Privacy Policy
Last updated: July 2026
1. What we collect
Your account email, the trades and journal entries you log or sync, your settings, and (optionally) a display name and profile photo you provide. Exchange API secrets are NOT collected — they stay on your device.
2. How it’s stored
Data is stored in Supabase and scoped to your account by row-level security, so only you can read or write your rows. Profile photos live in a private-per-user storage bucket. Traffic is encrypted in transit.
3. Exchange connections
Read-only API keys are kept in your browser’s local storage and used to sign requests that are proxied to the exchange. We never receive your API secret, and we request only read access — never trade or withdrawal permissions.
4. What we don’t do
We don’t sell your data, we don’t place trades on your behalf, and we don’t share your trading history with third parties for advertising. Aggregate, anonymized usage may be used to improve the product.
5. Your controls
You can edit or delete your journal entries, trades, and profile at any time, and request full account deletion. Deleting your account removes your rows and stored files.
6. Contact & changes
For privacy questions or a deletion request, reach out through the app. This policy may be updated as the product evolves; material changes will be announced in-app.