Privacy policy
Ledger, a trading journal · Last changed: [date of publication]
Draft. This text describes what the app does today; it has not yet been reviewed by a lawyer.
Ledger is a trading journal for your phone and your computer. You keep your trades in it, and it shows you what they say. This page explains, in plain words, what we keep about you, why, where, for how long, and what you can do about it.
Who we are
Ledger is run by [full name], [address], Switzerland (“we”). Write to us at [support email] or through Settings → Help and feedback in the app. We are responsible for your data under the Swiss Federal Act on Data Protection (FADP) and, for people in the European Union or the UK, the GDPR.
What we keep, and why
| What | Why |
|---|---|
| Your email address and password (the password only as a scrambled hash we can’t read) | Your account: so you can sign in on any device. |
| Your journal: trades (tickers, dates and times, prices, amounts, fees, setups, ratings, notes) and account values | The service itself. We don’t look at your journal, except when you ask us to help with it. |
| Your settings: currency, trading style, setups, look | So the app fits how you trade, on every device. |
| Your plan: when you signed up, your free month, whether you subscribed and paid | To know whether you can use the app, and to run the business (how many people subscribe). |
| Messages you send us | To answer you. |
| Crash reports: an error message, the page, your browser’s name, and your account if signed in | To find and fix problems. Never the contents of your journal. |
| Your email address, if you join the waitlist | To tell you when the app opens. Nothing else. |
The legal bases, where the GDPR applies: the contract with you (your account, journal and plan), our legitimate interest in a working, secure service (crash reports), and your consent (the waitlist), which you can withdraw at any time.
What stays on your device
- Broker keys. If you connect a broker with a key and tick “Remember on this device”, the key is kept only in your browser. When you fetch your history, it passes through our relay to your broker and is forgotten: the relay keeps nothing and writes nothing down. Keys from brokers can only read your history; they can’t trade or move money.
- Broker files you choose are read on your device. Only the trades you add are saved to your account.
- Small notes in your browser’s storage: that you’re signed in, your look, exchange rates already fetched, and a few choices on screen. There are no advertising or tracking cookies, and no analytics.
Who else is involved
| Service | What for | What they see |
|---|---|---|
| Supabase (database and sign-in), servers in [Zurich, Switzerland] | Keeping your account and journal | Everything listed above, stored for us |
| Cloudflare (hosting the website) | Delivering the app to your browser | Your IP address and browser, as any website does |
| Paddle (payments, as “merchant of record”) | Selling you the subscription: Paddle is the seller, handles the payment and VAT, and sends receipts | What you give Paddle at checkout (name, email, card, country). We never see your card. Paddle’s own privacy policy applies to it. |
| Frankfurter (the European Central Bank’s exchange rates) | Converting amounts into your account’s currency | A request for a rate and your IP address; nothing about you or your trades |
| Your broker (Trading 212, Interactive Brokers, eToro), only if you connect it | Fetching your history | Your key, through our relay |
Some of these may process data outside Switzerland and the EU. Where they do, they are bound by the safeguards the law requires (such as the EU’s standard contractual clauses). We don’t sell your data, and we don’t share it with anyone else.
How long we keep it
- Your account and journal: until you delete your account.
- When you delete your account, your trades, account values and settings are deleted at once. We keep only an anonymous record that an account signed up on a date and whether it paid, so the business figures stay right; it says nothing about who you were. Paddle keeps payment records for as long as tax law requires.
- Messages: until they’re answered, then at most [2 years].
- Crash reports: until the problem is fixed, at most [12 months].
- The waitlist: until the app opens to you, or until you ask us to remove you.
Your rights
- See and take your data: Settings → Your data downloads everything, as a spreadsheet or in full.
- Correct it: edit any trade or value in the app.
- Delete it: Settings → Delete my account deletes everything, at once.
- You can also ask us, by message or email, about anything on this page, and object to any use of your data.
- If you think we’re handling your data wrongly, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU and UK, to your country’s data protection authority.
Security
Everything travels encrypted (HTTPS). Each account can reach only its own rows: the database itself enforces this, not just the app. Your password is never stored readable. The app holds no secret keys; those stay on our servers.
Children
Ledger is for adults (18 and over).
Changes
If we change this policy, the date at the top changes, and for anything important we tell you in the app or by email first.