Privacy Policy

Last updated: 2026-07-25

This policy describes what data TradeYar collects, where it goes, and how you can control or delete it. Every statement reflects what the code actually does.

What we store (server-side)

The following data is stored in Supabase (hosted PostgreSQL):

Your trades and their contents — including free-text notes, reviews, tagged emotions, behaviours, and any images you attach.
Trading account configuration — name, broker, platform, currency, balance, and rules you write.
Billing status — subscription tier and current period end.
AI Coach Memory — the free-text context you write in Settings to describe your trading style. Stored verbatim.
Usage events — records of which features you use and when (for example, completing an import or viewing a page), tied to your user ID. Used only to improve the product. No third-party tool receives this data.

What stays on your device

Settings, notebook entries, chart drawings, trade screenshots, cached price bars, and cached AI responses are stored in your browser (localStorage and IndexedDB). They are not uploaded to our servers.

Authentication

TradeYar uses no third-party trackers and no tracking scripts of any kind.

AI processing

When you use the AI Coach or AI trade review, aggregated trading statistics are sent from our server to OpenRouter, which routes them to a model provider. No account identifier is included — no email address, no user ID, no account name, and no broker name reaches the AI provider.

One caveat: the free-text AI Coach Memory you write in Settings is appended to the prompt. If you include personal details in that text, they will be sent.

Providers are configured not to use this data for training or make it public.

Market data

Price lookups send only a symbol and a timeframe to market data providers (Yahoo Finance, TwelveData, Dukascopy). No user data is included in these requests.

Payments

All payment processing is handled by Paddle, which acts as Merchant of Record. TradeYar never sees or stores your card details. Paddle’s own privacy policy governs information you provide during checkout.

Deletion

You can delete individual trades and trading accounts from within the app. All trades can be deleted at once from Settings.

Full account deletion is self-service: Settings → Delete Account. When you confirm:

Your active subscription is cancelled (takes effect at the end of the current billing period; no mid-period refund).
Your profile, trades, accounts, and AI Coach Memory are marked for permanent deletion from our servers in 30 days.
Your device data (settings, chart drawings, cached price bars, cached AI responses) is cleared from your browser immediately.
Your login session is revoked.

Data is permanently removed from our servers 30 days after you request deletion. To cancel the deletion within that window, email support@tradeyar.app. After 30 days the deletion is irreversible.

Export

Your trades can be exported to CSV or XLSX from the app at any time. This export covers trade records; it does not include screenshots, chart drawings, or AI Coach Memory.

Legal basis (GDPR)

Where the General Data Protection Regulation applies, TradeYar relies on the following lawful bases:

Performance of a contract — processing your trades, accounts, and billing status is necessary to provide the service.
Legitimate interests — protecting the security and integrity of the service and preventing fraud.
Legal obligation — where applicable law requires retention or disclosure of data.
Consent — the AI Coach Memory feature relies on your freely given consent; you can delete it at any time in Settings.
Vital interests — not generally relied upon; noted for completeness.

Retention

Your data is kept for as long as your account exists. When you request account deletion, your personal data is permanently removed from our servers within 30 days. Some data may be retained briefly by Paddle for billing and tax compliance.

Your rights (EEA and UK)

If you are located in the EEA or the UK you have the right to:

Access the personal data we hold about you.
Correction of inaccurate or incomplete data.
Deletion of your data.
Portability — receive a copy of your data in a machine-readable format.
Objection to processing based on legitimate interests.
Restriction of processing in certain circumstances.
Withdrawal of consent where processing is based on consent.

To exercise any of these rights, email support@tradeyar.app. You also have the right to lodge a complaint with your national supervisory authority.

International transfers

The database (Supabase) is hosted in Germany within the EEA. OpenRouter and Paddle operate outside the EEA; transfers to them rely on Standard Contractual Clauses as the applicable transfer mechanism.

US state privacy rights

Residents of California and other US states with applicable privacy laws have the right to access, delete, and correct their personal information. TradeYar does not sell personal information and does not share it for targeting or profiling purposes. To exercise these rights, email support@tradeyar.app.