Privacy Policy

🔒 Data Collection

Account Information

When you create a TradeMetrix account, we collect:

• Email address and chosen username
• Device information (iOS version, device model)
• App usage preferences and settings
• Subscription status and billing information (processed by Apple)

Trading Data

To provide our core trading analytics service, we store:

• Trade details (symbols, prices, quantities, dates)
• Profit/loss calculations and performance metrics
• Journal entries, notes, and uploaded screenshots
• Custom tags, categories, and trading strategies
• Chart annotations and technical analysis notes

Broker Integration Data

When you connect your brokerage accounts via API:

• Read-only access to trade history and positions
• Account balances and portfolio information
• Real-time position updates and market data
• API credentials (encrypted and stored securely)

Usage Analytics

We collect anonymized data to improve our service:

• Feature usage patterns and app performance metrics
• Crash reports and error logs (no personal data included)
• Time spent in different app sections
• General market data preferences and settings

🎯 How We Use Your Data

Core App Functionality

• Trading Analytics: Calculate P&L, win rates, and performance metrics
• Journal Management: Store and organize your trading notes and screenshots
• Data Synchronization: Keep your data synced across all your devices
• Broker Integration: Automatically import and update trade data
• Reporting: Generate comprehensive performance reports and exports

Service Enhancement

• Improve app performance and fix bugs based on usage patterns
• Develop new features requested by our trading community
• Optimize real-time data processing and chart rendering
• Enhance security measures and fraud prevention

Communication

• Send important service updates and security notifications
• Provide customer support and technical assistance
• Share new feature announcements (you can opt out)
• Process subscription billing through Apple's App Store

💰 Financial Data Handling

Sensitive Financial Information

TradeMetrix handles sensitive financial data with the highest security standards:

• Trade Data: All trading information is encrypted at rest and in transit
• Account Balances: Balance information is used only for portfolio analytics
• P&L Calculations: Profit/loss data remains private to your account
• Performance Metrics: Win rates and statistics are for your use only

Broker API Security

When connecting to broker APIs:

• We use read-only API access with minimal required permissions
• API tokens are encrypted using bank-level AES-256 encryption
• Connections are monitored for unusual activity
• You can revoke API access at any time through your broker

Data Retention for Financial Records

• Trading data is retained for tax reporting purposes (7 years)
• You can export all data before account deletion
• Deleted accounts have all personal identifiers removed
• Anonymized performance data may be retained for service improvement

🤝 Third-party Services

Data Sharing with Service Providers

We share limited data with trusted partners to provide our services:

Broker APIs

• ThinkorSwim, WeBull, and other brokers: Secure read-only access for trade data import
• Market Data Providers: Real-time quotes and economic calendar information
• Financial Data Vendors: Historical market data for chart analysis

Infrastructure Partners

• Cloud Storage (AWS/iCloud): Encrypted data backup and synchronization
• Analytics Services: Anonymized usage data for app performance monitoring
• Payment Processing: Subscription billing handled by Apple App Store

What We DON'T Share

• Individual trading strategies or performance data
• Personal financial information with advertisers
• Trading journal entries or private notes
• Broker credentials or account access information

🛡️ Security Measures

Data Encryption

• At Rest: All data stored using AES-256 encryption
• In Transit: TLS 1.3 encryption for all data transmission
• API Credentials: Encrypted separately with additional security layers
• Database Security: Encrypted databases with access logging

Access Controls

• Multi-factor authentication for all administrative access
• Role-based permissions with principle of least privilege
• Regular access reviews and automated deprovisioning
• Comprehensive audit logging of all data access

Infrastructure Security

• SOC 2 Type II compliant cloud infrastructure
• Regular penetration testing and vulnerability assessments
• Automated security monitoring and incident response
• Geographic data redundancy for disaster recovery

App-Level Security

• Biometric authentication support (Face ID, Touch ID)
• Automatic session timeout for inactive users
• Certificate pinning to prevent man-in-the-middle attacks
• Code obfuscation and anti-tampering measures

⚖️ Your Rights

Data Access and Control

• Access: View all personal and trading data we have about you
• Export: Download your trading data in CSV/PDF format
• Update: Modify account information and preferences anytime
• Delete: Remove specific trades or your entire account

Privacy Controls

• Control what data is shared with broker APIs
• Opt out of anonymized usage analytics
• Manage notification preferences
• Revoke broker API connections at any time

Data Portability

• Export trading journal entries with screenshots
• Download complete trade history with all calculations
• Transfer data to other analytics platforms
• Access historical performance reports

Account Deletion

When you delete your account:

• All personal identifiers are immediately removed
• Trading data can be exported before deletion
• Broker API connections are automatically revoked
• Anonymized analytics data may be retained for service improvement

🇪🇺 GDPR Compliance

Legal Basis for Processing

Under GDPR, we process your data based on:

• Contract Performance: Providing trading analytics services
• Legitimate Interest: Improving app performance and security
• Consent: Optional features like marketing communications
• Legal Obligation: Compliance with financial regulations

Enhanced Rights for EU Users

• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Delete personal data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Opt out of certain data processing activities
• Right to Data Portability: Transfer data to another service

International Data Transfers

For EU users, we ensure adequate protection through:

• Standard Contractual Clauses with all data processors
• Adequacy decisions for countries with equivalent protection
• Additional safeguards for transfers to third countries
• Regular compliance audits and assessments

Data Protection Officer

Our Data Protection Officer can be reached at: dpo@trademetrix.com

You also have the right to lodge a complaint with your local data protection authority.

👨‍👩‍👧‍👦 Age Requirements

TradeMetrix is designed for adults engaged in trading activities. We require users to be at least 18 years old due to:

• Legal requirements for trading and financial services
• Complexity of financial data and analytics
• Need for mature understanding of investment risks
• Compliance with financial regulations

We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us immediately at privacy@trademetrix.com.

📋 Policy Updates

We may update this privacy policy to reflect changes in our practices, services, or legal requirements. When we make significant changes:

• We'll notify you through the app and via email at least 30 days in advance
• Update the "Last Updated" date at the top of this policy
• Provide a summary of key changes affecting your privacy rights
• For material changes, we may request your renewed consent

We encourage you to review this policy periodically. Continued use of TradeMetrix after updates constitute acceptance of the revised policy.