Is Kalshi safe to use?

Kalshi integrates 61 third-party SDKs spanning infrastructure, analytics, and payments. Its App Store privacy label declares cross-app tracking via Browsing History, Identifiers, Usage Data, and Other Data. It collects data linked to your identity including Financial Info, Contact Info, Browsing History, and Identifiers and 3 more categories. It includes 2 advertising or attribution SDKs. Whether this is acceptable depends on your personal privacy preferences.

What permissions does Kalshi need?

Kalshi requests 8 iOS permissions: App Tracking Transparency, Camera, Microphone, Contacts, Photo Library, Location (When In Use), Face ID, and Save to Photo Library.

What data does Kalshi collect?

According to its App Store privacy label, Kalshi declares cross-app tracking via Browsing History, Identifiers, Usage Data, and Other Data. It collects data linked to your identity including Financial Info, Contact Info, Browsing History, Identifiers, Usage Data, Diagnostics, and Other Data.

How many SDKs does Kalshi have?

Kalshi integrates 61 third-party SDKs. 2 for advertising, 9 for analytics, 8 for payments, 1 for customer support, 1 for social integration, 25 for infrastructure, and 6 for other.

Does Kalshi use Facebook tracking?

Yes. Kalshi includes 2 Facebook SDKs: Facebook AEM and Facebook SDK. These are used for ad measurement, attribution, and integration with Facebook's advertising platform (developers.facebook.com).

Does Kalshi use Google SDKs?

Yes. Kalshi includes 7 Google or Firebase SDKs: Firebase Cloud Messaging, Firebase Core, Google Sign-In, Firebase Core Internal, Firebase Installations, Google Data Transport, and Google Utilities. These are used for cloud infrastructure and services, not advertising.

Does Kalshi use App Tracking Transparency?

Yes. Kalshi requests the App Tracking Transparency permission, which means it asks for your consent to track your activity across other companies' apps and websites.

Does Kalshi access your location?

Yes. Kalshi requests location access. The developer states: "Need this to track your location".

Does Kalshi access your camera or microphone?

Kalshi requests access to both your camera and microphone. The developer says camera access is for "This application requires use of your camera in order to capture your sensitve documents for processing". Microphone access is for "This identifier is also used to collect personalized metrics". These permissions are only active when you grant them in iOS Settings.

Does Kalshi access your contacts?

Yes. Kalshi requests access to your contacts. The developer states: "Need it to show a list of contacts the user can choose to share a referral link".

Does Kalshi run in the background?

Yes. Kalshi registers 3 background modes, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to Kalshi?

Other finance apps include EarnIn , Albert , Allstate , Amex , Atlas , and Autopilot . Each app takes a different approach to finance and varies in its data collection and SDK usage.

Finance · Privacy report

Kalshi: Trade News & Sports

Free · ★4.7 · KalshiEX LLC

Is Kalshi safe?

It leans heavily on third-party trackers.

Our take. Kalshi is built with more third-party tracking code than 86% of the finance we have scanned.

Privacy footprint · vs 80 financeHeavy

Trackers from other companies11 · a lot

typical finance: 3.5

Data the app links to you7 types · some

typical finance: 6 · from its own privacy label

What it collects about you

Kalshi links 7 categories of your data to you.

From the developer's own App Store privacy label. These are the kinds of data Kalshi ties to your identity, and it also declares it shares data to track you across other apps.

Financial InfoContact InfoBrowsing HistoryIdentifiersUsage DataDiagnosticsOther Data

Who else is inside

It carries trackers from 5 companies.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🏢Monitoring SDKAnalytics

Crash and performance monitoring.

SDKs

🇺🇸MetaAdvertising

Facebook advertising SDKs, built to link app activity to Facebook and Instagram ad profiles.

SDKs

🇺🇸AmplitudeAnalytics

Product analytics, built to record detailed behaviour inside the app.

SDKs

🇺🇸GoogleAnalytics

Firebase, AdMob and Google analytics SDKs, built to record how you use the app and serve ads.

SDKs

🏢Other third partiesanalytics

A third-party SDK.

SDK

How it compares

Where it sits among finance.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one finance app. Kalshi sits to the right, carrying more third-party tracking than most.

Other signals

One more flag.

Each is a fact read straight from the app. The same checks run on every app we scan. Only the ones that apply here are shown.

It declares cross-app tracking

Its own App Store label says it tracks you across other companies apps and websites using your advertising identifier.

The evidence

What it's built from.

All 61 SDKs in the app, grouped by what they are for. 11 are third-party trackers.

2advertising

9analytics

2push & messaging

48standard libraries

11 of the 61 are third-party trackers. 2 are push-notification SDKs that deliver notifications, rather than tracking you across apps. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

Monitoring SDKAnalytics

Datadog Internal · Datadog · Datadog Logs · Datadog RUM

MetaAdvertising · USA

Facebook AEM · Facebook SDK

AmplitudeAnalytics · USA

Amplitude · Amplitude (Flutter)

GoogleAnalytics · USA

Google Analytics Connector · Firebase Core

Other third partiesanalytics

Sprig (UserLeap)

Push & messaging2 · notifications

Standard libraries48 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v9.9.48, 2026-04-01.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 80 finance in our corpus. Trackers: median 3.5. Data linked to you: median 6.