Privacy Policy
Last updated: 9 September 2026.
1. The short version
We collect as little as possible: your email and subscription status. We do NOT put personal information in signals, logs or the public scorecard. No API keys or secrets ever appear in code shipped to your browser. Your data belongs to you.
2. What we collect
Account data: the email address you sign up with, your display name (optional), and your subscription tier. Usage data: aggregate page views and signal views, anonymized, to improve the product. Payment data: never stored by us — handled entirely by our payment provider, Airwallex (see section 5).
3. What we do NOT collect or publish
We do not require your real name, phone number, broker account, portfolio, or financial details. The public scorecard and signal log contain only ticker symbols, dates, prices and algorithm names — no user identifiers. Our internal logs never pair your identity with your trading behaviour (we cannot see your trades at all).
4. How we protect data
All secrets (database passwords, API keys, payment-provider keys) live only in server environment variables — never in client code, never in repositories. Your account data is stored in Supabase with Row-Level Security enabled on every table, so each user can only read their own rows. Access to production data is limited to the service operators.
5. Third parties
Supabase (authentication and database — data stored in the EU or US region you choose), Airwallex (payments — they see your billing details, we see only your subscription status), and Vercel (hosting — standard server logs, IP addresses for security). Each processes data under their own privacy policies and our instructions.
6. Retention and deletion
We keep your account data while your account is active. Delete your account from Settings and we remove your personal data within 30 days. Anonymized aggregate statistics (like scorecard win rates) may be retained because they contain no personal data.
7. Cookies and analytics
We use only essential cookies for login sessions. We may use privacy-respecting, anonymized analytics to understand which pages are useful. No cross-site advertising trackers.
8. Your rights
You may request a copy of your data, correct it, or ask us to delete it, at any time via Settings or by emailing coachdaniel.12168@gmail.com. We respond within 30 days.
9. Children
The service is for adults 18 and over. We do not knowingly collect data from minors.
10. Changes and contact
We will post any changes to this policy on this page with a new date. Questions? Email coachdaniel.12168@gmail.com.