Privacy Policy

The Trader Journal ("we", "us", "the app") is a mobile trading journal that connects to your brokerage account, imports your trades, and helps you analyse your performance. This policy describes what data we collect, how we use it, and the choices you have.

1. What we collect

Account information

When you create an account we collect your email address and (if provided) your name. If you sign in with Apple or Google, we receive the email associated with that identity and, on first sign-in only, your name.

Trade data from your broker

After you connect a brokerage via our data partner SnapTrade, we receive read-only information about your executed trades: symbol, side, quantity, entry and exit prices, timestamps, fees, and the name of the account the trade belongs to. We do not have access to your broker username, password, or the ability to place orders.

Content you create in the app

Notes you attach to trades or calendar days, tags and playbook setups, trade grades, and similar annotations are stored against your account.

Subscription and billing

Payments are processed entirely by Apple (App Store) or Google (Google Play). We do not see or store your card details. We do receive subscription status events (active, cancelled, renewed, refunded) from our subscription management partner, RevenueCat.

Device and usage information

We collect minimal technical information needed to operate the app: authentication tokens, device identifiers used by Apple/Google services, approximate timestamps of requests, and error diagnostics (crash stack traces, failed request logs). We do not use third-party behavioural analytics or advertising trackers.

2. How we use your data

• Run the product. We use your account data and trade history to render dashboards, calendar views, statistics, and playbooks.
• Authenticate you. Email addresses power sign-in, OTP delivery, and password reset flows.
• Deliver transactional email. We send verification codes, welcome messages, and security notifications (e.g. when your password changes) via our email partner Resend. We do not send marketing emails.
• Manage subscriptions. RevenueCat events tell us whether to grant or revoke Pro features.
• Keep the service secure. We use logs and rate limits to detect abuse and protect accounts.

3. Who we share data with

We share the minimum necessary data with the following service providers, each bound by contract to process data only on our instructions:

• Convex — backend infrastructure (database, authentication, API hosting).
• SnapTrade — brokerage connectivity. Your brokerage OAuth happens directly between you and SnapTrade; we never see your broker credentials.
• Resend — transactional email delivery.
• RevenueCat — subscription state management.
• Apple and Google — sign-in providers (when you use them) and payment processing via App Store / Google Play.

We do not sell your personal information. We do not share your trade history with advertisers, data brokers, or social platforms.

4. Data retention

We keep your account and trade data for as long as your account is active. If you cancel your subscription, your account is downgraded but your data is retained so you can resubscribe later without losing your history. If you delete your account, we remove your personal data and trades within 30 days, except where we are required to retain records for legal, accounting, or tax reasons (typically up to 7 years for billing-related records).

5. Your rights

You can:

• Access — view all trade data and account details inside the app.
• Edit — update your name, notes, grades, playbooks, and tags at any time.
• Disconnect a broker — remove a brokerage connection at any time from Settings.
• Delete your account — email support@thetraderjournal.app and we will remove your data within 30 days.
• Export — request a copy of your data by emailing the same address.

If you are a resident of the EU, UK, California, or another jurisdiction that grants additional privacy rights (GDPR, UK GDPR, CCPA, etc.), those rights apply to you and you can exercise them via the same support address.

6. Security

All data in transit is encrypted with TLS 1.2 or higher. Authentication tokens are stored in the device's secure keychain/keystore. Passwords, when used, are hashed with industry- standard algorithms; we never store them in plain text. Brokerage OAuth tokens are kept encrypted at rest on SnapTrade's infrastructure and rotated according to each broker's policy.

No system is perfectly secure. If you believe your account has been compromised, email us immediately at support@thetraderjournal.app.

7. Children

The Trader Journal is not intended for users under the age of 18. We do not knowingly collect information from children. If you believe a minor has created an account, contact us and we will remove it.

8. International transfers

The Trader Journal is operated from Canada. Data may be processed and stored on servers located in the United States and other countries where our service providers operate. By using the app you consent to such transfers.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email to active users at least 30 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

10. Contact us

Questions or requests? Email support@thetraderjournal.app.