Untilt Privacy Policy
Untilt (“we”, “us”, “our”) is a mobile application that helps discretionary traders measure, visualize, and improve behavioral discipline alongside their live trades. This privacy policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
Account Data
- Email address, username, and hashed password (bcrypt)
- Google or Apple OAuth identifiers (for social sign-in only)
Trade Data (User-Uploaded Only)
- Trade symbol, type, entry/exit prices, PnL, commission, and timestamps
- All trade data comes exclusively from CSV or Excel files you upload
Behavioral Data (User-Provided Only)
- Daily self-rated dimension scores (1–5 scale)
- Emotion tags, trade annotation notes, and setup tags
- Onboarding personality assessment scores and trader archetype classification
Usage Analytics (Opt-Out Available)
- Screen views and feature usage events via Firebase Analytics
- Session-level data (app opens, screen transitions)
- All analytics data is anonymous and contains no personally identifiable information
- You can disable analytics at any time from the profile menu in the app
2. Data We Do NOT Collect
- Location data, contacts, camera, or microphone access
- Advertising identifiers or cross-app tracking profiles
- Financial account numbers, brokerage credentials, or bank details
- Browsing history or data from other apps
3. How We Use Your Data
- Trade analysis: Calculate performance metrics from your uploaded trades
- Behavioral scoring: Generate process-based behavioral scores from your self-ratings
- Personalization: Assign trader archetype and customize scorecard dimensions
- Usage analytics: Understand which features are used to improve the app (opt-out available)
We do not sell, rent, or share your personal data with advertisers or data brokers.
4. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Google Sign-In | Authentication | Email, OAuth ID |
| Apple Sign-In | Authentication | Email, OAuth ID |
| Firebase Analytics | Anonymous usage analytics | Screen views, events (no PII) |
| Databento | Market data for trade charts | Trade symbol and timestamps only (no user PII) |
5. Data Storage and Security
- Hosting: Hetzner VPS located in Germany (EU)
- Passwords: Hashed with bcrypt (never stored in plaintext)
- Tokens: SHA-256 hashed refresh tokens
- Transport: HTTPS only (TLS encryption in transit)
- Database: PostgreSQL with access restricted to application service accounts
6. Data Retention
- Your data is retained as long as your account is active
- You may request data export or deletion at any time (see Section 8)
- Upon account deletion, all associated data is permanently removed within 30 days
7. Children’s Privacy
Untilt is not intended for users under the age of 18. We do not knowingly collect data from minors.
8. Your Rights
- Access your data (request an export)
- