Privacy Policy

Overview

FreeTradeJournal ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights.

FreeTradeJournal is a local-first application. Your trading data is stored on your device by default and is never sent to our servers unless you explicitly enable cloud sync or use features that require server communication (e.g. AI analysis, Pro subscriptions).

Information We Collect

Account Information

When you create an account, we collect:

• Email address and display name
• Authentication credentials (managed by Firebase Authentication)
• Google account information if you sign in with Google
• Apple account information if you sign in with Apple

Trading Data

Your trades, journal entries, goals, and settings are stored locally on your device using browser storage. This data is not transmitted to our servers unless you use cloud sync or AI-powered features.

Payment Information

If you subscribe to Pro, payment processing is handled entirely by Stripe. We do not store your card number, CVV, or full billing details. Stripe may collect payment card details, billing address, and transaction history. See Stripe's Privacy Policy for details.

AI Features

AI-powered features are available on both Free (with a monthly allowance) and Pro plans. When you use them, relevant trading data — and, for journal AI features, journal text — is sent to our servers and processed via OpenAI's API. When you use Screenshot Import, uploaded images are also sent to OpenAI for extraction. This data is:

• Used solely to generate your analysis
• Not stored permanently on our servers
• Not used to train AI models

Analytics & Diagnostics

• Usage analytics (PostHog, Vercel Analytics) to understand how the app is used. If you accept analytics cookies, this data is linked to your account (user ID and email) so we can understand feature usage; if you decline, tracking is limited to your current session and nothing is stored on your device or linked to you
• Error tracking and crash reports via PostHog to improve stability
• Device type, browser, and screen size for compatibility

Market Data

Live quotes, news, and economic data shown in the app are fetched from Twelve Data, Finnhub, and FRED through our own servers. These providers receive the symbols being requested but never your identity or trading data.

How We Use Your Information

• Provide, maintain, and improve the application
• Authenticate your account and manage sessions
• Process Pro subscription payments via Stripe
• Deliver AI-powered analysis and coaching
• Send important service updates and security notices
• Send product updates, tips, and onboarding emails — you can unsubscribe from these at any time via the link in each email
• Analyse usage patterns to improve the experience
• Provide customer support

We never sell, rent, or share your personal data with third parties for marketing purposes.

Data Storage & Security

Your trading data is stored locally on your device by default. When cloud features are used:

• Authentication is managed by Firebase Authentication with industry-standard encryption
• Pro status and subscription data is stored in Google Cloud Firestore with security rules ensuring only your authenticated account can access it
• All data in transit is encrypted using TLS/SSL
• Payment data is handled by Stripe, a PCI DSS Level 1 certified provider

Third-Party Services

We use the following third-party services:

Firebase (Google)

Authentication and cloud storage

Stripe

Payment processing for Pro subscriptions

OpenAI

AI-powered analysis features and screenshot import

PostHog

Usage analytics, error tracking, and crash reporting (account-linked only with your consent)

Vercel Analytics

Anonymous performance and usage analytics

Resend

Transactional and product email delivery

Twelve Data

Market quotes and price data (requests proxied through our servers)

Finnhub

Market news and quotes (requests proxied through our servers)

FRED (St. Louis Fed)

Macroeconomic indicators shown in the app

Cloudflare

DNS, CDN, and DDoS protection

Vercel

Application hosting

Each service has its own privacy policy. We encourage you to review them.

Cookies

We use essential cookies for authentication and session management. Analytics cookies are used to understand app usage. For full details, see our Cookie Policy.

Your Rights

You have the right to:

Access

View and export all your trading data at any time via Settings

Portability

Export your data in CSV, Excel, or JSON formats

Deletion

Delete your account and all associated data

Correction

Update your personal information

Opt out

Disable analytics tracking

Withdraw consent

Stop using cloud features at any time — your local data remains yours

To exercise any of these rights, go to Settings → Data Management or contact us directly.

Data Retention

Local data remains on your device until you clear it. Cloud data is retained while your account is active. If you delete your account, all associated cloud data is permanently removed within 30 days, and your email address is removed from our mailing list.

We also remove accounts that have gone unused. If you have never logged a trade and have not signed in for 12 months, or you have logged trades but have not signed in for 24 months, we email you 30 days before and again 7 days before the account is removed. Signing in once cancels the removal. Accounts with an active or past Pro subscription, a lifetime plan, or data stored in cloud sync are never removed automatically.

Children's Privacy

FreeTradeJournal is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the app or email. The "Last updated" date at the top reflects the most recent revision.

Contact Us

Questions about this policy? Reach us at support@freetradejournal.com or through our feedback form.