Your privacy choices
This page explains how to see, change or delete the personal data that Pewter holds about you. Pewter is run by HEIR PTE. LTD. (UEN 202449113D), doing business as Omega Compute. The full details are in the Pewter Privacy Policy at https://omegacompute.com/policy.
There is no web form and no web tool on this site for deleting data. You can delete your account in the Pewter app, or ask us by email at devs@h3ir.com.
No tracking
Pewter does not track you across other companies' apps or websites. It does not use advertising identifiers. It has no advertising or analytics tools from other companies. We do not sell your personal data, and we do not buy data from or sell data to data brokers. So there is nothing to opt out of here.
Delete your account in the app
- Open Pewter and go to More > Settings > Delete account.
- Sign in with Apple again. This proves the request comes from you.
- We then:
- end all your sessions;
- tell Apple to revoke Pewter's access to your Apple Account; and
- replace your personal details with irreversible pseudonyms. Audit records keep only hashes.
If Apple's revocation cannot be reached, the deletion still completes.
You can also remove Pewter in your iPhone's Settings > your name > Sign in with Apple [CONFIRM: exact iOS menu path]. If you do, Apple can tell us, and we then end your sessions and erase your account in the same way.
Before you delete:
- Back up your wallet key. Deleting your account does not delete the wallet on your phone or any funds in it. We cannot recover a lost key. [CONFIRM: whether deleting the account or the app removes the on-device wallet]
- Cancel subscriptions with Apple. Deleting your account does not cancel a subscription you bought through Apple. Manage it in your Apple Account settings. [CONFIRM: keep only if the in-app purchase build ships]
Other choices in the app and on your iPhone
- Location. Pewter asks for your location only once, while you use the app, to fill in the country, region and city of a machine you offer. Your exact position is never saved or sent. You can say no and pick the place by hand. You can turn the permission off at any time in iOS Settings.
- Wallet address. You can remove a linked wallet address from your account in the app [CONFIRM: in-app path]. This unlinks it in our records. It does not touch the wallet on your phone or any funds in it.
- Your name. You only share your name with us if you choose to when you first sign in with Apple. You can ask us to delete it at any time (see below).
- Notifications. The Daily Forge reminder is a local notification that you turn on yourself. You can turn it off in iOS Settings.
Ask us by email: access, correction, deletion, or withdrawing consent
Write to devs@h3ir.com. Please:
- write from the email address we hold for you. If you used Hide My Email, write from or tell us your Apple relay address;
- say which request you are making: a copy of your data, a correction, deletion, withdrawing consent, or another right listed below; and
- tell us enough to find your account.
How we check it is you. We match the address you write from with the address on your account. If it does not match, or we cannot find your account that way, we will ask you for more information before we act. We may ask you to sign in to the app to confirm. [CONFIRM: exact identity-check steps] We will only use that information to check who you are. We will never ask for your wallet's private key or recovery phrase. If anyone asks for it in our name, it is not us.
Someone acting for you. You may use an authorised agent to ask for you, if you give us proof that they may.
Correction. You can change many details yourself in the app, such as your listings, requests and agent limits. For anything else, email us.
Withdrawing consent. Where we rely on your consent, for example for your name or for the location prompt, you can withdraw it at any time. This does not affect what we did before. If you withdraw consent we need to run your account, such as for your Apple identifier, we will tell you what this means for what you can do with Pewter.
What we keep, and for how long
Deleting your account removes or pseudonymises your personal details straight away. Some records stay, because the law requires them or to keep service history intact:
| What | How long |
|---|---|
| Pseudonymised sandbox records (listings, requests, deals, approvals, ledger entries, agents) | Kept without your personal details. The audit log keeps only hashes |
| Daily Forge claim history | Kept with only a pseudonymous ID, dates, tiers and item IDs. No name and no time zone |
| Server logs (IP address, time, request ID) | 90 days |
| Support emails | 12 months after we close the conversation |
| In-app purchase records | [CONFIRM: retention period] |
| Ledger, payment-release and audit records of real money (live services only) | 7 years, because accounting and tax law require it |
| Records needed for a legal duty or a legal claim | As long as the duty or claim lasts |
If you ask us to delete data that we must keep by law, we will tell you what we are keeping and why.
Open live deals delay deletion. If you have a live deal that is still open, we cannot finish deleting your account until the deal ends. Sandbox deals never block deletion.
Wallet addresses and the public blockchain
- Pewter never holds your wallet's key or your funds. Our server stores only your public wallet address.
- When you remove an address or delete your account, we unlink the address from your account in our records, except where we must keep it by law.
- We cannot erase anything from a public blockchain. Transactions to or from your address are public and permanent. Nobody, including us, can change or delete them. This stays true after you delete your account.
Your rights where you live
Everyone. You can ask us what personal data we hold about you, ask us to correct it or delete it, and withdraw any consent you gave.
EU, EEA and United Kingdom (GDPR). You can ask for access and a copy, correction, erasure, restriction, and a portable copy of your data. You can object to our use of your data based on legitimate interests. You have the right to be told when we pass on a correction, erasure or restriction, and not to be subject to decisions based only on automated processing that have legal or similarly significant effects. We do not make such decisions. The right to erasure cannot reach data on a public blockchain.
Singapore (PDPA). You can ask for access to your personal data and for information about how we have used or disclosed it in the past year. You can ask us to correct it. You can withdraw your consent.
California (CCPA and CPRA). If this law applies to us, you can ask to know what personal information we collect, use and disclose, and ask us to delete or correct it. You can opt out of the sale or sharing of your personal information and limit the use of sensitive personal information. We do not sell your personal information or share it for cross-context behavioural advertising, and we have not done either in the last 12 months. You will not be treated worse for using these rights.
How long we take, and cost
- We reply within 30 days. If your request is complex and we need more time, we will tell you within that period and why.
- For California requests, we reply within 45 days, and we may extend this once by a further 45 days where permitted.
- It is free, unless a request is clearly unfounded or excessive. If so, we may charge a reasonable fee or refuse, and we will tell you why.
Complaints
Please write to devs@h3ir.com first, so we can try to fix it. You can also complain to a data protection authority at any time:
- Singapore: the Personal Data Protection Commission (PDPC), https://www.pdpc.gov.sg.
- EU and EEA: the authority where you live, work, or where you think a breach happened: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
- United Kingdom: the Information Commissioner's Office (ICO), https://ico.org.uk.
- California: the California Attorney General and the California Privacy Protection Agency.
Contact
HEIR PTE. LTD., doing business as Omega Compute
Registered office: 32 Pekin Street, #05-01, Singapore 048762
Email: devs@h3ir.com
Data Protection Officer (PDPA): Adhitya, at the same address
United States contact: [COUNSEL: a US contact or agent, if counsel says one is needed. None is appointed. Until then, United States users write to devs@h3ir.com.]
Pewter Privacy Policy: https://omegacompute.com/policy