TradBudi — Privacy Policy (DRAFT)

Draft for review. Fill in the [brackets] and have a lawyer check it before launch.

Last updated: [date]

Who we are. TradBudi ("we") is run by [your name / company], [address], contact: hello@tradbudi.com.

What we collect

Account: your email address and a password (stored hashed by our login provider, never readable by us).
Trading data you add or connect: trades (symbol, direction, size, entry/exit price, profit, time), open positions, journal entries, strategies, plans, notes, screenshots/pictures you attach.
Wellbeing notes: feelings and warnings you log inside the app.
Usage counts: how many AI requests you make per day (to apply fair-use limits).
MT5 connection: if you install the TradeBuddySync helper, it sends your closed trades and open positions. It is read-only: it cannot place or change trades.

We do not collect your broker password, MT5 login password, or payment card details (payments, if any, are handled by Apple or another payment provider).

How we use it

To run the app, sync your data between your devices, show your journal and statistics, and provide AI features (summaries, coaching text, voice). We do not sell your data and do not use it for advertising.

Who processes it

Supabase (database, login, file storage; project region: Europe).
Google Gemini processes your voice and the questions you ask Loco, so he can answer.
Google (Gemini) and OpenAI receive the text, audio or context needed for an AI request you trigger. Requests go through our server, so the AI keys are never on your device. Check their policies for how they handle request data.
Nobody else gets your data unless the law requires it.

Where it is stored and for how long

Your online data stays until you delete your account. Copies kept on your own devices stay there until you remove them.

Your rights

You can see, correct and export your data (ask us), and you can delete everything yourself: Settings → Account → Delete account (Mac and iPhone). It erases your login, all online rows and your pictures. If you are in the EU/UK you also have the rights of access, rectification, erasure, restriction, portability and objection under GDPR; contact hello@tradbudi.com or your data-protection authority.

Security

Each user can read only their own rows (row-level security). Secret keys live only on our server. No system is perfectly secure; keep your password private.

Children

The app is not for anyone under 18.

Changes

We will update this page and the date above when this policy changes.