, or clearing its storage in your phone’s settings, erases it. There is nothing to delete on our side.
The data in the app
The app shows the same public record coinbucha.com publishes: states and listed companies, not people. Reuse it with the attribution “CoinBucha (coinbucha.com)” and the as_of date. Information, not investment advice.
Published by CoinBucha (coinbucha.com), Helsinki, Finland. Questions about this page: hello@jukkablomberg.com. Updated 4 November 2026.