Privacy Policy — LogIn — Trading Journal ======================================== LogIn — Trading Journal ("LogIn", "the app") is a trading journal and discipline coach. It is local-first: your journal is created and stored on your device, and the app is fully usable without creating an account. LogIn does not execute trades, hold funds, or move money. It records and analyses trades you have already taken. IF YOU DO NOT SIGN IN --------------------- Your trades, notes, emotions, plans, trading rules, streaks, discipline scores, companion progress, and settings stay in a database on your device only. Nothing is uploaded, and we cannot see any of it. Deleting the app deletes this data. This on-device database is protected by your operating system's app sandbox and by whatever device-level encryption you have enabled (screen lock / full-disk encryption). LogIn does not add its own separate encryption layer on top of the local file, so a device without a screen lock offers less protection. IF YOU DO SIGN IN — YOUR JOURNAL IS UPLOADED -------------------------------------------- Signing in turns on cloud sync. From that point, the following are copied to our servers (Supabase) so your journal survives a lost or replaced phone: your trading accounts, trades (symbol, asset type, buy/sell side, position size, entry and exit prices, fees, risk amount and resulting profit/loss), tags, trade legs, trade screenshots you attach, daily notes, and your written plan, review and rule-adherence entries. This is financial information about your trading activity. We treat it as sensitive. It is transmitted over HTTPS/TLS and is encrypted at rest by our infrastructure provider. It is stored under your user ID and is protected by row-level security so that other users cannot read it. We do not sell it, share it for advertising, or use it to train models. You can remove it at any time by deleting your account (see below), and you can avoid uploading it entirely by simply not signing in. OTHER DATA WE COLLECT IF YOU SIGN IN ------------------------------------ - Account: your email address and a user ID. You can create this either with an email and password, or via Google Sign-In — both are managed for us by Supabase (our backend provider), which handles and stores any password; we never see it in plain text. Used for referral rewards, subscription status, and optional cloud features. - Purchases: subscription/entitlement status is processed by RevenueCat and Google Play. We store the resulting tier (e.g. Premium). We never see your payment details. - Referrals: your referral code and redemption events. - Affiliate programme (opt-in): if you join it, we store your affiliate status and records of conversions attributed to you. - Leaderboard (opt-in): if you join the verified leaderboard, we store your submitted score metrics and league placement. - Broker sync (opt-in): if you connect a broker account we store the platform, server name, account number, and connection state. Your broker password is never stored on our servers — it is passed once to MetaApi (our execution-data provider) to provision the connection, and only the resulting connection ID is kept. Imported trade history is delivered to your device. - AI coach & screenshot scan (opt-in; a limited number of free uses each month, more on paid tiers): when you use these, the data needed to answer leaves your device and is sent to Anthropic (the Claude API), acting as our service provider under our instructions. For the AI coach this is your aggregated trading statistics; for the screenshot scan this is the trade screenshot image you choose to scan. By default, Anthropic does not use API data like this to train its models. We do not store the submitted image after the scan completes. WHAT WE DO NOT DO ----------------- - No advertising, no ad SDKs, no tracking across apps. - No analytics SDKs; no sale or sharing of personal data. - No storage of broker passwords or payment card details. WHO WE SHARE DATA WITH ---------------------- We do not sell your data and we do not share it for advertising. We use a small number of service providers who process data on our instructions: Supabase (database, authentication and cloud sync hosting), Google Play and RevenueCat (purchase and subscription status — neither passes us your payment card details), MetaApi (optional broker connection, if you use it), and Anthropic (optional AI coach and screenshot scan, as described above). SECURITY & RETENTION -------------------- All communication between the app and our servers is encrypted in transit using HTTPS/TLS. Data stored on our servers is encrypted at rest by our infrastructure provider and is isolated per user by row-level security. Data on your device relies on your operating system's app sandbox and your own device encryption — LogIn does not separately encrypt the local database file. Cloud data is kept while your account exists and is deleted when you delete your account. Local data stays on your device until you delete the app or clear its data. DELETING YOUR ACCOUNT AND DATA ------------------------------ In the app: Settings → Account → Delete account permanently removes your cloud account and all associated server data. See account deletion (https://gkqxforuwgyymryvfobz.supabase.co/functions/v1/legal/delete-account) for details, or email logintradepro@gmail.com. A paid subscription is billed by Google Play, not by us. Deleting your account does NOT cancel it — cancel separately in Google Play, or you will be charged again. CHILDREN -------- LogIn is intended for users 18+ and is not directed at children. CHANGES ------- We will update this page if our practices change; material changes will be noted in the app. ------------------------------------------------------------------------------ Effective July 29, 2026 · Contact: logintradepro@gmail.com