Privacy Policy

TradeRegimen (“we,” “our,” or “us”) is operated by a sole proprietorship domiciled in Winterthur, Canton of Zurich, Switzerland. This Privacy Policy explains how we collect, use, and protect your information when you use the TradeRegimen mobile application, web app, and associated services (the “Service”).

The Service is offered only to users in the United States.

1. Information We Collect

Account Information

• Email address (for authentication)
• Name (optional, for personalization)
• Account, user, and device identifiers used for authentication and app functionality
• Authentication tokens and account attributes processed by Google or Apple sign-in. The bundled Google Sign-In SDK declares that it may process name, email address, phone number, coarse location, user and device identifiers, other usage data, and other service metadata for app functionality and analytics. TradeRegimen does not request precise or continuous device-location access.
• Consent-audit records, including the policy versions accepted, acceptance time, IP address, and browser or app user-agent

Trading Data

• Trade entries you create or import (ticker, entry/exit prices, position sizes, dates)
• Journal entries and mood or stress logs you submit, which may be treated as health-related information
• Watchlist and signal data
• Portfolio configuration (equity amount, risk parameters)

Broker Connection Data

If you choose to connect a brokerage account via SnapTrade, we store connection metadata (broker name, connection status, last sync time) and trade history imported from your broker.

We never request or store your brokerage login credentials (username, password, or MFA codes).

Usage Data

• Pseudonymous product analytics and platform metrics via PostHog, including feature usage, app navigation, subscription flow outcomes, and platform/app context
• Limited acquisition data, including an allowlisted campaign source, medium, campaign label, content label, first-party landing-page path, and channel-level referrer category
• Privacy-masked session replay for a 15% sample of sessions; text, form inputs, images, embedded media, console logs, and network headers and bodies are excluded
• Sanitized crash, performance, and other diagnostics via Sentry, including error type, stack locations, limited app and device metadata, and a pseudonymous account identifier
• Limited campaign-attribution data via Meta Pixel and Meta's Conversions API, including campaign-page visits, registration, checkout, and verified web-subscription events; Meta campaign cookies or click identifiers; hashed email and account identifiers; request IP address and user-agent; and verified purchase value and currency when available
• Device type and operating system
• App version
• Stock or company searches performed in the Service. Search terms are not sent to PostHog or Sentry, but may be sent to the market-data/search provider needed to answer the request and may be retained in bounded operational error logs.

Product analytics, platform metrics, and diagnostics are collected automatically when you use the Service and are not controlled by a separate analytics preference. PostHog and Sentry process this pseudonymous or sanitized data in the United States.

We do not send your holdings, search terms, journal text, brokerage data, or trading activity to Meta, PostHog, or Sentry. Email and account identifiers sent to Meta for conversion matching are normalized and SHA-256 hashed first.

2. How We Use Your Information

• Provide trade tracking, portfolio analysis, and coaching features
• Generate AI-powered behavioral coaching reports
• Calculate risk metrics and Constitution compliance scores
• Send push notifications for trade alerts and daily rituals
• Improve the Service and maintain its reliability through pseudonymous product analytics, platform metrics, and sanitized diagnostics
• Measure which first-party guides and organic channels lead to account setup and product use
• Measure whether TradeRegimen's own advertising campaigns lead to registration, checkout, and verified web-subscription conversions

3. AI Features and Data Processing

Our AI coaching features use third-party large language models to generate behavioral reports. When you use AI coaching, relevant trading data (positions, rule compliance scores, and journal entries) is sent to our AI provider for processing.

• Your data is not used to train AI models.
• We minimize the data sent and configure providers according to their available privacy and retention controls.
• AI-generated coaching reports may contain inaccuracies and should not be relied upon as the sole basis for trading decisions.

4. Data Storage and Security

• Your data is stored on secure servers in the United States, managed by Supabase and our backend infrastructure.
• All data is transmitted over HTTPS/TLS encryption.
• Authentication is handled by Supabase Auth with industry-standard JWT tokens.
• We implement per-user data isolation — your data is never accessible to other users.

5. Third-Party Services

We use the following third-party services to operate TradeRegimen:

6. Data Sharing

We do not sell or rent your personal data, provide trading data to advertisers or data brokers, or make your data available for unrelated advertisers' campaigns.

We send the limited attribution data described above to Meta solely to measure registration, checkout, and subscription results from TradeRegimen's own campaigns. Data is otherwise disclosed only to the third-party services listed above for the stated Service purposes.

7. Data Retention

• Active accounts: Your data is retained for as long as your account is active.
• Deleted accounts: All server-side data is permanently deleted within 30 days of account deletion.
• Pseudonymous analytics and diagnostics: Retained according to our configured provider retention periods for product improvement, reliability, and security.
• Campaign attribution: Retained according to our configured Meta retention settings and Meta's applicable business-tool terms.
• Pending acquisition attribution: Retained in first-party browser or app storage for up to 90 days and removed from app storage after it is attached to a newly created account and sent to analytics.
• Backups: Encrypted backups are retained for up to 90 days, after which deleted account data is purged from backups.

8. United States Processing and Swiss Operator

TradeRegimen is offered only in the United States, and your information is stored and processed in the United States to operate and support the Service. Because TradeRegimen is operated from Switzerland, we also process personal data in accordance with the Swiss Federal Act on Data Protection (nFADP).

We collect and use information for the service and business purposes described in this Policy, including to:

• Provide requested features, customer support, and account administration;
• Maintain the performance, reliability, safety, and security of the Service;
• Improve our products and understand how the Service is used;
• Prevent misuse, enforce our terms, comply with applicable law, and protect legal rights.

9. Your Rights (Including US State Privacy Rights)

Depending on your state of residence, and only where an applicable US privacy law covers TradeRegimen and the relevant processing, you may have specific rights regarding your personal data:

• Access: You can access your data at any time through the app's Settings screen.
• Correction: You can correct inaccurate data within the app.
• Deletion: You can delete your account and associated data through the app settings. Account deletion removes all server-side data within 30 days.
• Export: You can export your data upon request.

For step-by-step instructions, the data covered, and an alternative request method, visit Delete Your TradeRegimen Account and Data.

These rights are subject to applicable exceptions and may not apply in every state or to every operator. Where an applicable US state privacy law provides additional rights, we will honor them as required. We do not sell personal information. If applicable law treats campaign measurement through Meta as “sharing” or targeted advertising, you may contact us to exercise the corresponding opt-out right.

To exercise any of these rights, contact us at traderegimen@myhappy.family.

10. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you via email and/or in-app notification without undue delay, and in any event within the timeframes required by applicable law. We will also notify relevant regulatory authorities as required.

11. Cookies and Tracking Technologies

PostHog uses first-party local storage to maintain a pseudonymous analytics identity. TradeRegimen also uses first-party storage for up to 90 days to retain the first bounded acquisition touch described above. We do not retain raw referrer URLs or search-query text for this attribution. For reliability debugging, we record a privacy-masked 15% sample of sessions. In the authenticated app, replay starts only after the current Privacy Policy is accepted; public marketing pages operate under this published notice. Replay excludes text, form inputs, images, embedded media, console logs, and network headers and bodies.

Meta Pixel uses cookies and similar browser technology to connect visits and conversion events with TradeRegimen advertising campaigns. The Conversions API sends the limited server-side conversion data described above for the same measurement purpose. Authenticated-app Meta tracking starts only after the current Privacy Policy is accepted. PostHog and Sentry data are not used for advertising.

12. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from minors.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When required, we will provide notice by email or in the Service and require renewed acceptance of the updated policy before continued use.

14. Contact Us

Email: traderegimen@myhappy.family