Rules worth being rigid about
Never share it, for any reason
Not with support, not for a verification step, not with a trading group. Anyone holding this key can move your funds.
Never paste it into a site you reached from a link
Type polycopy.app into the address bar yourself and check the domain before pasting anything.
Do not store it in plain text
If you keep a copy, keep it in a password manager. A notes app, a chat to yourself, and a screenshot in your photo roll are all readable by anything that gets into your device.
Treat a seed phrase request as an attack
Polycopy has no use for a seed phrase and will never ask for one.