Privacy

About this policy. Realize is a tax-tracking tool for prediction markets, operated from the United States by Layup Inc. (“we”, “us”). This policy explains what we collect, how we use it, who we share it with, and the choices you have. It covers realize.tax, realize.money, and the Realize app, and it applies to US residents who are 18 or older.

What we collect. Your account email and the sign-in identity from Google Sign-In and Firebase Authentication. During onboarding, your filing status, an income band (a range, not an exact figure), and any prior-year gains you choose to enter, so we can estimate your tax position. When you connect a venue, the API secret you create and the trade history we sync with it: your fills, settlements, positions, balances, and the tax figures we compute from them. If you subscribe, billing identifiers from Stripe (we never see or store your card details). And when something goes wrong in the app, basic technical data, including your IP address and request headers, so we can fix it. We do not ask for your Social Security number, your address, or your venue password.

How we use it. To compute and show your tax position, to run and support the product, and to send you account and transactional email (for example, a receipt or a sync notice). We do not use your data for advertising.

Read access only. The code that talks to Kalshi and Polymarket US is read-only by construction: it implements no trading endpoint, so we cannot place trades, move funds, or take custody of your money. Your venue secret is used only to read your own activity. Our security page explains this in more detail.

Who we share it with. We use a small set of service providers to run Realize, and we share only what each one needs to do its job: Google and Firebase (sign-in and hosting), Stripe (payments, including your email to create a customer record), Amplitude (product analytics), Sentry (error monitoring, including your IP address on error events), and Resend (transactional email). Amplitude and Sentry are tied to your account ID and email; in the events we send about your account, dollar amounts go only as coarse ranges, never exact figures or individual trades. There is one exception, and it is never tied to you: a figure you type into the calculator on our public pages while signed out is sent as typed, against an anonymous device, so we can see what visitors estimate. Sign in and it goes as a range like everything else. Amplitude records a replay of every session, and Sentry records a replay of a sample of sessions plus any session where something goes wrong. The two are masked differently. A Sentry replay has every piece of text and every input hidden, so it shows layout and clicks and nothing else. An Amplitude replay is a recording of your screen as you saw it, so unlike our events it does include your figures, your positions and your charts: finding the screen where the product lost you is the whole reason we watch one. Your exchange API keys are the exception. They are blanked out inside your browser before the recording is sent, as are password fields, so they never reach Amplitude at all. Our security page lists exactly what each tool receives.

What we don’t do. No ad networks, no advertising pixels, no data resellers. We do not sell your data, and we do not share your trade history with anyone outside the providers above.

Where your data lives. Everything runs on Google Cloud in US regions. Your venue API secret is encrypted at rest with AES-256-GCM and is only ever decrypted to sign a read request to that venue. Traffic runs over TLS, the database is not exposed to the public internet, and our own service keys live in Google Cloud Secret Manager.

How long we keep it. We retain your data for as long as you keep your account. Disconnecting a venue deletes the stored API secret and the trade history we synced from it.

Deleting your data. We don’t have a self-serve “delete my account” button yet. Until we do, email privacy@realize.tax and we’ll erase your data.

Eligibility. Realize is for US residents who are 18 or older. It is not directed to children, and we do not knowingly collect data from anyone under 18.

Changes to this policy. If we change how we handle your data, we’ll update this page and the “Last updated” date above.

Contact. Questions about your privacy or your data? Email privacy@realize.tax.