Privacy Policy

Data we collect

Account data: your email address and display name, collected when you sign up (via email/password or Google sign-in).
Journal data: the trades, diary entries, strategies, trading accounts, and capital adjustments you enter or import. This is the core content of the app and is only ever visible to you.
Billing data: if you upgrade to Pro, Stripe collects and stores your payment details directly — we never see or store your card number. We retain only your Stripe customer/subscription IDs and subscription status.
Error and security event data: if the app errors out or rejects an unauthorized request, technical details of that event (not your journal content) may be sent to our error-monitoring provider, Sentry.
We do not collect analytics, advertising identifiers, or any data beyond what's needed to run the app, keep it reliable, and process payments.

To run the app: authenticate you, store and display your journal data, and compute the derived metrics (returns, drawdown, benchmark comparisons, and so on) you see in the dashboard.
To process payments: Stripe Checkout and the Billing Portal handle upgrades, renewals, and cancellations on our behalf.
To communicate with you: transactional email only — password resets, email-change confirmations, and account-related notices. We don't send marketing email.

Supabase hosts our database, authentication, and file storage. Your journal data lives in Supabase's infrastructure, scoped to your account by row-level security so no other user (or, outside of a signed webhook request, our own application code) can read it.
Stripe processes payments and stores your billing/card details under its own privacy policy. We never receive or store full card numbers.
Sentry receives error reports and security-relevant event metadata (e.g. failed permission checks) when something goes wrong, so we can detect and fix issues. It does not receive your trade, diary, or strategy content.
We do not sell your data, and we do not share it with any other third party beyond those listed here.

We use a single session cookie (set by Supabase Auth) to keep you signed in. It's not used for advertising or cross-site tracking, and we don't use any third-party analytics or ad-tracking cookies.

Export or review your data: everything you've entered is visible in the app itself — the Journal, Diary, Strategies, and Portfolio pages.
Delete your data: Settings → Account lets you permanently delete your account and all associated data (trades, diary entries, strategies, accounts, and uploaded chart images) in one action. This is irreversible.
Reset without deleting: Settings → General also offers a "reset all data" option that clears your journal content while keeping your account and login.
Questions about your data or this policy: contact us at [email protected].

If we make a material change to how we handle your data, we'll update this page and change the date below.