Privacy Policy

Last updated: October 2026

Draft template. Replace the items in [square brackets] with your real details and have a lawyer review it before you start charging customers.

What we collect

• Account data: your email address and an encrypted password (or Google sign-in identifier).
• Journal data: the trades, notes, accounts and settings you enter or import.
• Payment data: handled entirely by our payment provider [Paddle / Lemon Squeezy]. We never see or store your card number; we only receive your subscription status.
• Basic technical data such as IP address and browser type in server logs, for security.

How we use it

To run your account, save and show your journal, process subscriptions, send essential emails (confirmation, password reset, billing), and keep the service secure. We do not sell your data and do not use it for advertising.

Where it is stored

Your data is stored with our infrastructure providers: Supabase (database and login) and Cloudflare/[hosting provider] (website delivery). Data may be processed in the regions they operate.

Your rights

You can view, export, correct or delete your data at any time. To delete your account and all stored data, email [support email]. If you are in the EU/UK you also have rights under GDPR, including access, portability and complaint to your regulator.

Cookies and local storage

We use browser storage only to keep you signed in and to remember your preferences. We do not use advertising cookies.

Retention

We keep your data while your account is active and delete it within [30] days after you request deletion.

Contact

[Your name or company], [country]. Email: [support email].