Help & answers

A native iOS and macOS terminal for tracking crypto futures and spot positions. You connect the exchange accounts you already have using read-only API keys; Cursaris pulls in your positions, balances and fills, and then does the analysis on your device — P&L and liquidation math, risk (VaR, Monte-Carlo, stress tests), options Greeks, and futures tax accounting.

What it is not: a trading platform, a broker, or an exchange. It never places an order and never holds your money. It is an instrument panel bolted onto accounts that stay entirely yours.

No. There is no sign-up, no password, no profile — because there is no server to keep one on. You install the app and it works. Your data lives in a local database on your device.

Why this matters beyond convenience: an account means a database of users sitting on someone’s server. Cursaris does not have that database, so there is nothing to breach, nothing to subpoena, and nothing to sell.

Twelve:

• Binance
• Bitget
• Bybit
• OKX
• MEXC
• Coinbase
• Gate.io
• KuCoin
• BingX
• Kraken
• Bitfinex
• Deribit

Two setup quirks worth knowing in advance. Kraken needs two separate keys — it issues Spot and Futures credentials independently, so the app asks for both. Coinbase uses a PEM private key file instead of the usual key-and-secret pair; you can paste it or import the JSON file straight from the Coinbase portal.

Ten of the twelve also accept CSV trade-history import if you would rather not connect a key at all, or need to backfill history older than the API returns. Bitfinex and Deribit are API-only.

The free tier connects two exchanges at once; connecting all twelve is part of the paid tier. Positions, trade history, DCA plans and in-app alerts are unlimited on every tier, including free.

• iPhone — iOS 18 or later
• iPad — iPadOS 18 or later
• Mac — macOS 15 or later
• Apple Watch app and complications — watchOS 11 or later

Home-screen and desktop widgets and Live Activities are included. iPhone, iPad and Mac are one Universal Purchase — buy once, use on all three; you are never asked to pay twice. Subscriptions are Family Sharing enabled.

No. There is no order-placement code path in the app at all. Every exchange endpoint Cursaris talks to is a read endpoint — positions, balances, fills, trade history, funding rates, tickers. The app does let you keep your own ledger — record a “Buy” or “Sell”, close a position in your book — but those controls write to the local database and nowhere else. Nothing they do is ever sent to your exchange, because there is no code that could send it.

The automated features work the same way. Trading Plans and the alert system watch the rules you define and notify you when they trigger. They do not act on your account. They tell you; you decide, and you execute on your exchange yourself.

No — on all three counts, and they are three different things worth separating.

• No withdrawals. The app never calls a withdrawal or transfer endpoint. Where you see a “withdrawable” figure in the app, that is a balance your exchange reports to us — a number we read, not an action we can take.
• No custody. Your coins never leave your exchange account. Cursaris never takes possession of funds and never becomes a counterparty to you. Your relationship is directly with your exchange, exactly as it was before you installed the app.
• No money transmission. Cursaris moves no money between any two parties. The only payment involved anywhere is your App Store subscription, and Apple bills that — the money never passes through us.

On your device, in the system Keychain, and nowhere else. They are stored with the strictest practical accessibility class — readable only while the device is unlocked, and marked “this device only”, which means they are excluded from iCloud Keychain sync and are not carried over when you migrate to a new device.

There is no Cursaris server that could receive a key, and no developer access to one. Requests to your exchange are signed on your device and go from your device straight to the exchange. Logs are sanitised before they are written, so a key cannot leak into a diagnostic file either.

A read-only one. Every exchange setup screen in the app names the exact permissions to enable and tells you plainly not to enable Trade or Withdraw.

To be straight with you about how this works: Cursaris does not inspect what your key is allowed to do, so a key with trading permissions will function — the app simply never uses them. That is not a reason to hand it one. The principle is to never grant software a permission it does not need, and here it costs you nothing: if a key can only read, then a leaked key can only leak information. It cannot lose you money.

A short and deliberately precise list:

• Requests to your exchanges — signed with your key, initiated by you, sent straight to the exchange. This is your existing relationship with them; we are not in the middle of it.
• An anonymous push token — only if you switch on background alerts. The notification server stores nothing but an opaque Apple device token: no user ID, no email, no portfolio, no keys, nothing linkable to you. It watches public market data and pings devices when something big moves; your device then checks your rules locally. You can delete the token at any time in Settings → Data → Manage Data.
• Wallet addresses — only if you add on-chain wallets, sent to public blockchain nodes to read public balances.
• Webhook payloads — only if you configure a Trading Plan webhook, sent to the address you chose.
• Market and reference data requests — prices, indices and similar public numbers, fetched from your exchanges and from third-party data providers. Nothing personal is attached to these: they say what the data is, never who is asking. Your IP is visible to whichever host serves the request, as it is on any HTTPS request from any app.
• An optional data file for one of the analysis features, downloaded from a GitHub-hosted address — only if you switch that feature on. The app asks first, and tells you plainly that your IP is visible to the host while it downloads.

