ROBIN LABS

Privacy Policy

Last updated: 24 August 2026

Robin Labs ("Robin Labs", "we", "us") operates a non-custodial launchpad and trading interface for tokens on Robinhood Chain, available at robinlab.io. This policy explains what we do and do not collect. In plain terms: we do not run accounts, we never hold your funds, and we never have your private keys or seed phrase.

What we do not collect

• No usernames, passwords, or user accounts.
• No private keys, seed phrases, or custody of your assets. You connect your own self-custody wallet, and every transaction is signed by you.
• No names, emails, or phone numbers are required to use the app.

What is involved in normal use

• Your wallet address. When you connect a wallet, your public address is used to read balances and to build transactions you sign. Public blockchain addresses and on-chain activity are inherently public on Robinhood Chain and are not private information we control.
• Coin profiles. If you create a coin, you may optionally submit a logo, description, and social links. These are signed by your wallet and published publicly on your coin page. Do not submit anything you want kept private.
• Basic technical data. Like most websites and apps, our servers may process standard request data (such as IP address and device or browser type) to deliver content and protect against abuse. We do not use this to identify you personally.

Telegram bots

We operate more than one Telegram bot and they handle data very differently, so they are described separately. Whichever you use, the bot itself always shows its own disclaimer and command list.

Boards that only post

Our trending and new-launch boards, which post to our own channels, are write-only. They post messages and remove their own previous posts, and they use neither webhooks nor long polling, so they cannot receive a message or read what is said in a channel they belong to. They keep public blockchain data, public token metadata (contract addresses, symbols, logos, volume and liquidity figures) and the id of their own most recent post so the next one can replace it. They keep nothing about you.

The Robin Labs buy bot

This bot is added to a project's own Telegram group by that group's admins. It watches the public blockchain for buys of the token they configure and posts a card when one happens. It is read-only against the chain: it holds no keys, cannot trade, cannot move funds, and will never ask you for a wallet, a private key or a seed phrase.

What it receives. Telegram delivers every message in a group to a bot that has been made an administrator, and this bot must be an administrator in order to post. So group messages do reach it. It acts only on its own commands and discards everything else: it does not read, store, log or process the contents of your group's conversation, and it builds no record of who said what.

What it stores. Per group: the group's Telegram chat id and title, the token contract address to watch, the display settings its admins chose (minimum buy size, emoji, dollars per emoji), a Telegram file identifier if the group uploaded its own card artwork, and the numeric Telegram user id of the admin who ran the setup command. Nothing else. No usernames, no phone numbers, no member lists, no message content.

An admin can send /off to stop it posting, or remove the bot from the group to end it entirely.

The Robin Labs launch bot — please read this one

This bot takes commands, so it receives the messages you send it. More importantly, it is custodial: it creates a wallet for you and holds that wallet's private key on our server. This is a real and material difference from the website, where you hold your own keys and we never touch them.

What we store for you is deliberately minimal: your numeric Telegram user id, your wallet's encrypted private key and its public address, the coins you have launched, and a short-lived session so multi-step commands remember where you were. We do not store your username, display name, phone number, contact list, or the content of your messages beyond acting on the command in front of us.

Keys are encrypted at rest with AES-256-GCM under a key derived by scrypt from a master secret and a per-user salt. A plaintext key exists only in memory for the instant a transaction is signed, and is never written to disk and never logged. Be clear-eyed about what custody means all the same: if our server is compromised, funds held in bot wallets are at risk, and there is no key-export command — you move value out with /withdraw, not by taking the key with you. Keep in the bot only what you intend to use.

Send /forget at any time and we erase your record entirely. Withdraw your balance first, because erasing the record removes the key with it and the wallet cannot be recovered afterwards.

Generated images

Where a bot generates artwork for you, the work is done by a third-party image service. Your Telegram identity is not sent to it: your user id is hashed on our side and used only to choose which colour and expression variant you get, so what leaves our server is a text prompt containing no identifier.

If any bot of ours begins handling data differently from what is written above, we will update this policy before that change goes live.

Third-party services

To function, the app talks to third parties, each with their own privacy practices we do not control: the wallet you choose, blockchain RPC providers, and data or routing services such as DexScreener, Uniswap, and LI.FI. Your interactions with those services are governed by their policies.

Selling data

We do not sell your data. We do not build advertising profiles.

Children

The app is intended for adults 18 and over. It is not directed to children, and we do not knowingly collect information from anyone under 18.

Changes

We may update this policy as the product evolves. Material changes will be reflected here with a new date.

Contact

Questions about this policy: team@robinlabs.fun.