Privacy Policy — Tradesober

This is a thorough working draft, not a guarantee of legal compliance. Privacy law (UK GDPR, and potentially other regions' laws depending on who signs up) is genuinely complex and fact-specific. Have a solicitor review this before you rely on it publicly — particularly given Tradesober handles sensitive psychological journal content and payment data.

1. Who we are

Tradesober is operated by Alexander Frankham ("we", "us", "our"), based in the United Kingdom. For the purposes of UK data protection law, Alexander Frankham is the data controller for the personal data described in this policy. You can reach us at tradesober.support.help@gmail.com with any question or request relating to your data.

2. What data we collect

Category	Examples	Why we collect it
Account data	Email address, password (encrypted)	To create and secure your account
Profile data	Your written trading reason, your rule(s), account size/balance/risk/firm if you enter them	To power the app's core check-in and eval features
Journal & Notebook content	Trade journal entries, chart screenshots, voice notes, Notebook writing, psychology notes	To provide the journaling and reflection features you're using the app for
Check-in data	Daily kept/broke status, streak history, psych ratings 1–10	To track your streak and show your history/calendar/stats
AI feedback	The text you submit for AI review, and the response returned	To provide the Plus AI feedback feature; stored so you can see past feedback
Payment data	Subscription status, plan, billing period	To know what you're entitled to access. We never see or store your card details — Lemon Squeezy handles that entirely
Technical data	Login sessions, general usage of the app	To keep you logged in and the app functioning

3. Our legal basis for processing your data

Under UK GDPR, we rely on the following legal bases:

Contract — processing your account, journal, and subscription data is necessary to provide the Service you've signed up for.
Consent — where you choose to use optional features (like requesting AI feedback, or enabling browser notifications), we rely on your active choice to use that feature.
Legitimate interests — for basic security, fraud prevention, and keeping the Service running reliably.

We do not process any of your data for advertising, and we never sell your data to anyone.

4. Who we share data with

We use a small number of third-party services to run Tradesober. Each only receives the specific data it needs to do its job:

Supabase (database and authentication) — stores all your account, journal, and check-in data securely.
Anthropic (AI provider) — receives the text of a Notebook entry only when you actively click "Get AI feedback." It is not sent your other data, and is not used to train Anthropic's models on your data through this integration.
Lemon Squeezy (payments) — handles your subscription and billing as an independent data controller for payment information. They receive your email and payment details directly; we never see or store your card number.
Netlify (hosting) — serves the app and processes requests as part of normal web hosting.

We don't share your data with anyone else, and we don't sell it. Some of these providers may process data outside the UK/EEA (for example, in the United States); where that happens, they do so under their own standard contractual safeguards.

5. How long we keep your data

We keep your account and journal data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're required to keep certain records for legal or accounting purposes (for example, payment records).

6. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your data ("right to be forgotten")
Export your data in a portable format
Object to or restrict certain processing
Withdraw consent at any time for anything based on consent

Many of these you can do yourself directly in the app — Settings includes options to clear your data or delete individual entries. For anything else, email tradesober.support.help@gmail.com and we'll respond within 30 days. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.

7. Security

Your data is protected by row-level security in our database, meaning your account's data is only ever accessible to you, never to other users. Passwords are encrypted and we never see them in plain text. No system is perfectly secure, but we take reasonable technical measures to protect your information.

8. Children

Tradesober is not intended for anyone under 18. We don't knowingly collect data from anyone under 18, and accounts found to belong to a minor will be closed.

9. Cookies

Tradesober uses only the minimum technical cookies/local session data needed to keep you logged in. We don't use advertising or tracking cookies.

10. Changes to this policy

We may update this policy as the app evolves. Material changes will be flagged in the app or by email. The "Last updated" date at the top always reflects the current version.

11. Contact

Questions, requests, or concerns about your data: tradesober.support.help@gmail.com.