Your positions, trades, balances and calculations are not on that list, and that is the point. They never leave the device. The app contains no third-party analytics SDK — no advertising, no trackers, no profiling, no data sale. Of the items above, the push token, the wallet addresses, the webhooks and the optional data file are each opt-in and each individually revocable; the exchange requests and the market-data lookups are simply the app doing the job you installed it for.

Yes, and the free tier is meant to be genuinely usable rather than a demo: unlimited positions, unlimited trade history, unlimited DCA plans, unlimited in-app alerts, and two connected exchanges. Your own coins are never hidden from you.

The standard monthly and yearly plans come with a 7-day free trial. Two caveats we would rather state than let you discover at the till: the limited early-bird plans are sold without a trial, and Apple grants the trial once per Apple ID across all Cursaris plans — so if you have already used it once, a later plan starts billing straight away. The paywall shows which offer applies to you before you confirm anything.

Prices are shown on the App Store listing and on the paywall inside the app — check there rather than trusting a number written on a website, because pricing varies by region and currency and changes over time.

Through Apple, not through us. Every Cursaris subscription is billed by Apple, which means Apple is also the only party that can cancel it — we have no ability to cancel on your behalf and cannot see your billing at all.

1. iPhone or iPad: Settings → tap your name at the top → Subscriptions → Cursaris → Cancel Subscription.
2. Mac: App Store → click your name in the sidebar → Account Settings → Subscriptions → Manage.

Cancel at least 24 hours before the renewal date, or that period will bill. You keep access until the period you already paid for runs out. Cancelling during the trial stops it converting and costs you nothing.

Refunds are Apple’s to give — your payment never reaches us directly, so we cannot issue one. Request it at reportaproblem.apple.com with the Apple ID that bought the subscription.

If you are asking for a refund because something is broken, please tell us anyway. We cannot process the refund, but we can fix the app.

Settings → Data → Export. You get the whole database as JSON: machine-readable, complete, and yours. That covers your right of access and your right to data portability under GDPR (Articles 15 and 20), and it doubles as a plain sensible backup.

One caveat we would rather state than bury: the export file is not encrypted, and it contains your portfolio. You choose where it lands — put it somewhere you would be comfortable keeping a bank statement.

Settings → Data → Manage Data, and it is granular on purpose — erasure should not be all-or-nothing:

• Individual exchange credentials, removed from the Keychain one exchange at a time.
• Individual on-chain wallets, with their snapshots.
• Trade history older than a retention window you pick.
• Server data — removes your push token from the notification server and stops background alerts.
• Factory Reset — wipes everything: all Keychain credentials, every position, trade, wallet, plan and snapshot, and it unregisters your push token on the way out.

If you are uninstalling and want to be thorough, run Factory Reset first. Deleting the app removes its local database, but Factory Reset is what guarantees the Keychain entries are gone and the push token is deregistered from the server rather than aging out.

The data controller is Alexander Uskov, the individual developer of Cursaris. Given that essentially all processing happens on your own device, most rights are exercised directly in the app rather than by writing to us:

• Access and portability — Settings → Data → Export.
• Rectification — edit any position, trade or wallet in the app.
• Erasure — Settings → Data → Manage Data, per item or Factory Reset.
• Restriction — disable any exchange, wallet or automated feature.
• Withdrawal of consent — switch off background notifications or any consent-gated feature at any time in Consent Management.
• Complaint — you can lodge one with your national supervisory authority; the EU list is at edpb.europa.eu.

The full detail, including the CCPA/CPRA and LGPD appendices, is in the privacy policy — which is the same text as the one inside the app.

Email support@cursaris.app. To get a useful answer on the first reply rather than the third, include:

• The app version (Settings → About) and your iOS, iPadOS or macOS version.
• Which exchange, if it is a sync or connection problem.
• What you expected to happen, and what happened instead.
• A screenshot, if it is something visual. Crop out anything you would rather not share.

Diagnostic logs can be exported from the app and are sanitised — keys, secrets and passwords are masked before anything is written to disk. Attach them if a bug is hard to describe.

No. It is not us, and it never will be. We will never ask for an API key, a secret, a passphrase, a seed phrase or a password — not by email, not in the app, not anywhere. No genuine support request needs any of them, and there is nothing we could even do with them.

If you have already sent a key to someone, revoke it on the exchange right now, before you do anything else. Then, if you like, tell us what happened — it helps us warn others.