Privacy Policy

1. Controller

The controller within the meaning of the GDPR for the processing of personal data is:

Nico Anderstiegen
41372 Niederkrüchten
Germany
Email: tradescope@web.de

2. Data We Collect and Process

• Master data: Email address and (voluntarily) name on registration, plus role (user/admin).
• Content data: Trade information you enter (symbol, prices, P&L, notes, screenshots), psychology logs, playbooks, plans and notes.
• Usage data: Login data, timestamps and technical metadata to maintain and secure operations.
• Broker import files: Processed temporarily to extract trade data and not stored permanently.
• No payment data: Since core features are free, no credit card or banking data is collected.

3. Server Log Files

When accessing the App, the hosting provider automatically collects and stores technical data in server log files. This includes:

• Browser type and version used
• The operating system of the accessing device
• Date and time of access
• The previously visited page (referrer URL)
• The IP address of the requesting party (truncated for pseudonymization)

This data is processed to ensure smooth operation, security, and troubleshooting (Art. 6(1)(f) GDPR). The log files are automatically deleted after a maximum of 14 days.

4. Purposes and Legal Bases of Processing

• Contract performance (Art. 6(1)(b) GDPR): Providing trading journal functions, storing and managing your content.
• Legitimate interests (Art. 6(1)(f) GDPR): Improving the App, security, stability and bug fixing.
• Legal obligation (Art. 6(1)(c) GDPR): Retention of data required to fulfill legal obligations.
• Consent (Art. 6(1)(a) GDPR): Only where expressly obtained (e.g. for optional features).

5. AI Processing

For the AI coach and analysis functions, your content is processed to generate personalized evaluations. External AI providers are used (see section 7). Pure account data is not transmitted to AI providers; processing serves the function you requested (Art. 6(1)(b) and (f) GDPR).

The AI providers process the transmitted data exclusively to provide the requested service and do not store it permanently for other purposes. You can use the App without the AI features at any time by simply not making any requests.

6. Data Retention and Deletion Periods

Your data is stored for the duration of the usage relationship. After termination, all your data is deleted within 30 days, unless legal retention obligations require otherwise. Broker import files are discarded immediately after extraction.

You can export your data as CSV/JSON at any time (Data Management) and delete your account including all data at any time (Settings → Account).

7. Sharing with Third Parties and Processors

We do not share your data with third parties for commercial purposes. The following service providers (processors under Art. 28 GDPR) are used:

• Base44 (hosting, database, authentication): Storage and processing to provide the App.
• AI providers: Processing for AI features; only the content necessary for the respective request is transmitted.
• Email delivery: To handle contact requests and account notifications to your specified address.

7a. Registration, Social Login and Consent Records

At registration we store the time and version of the Terms, Risk Disclosure and age confirmation you accepted, to meet our documentation obligations (Art. 6(1)(b), (c) and (f) GDPR).

If you sign in with Google, Microsoft, Apple or Facebook, we receive your email address and possibly your name from that provider. The provider's privacy policy applies to its processing.

7b. Market Data

For the Backtest Studio, historical price data is retrieved from an external market data provider (Twelve Data). Only the symbol and time range are transmitted, no personal data.

8. Transfers to Third Countries

A transfer of personal data to countries outside the EU/EEA (third countries) only takes place where necessary for providing the service, and subject to appropriate safeguards (e.g. EU Commission Standard Contractual Clauses) or a GDPR exception.

9. Data Security

We apply technical and organizational measures under Art. 32 GDPR to protect your data, including SSL/TLS encryption for transfers, access control and regular security reviews. Complete protection against unauthorized access cannot, however, be guaranteed.

10. Cookies and Local Storage

The App does not use third-party tracking or advertising cookies. Only local browser storage (localStorage) is used for user preferences (e.g. language, currency, theme, feature usage limits). This data stays on your device and can be deleted in your browser at any time.

11. Your Rights as a Data Subject

• Access (Art. 15 GDPR): You can request information about your stored data.
• Rectification (Art. 16 GDPR): Inaccurate data can be corrected (partly yourself in settings).
• Erasure (Art. 17 GDPR): You can request deletion of your data or account.
• Restriction (Art. 18 GDPR): You can request restriction of processing.
• Data portability (Art. 20 GDPR): You can receive your data in a structured format (CSV/JSON).
• Objection (Art. 21 GDPR): You can object to processing based on legitimate interest.
• Withdrawal of consent (Art. 7(3) GDPR): Any consent given can be withdrawn at any time.
• Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de.

12. Minors

The App is not intended for persons under 18 years of age. Data from minors is not knowingly collected; should we become aware of such data, it will be deleted immediately.

13. Changes to This Policy

We may update this privacy policy to reflect changes in law or services. Material changes will be communicated by email or a notice in the App.

14. Contact

For privacy inquiries or to exercise your rights, contact the details in section 1 (email: tradescope@web.de).