Privacy Policy

1. What data we collect and why

We collect only the data needed to run the app and give you useful trading analytics. This includes:

• Account information: Your email address and password (handled securely by our auth provider) so you can sign in and keep your data synced across devices.
• Trade records: Trades you manually enter or save — entries, exits, profit/loss, timestamps, notes, and checklist selections. This is stored so you can review your trading history, track your account balance, and see personalized analytics like win rate and best/worst sessions.
• Trade screenshots: Photos or screenshots you upload before/after a trade (stored in cloud object storage) so you can review them later in your journal.
• Market chart data: Candlestick and price data fetched from public exchange APIs (such as Binance and OKX) for the symbols you choose. This is public market data, not personal data, and is not tied to you.
• Standard technical data: IP address, browser/device type, and similar information automatically transmitted when you use any web-based app. This is used for security and basic operation only.

2. How data is stored and protected

Your data is stored via Supabase, a backend infrastructure provider. Supabase stores data securely and uses row-level access control, which means only your account can read or modify your own rows. We do not access your trade data, screenshots, or notes except as needed to provide the service.

3. MCP integration (optional)

The app optionally supports an MCP (Model Context Protocol) integration. If you choose to enable it and authorize an external MCP client, that client will be able to access your trade data through the permissions you grant. This is entirely opt-in and user-controlled. We do not share your data with any MCP client without your explicit authorization.

4. No ads and no data sales

We do not show ads, use advertising trackers, or sell your personal data to third parties. We do not use analytics trackers beyond what is needed for basic app function.

5. Deleting your account and data

You can delete your account and all associated data at any time from Settings → Delete Account. This permanently removes:

• Your uploaded trade images and screenshots
• Your trade records, customizations, and links
• Your role assignments and authentication record

This deletion is real and irreversible. Once completed, your data cannot be recovered.

6. Data retention

We keep your data for as long as your account is active. If you delete your account, your data is removed as described above. Backup systems may retain copies for a short period, but deleted data is not restored after an account deletion request.

7. Your rights

You have the right to access, export, or delete your own data. In the app, you can view your trades and delete your account at any time. For other requests, contact us at the email address below.

8. Children's privacy

This app is not directed at children under 13 (or 16 where applicable). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and, where appropriate, notify you in the app.

10. Contact us

For privacy questions or data requests, please contact us at tradebytrade25@gmail.com.

Appendix A — App Store Connect "App Privacy" mapping

This appendix cross-references the data categories described above against Apple's App Store Connect "App Privacy" questionnaire categories, so the two remain consistent.

• Contact Info → Email Address: Collected for account creation and sign-in (Section 1, "Account information"). Linked to the user. Used for App Functionality and Account Management. Not used for tracking.
• User Content → Other User Content: Trade records, notes, checklist selections, and uploaded trade screenshots/photos (Section 1, "Trade records" and "Trade screenshots"). Linked to the user. Used for App Functionality. Not used for tracking.
• Identifiers → User ID: An internal account identifier is used to scope your data (row-level access control, Section 2). Linked to the user. Used for App Functionality. Not used for tracking.
• Diagnostics → Crash Data / Performance Data: Standard technical data such as IP address and device/browser type transmitted when using any web-based app (Section 1, "Standard technical data"). Used for App Functionality and security. Not used for tracking.

Categories we do not collect: Health & Fitness, Financial Info (payment card numbers), Location, Sensitive Info, Contacts, Browsing History, Search History, Audio Data, Purchases, Advertising Data. We do not use any data for Third-Party Advertising, Developer's Advertising or Marketing, or Analytics beyond the App Functionality items listed above. No data is used for tracking across apps or websites owned by other companies.