In short
- Realize collects what it needs to compute your tax figures: your email, your onboarding answers and the trade history you connect.
- Realize never sells your data and runs no ad networks or advertising pixels.
- Email support@realize.tax and your data is erased.
1 About this policy
Realize is a tax-tracking tool for prediction markets, operated from the United States by Layup Inc. (“we”, “us”). This policy explains what we collect, how we use it, who we share it with, and the choices you have. It covers realize.tax, realize.money, and the Realize app, and it applies to US residents who are 18 or older.
2 What we collect
Your account email and the sign-in identity from Google Sign-In and Firebase Authentication. During onboarding, your filing status, an income band (a range, not an exact figure), and any prior-year gains you choose to enter, so we can estimate your tax position. When you connect a venue, the API secret you create and the trade history we sync with it: your fills, settlements, positions, balances, and the tax figures we compute from them. If you subscribe, billing identifiers from Stripe (we never see or store your card details). And when something goes wrong in the app, basic technical data, including your IP address and request headers, so we can fix it. We do not ask for your Social Security number, your address, or your venue password.
3 How we use it
To compute and show your tax position, to run and support the product, and to send you account and transactional email (for example, a receipt or a sync notice). We do not use your data for advertising.
4 Read access only
The code that talks to Kalshi and Polymarket US is read-only by construction: it implements no trading endpoint, so we cannot place trades, move funds, or take custody of your money. Your venue secret is used only to read your own activity. Our security page explains this in more detail.
5 Who we share it with
We use a small set of service providers to run Realize, and we share only what each one needs to do its job: Google and Firebase (sign-in and hosting), Stripe (payments, including your email to create a customer record), Amplitude (product analytics), Sentry (error monitoring, including your IP address on error events), and Resend (transactional email). Amplitude and Sentry are tied to your account ID and email; in the events we send about your account, dollar amounts go only as coarse ranges, never exact figures or individual trades. There is one exception, and it is never tied to you: a figure you type into the calculator on our public pages while signed out is sent as typed, against an anonymous device, so we can see what visitors estimate. Sign in and it goes as a range like everything else. Amplitude records a replay of every session, and Sentry records a replay of a sample of sessions plus any session where something goes wrong. The two are masked differently. A Sentry replay has every piece of text and every input hidden, so it shows layout and clicks and nothing else. An Amplitude replay is a recording of your screen as you saw it, so unlike our events it does include your figures, your positions and your charts: finding the screen where the product lost you is the whole reason we watch one. Your exchange API keys are the exception. They are blanked out inside your browser before the recording is sent, as are password fields, so they never reach Amplitude at all. Our security page lists exactly what each tool receives.
6 What we don’t do
No ad networks, no advertising pixels, no data resellers. We do not sell your data, and we do not share your trade history with anyone outside the providers above.
7 Where your data lives
Everything runs on Google Cloud in US regions. Your venue API secret is encrypted at rest with AES-256-GCM and is only ever decrypted to sign a read request to that venue. Traffic runs over TLS, the database is not exposed to the public internet, and our own service keys live in Google Cloud Secret Manager.
8 How long we keep it
We retain your data for as long as you keep your account. Disconnecting a venue deletes the stored API secret and the trade history we synced from it.
9 Deleting your data
We don’t have a self-serve “delete my account” button yet. Until we do, email support@realize.tax and we’ll erase your data.
10 Eligibility
Realize is for US residents who are 18 or older. It is not directed to children, and we do not knowingly collect data from anyone under 18.
11 Changes to this policy
If we change how we handle your data, we’ll update this page and the “Last updated” date above.
12 Contact
Questions about your privacy or your data? Email support@realize.tax.