Privacy Policy
Effective Date: November 17, 2025
Harmonized Trades ("we," "our," "us") values your privacy. This Privacy Policy explains how we handle your information when you use our mobile application and related services ("Services").
Advertising
Our app includes an advertising SDK provided by Appodeal. If ads are enabled, the SDK may collect device identifiers (such as the Apple IDFA or Google Advertising ID), network information (such as IP address), approximate location (for example, country or region inferred from IP address), and limited in-app interaction signals to deliver, cap, and measure ads and detect fraud. We do not sell your personal information. You can reset or limit ad tracking in your device settings.
For more details about Appodeal's data practices, please review the Appodeal Privacy Policy.
1. Information We Collect
We believe in data minimization and only collect what's necessary to provide our Services. Below is a detailed breakdown of the data we collect:
Contact Information
- Email Address: Used for account recovery, customer support, and important notifications. We support Apple's "Hide My Email" feature for enhanced privacy.
Identifiers
- Authentication ID: A unique identifier provided by Auth0 (e.g., "auth0|abc123") used to securely authenticate your account. This is NOT your email or name.
- Profile Picture URL: Optional. If you choose to set a profile picture, we store the URL to display it in the app.
Financial Information
- Trading Data: Your trade positions, profit/loss calculations, trade notes, strategies, and categories that you manually enter or sync from connected brokerage accounts.
- Brokerage Account Information: If you choose to connect a Schwab account, we store:
- Account numbers (encrypted)
- Account type and name
- OAuth tokens (securely stored and regularly refreshed)
- Transaction history you choose to sync
Important: We access this data via OAuth with your explicit consent. You can disconnect your brokerage account at any time.
Purchases
- Subscription Status: We track your subscription tier (Free, Basic, Pro, Max) to provide appropriate app features. Payment processing is handled securely by Apple App Store and RevenueCat. We never see or store your credit card information.
Usage Data
- Analytics: Basic app usage patterns to improve performance and user experience (e.g., which features are used, crash reports, error logs).
- App Settings: Your preferences such as theme, grouping options, and chat AI tier.
- Login Activity: Last login timestamp for security purposes.
What We DO NOT Collect
- ❌ Your name (first name, last name)
- ❌ Username or nickname
- ❌ Phone number
- ❌ Physical mailing address or precise GPS location data
- ❌ Contacts, photos, or other device data
- ❌ Browsing or search history outside the app
- ❌ Payment information (handled by Apple/Google/RevenueCat)
2. How We Use Your Information
We use the data we collect for the following purposes:
- Account Management: Authenticate your login, maintain your account, and enable account recovery
- App Functionality: Store and display your trades, sync with brokerage accounts, provide AI-powered insights
- Subscription Management: Track your subscription status and provide tier-appropriate features
- Customer Support: Respond to your questions and resolve technical issues
- Analytics: Improve app performance, fix bugs, and understand feature usage
- Security: Detect and prevent fraud, abuse, and unauthorized access
We do NOT use your data for:
- ❌ Advertising or marketing to third parties
- ❌ Tracking your behavior across other apps or websites
- ❌ Selling or renting your information
3. Third-Party Services
We use the following trusted third-party services to provide our app functionality:
- Auth0: Authentication and secure login. Auth0 processes your email and authentication credentials. Auth0 Privacy Policy
- RevenueCat: Subscription management and in-app purchases. RevenueCat Privacy Policy
- Charles Schwab: If you choose to connect a Schwab account, we use Schwab's OAuth API to access your trading data with your explicit consent. Schwab Privacy Policy
- AppLovin (MAX): Advertising mediation SDK. The SDK may collect device identifiers (e.g., Google Advertising ID), coarse network information (e.g., IP address), and app interaction signals to deliver and measure ads. AppLovin Privacy Policy
Important: These services have their own privacy policies. We only share the minimum data necessary for them to function.
4. Data Sharing
We do not and will never sell your personal information to any third party.
We only share your information in these limited circumstances:
- With Your Consent: When you explicitly authorize connection to a brokerage account (e.g., Schwab OAuth)
- Service Providers: With trusted third-party services listed above, only to provide app functionality
- Legal Requirements: If required by law, court order, or government regulation
- Security: To protect against fraud, abuse, or threats to user safety
We do not sell your personal information. If ads are enabled, we may transmit device identifiers and limited app interaction signals to AppLovin solely to deliver and measure ads. See Third-Party Services above.
5. Data Security
We implement industry-standard security measures to protect your information:
- Secure Token Storage: Authentication tokens are stored using iOS Keychain and Android Keystore - the most secure storage available on mobile devices
- Encrypted Connections: All data transmitted between your device and our servers uses TLS/SSL encryption
- Encrypted Database: Your data is stored in encrypted databases with access controls
- OAuth Security: Brokerage connections use industry-standard OAuth 2.0 with token refresh and expiration
- Data Minimization: We only store what's necessary to provide app functionality
- Regular Security Audits: We regularly review our security practices and update as needed
- No Password Storage: We use Auth0 for authentication - we never store your password
However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Your Rights and Choices
You have control over your data:
- Access: You can view all your data within the app at any time
- Edit: You can modify your trades, settings, and preferences
- Delete: You can delete individual trades or disconnect brokerage accounts
- Account Deletion: You can permanently delete your account and all associated data directly from the Settings screen in the app, or contact us via email if you're unable to access the app
- Export: Request a copy of your data by contacting support
- Opt-Out: You can disconnect any third-party integrations at any time
- Ads Controls: On Android, you can reset your Advertising ID and opt out of Ads Personalization in system settings. On iOS, you can limit ad tracking in Settings > Privacy & Security > Tracking.
If you're in the EU, you have additional rights under GDPR including the right to data portability and the right to object to processing.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services:
- Active Accounts: Data is retained while your account is active
- Deleted Accounts: After account deletion, we permanently delete your data within 30 days
- Legal Requirements: Some data may be retained longer if required by law
- Brokerage Tokens: OAuth tokens expire automatically and are refreshed/deleted as needed
8. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.
9. Children's Privacy
Our Services are not directed toward children under 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided personal information, please contact us immediately so we can delete it.
10. California Privacy Rights (CCPA)
If you're a California resident, you have additional rights:
- Right to know what personal information we collect
- Right to delete your personal information
- Right to opt-out of sale of personal information (we don't sell your data)
- Right to non-discrimination for exercising your rights
Contact us to exercise these rights.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Updating the "Effective Date" at the top of this policy
- Posting a notice in the app
- Sending an email notification for significant changes
Your continued use of the app after changes become effective constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, please contact us:
We will respond to privacy-related requests within 30 days.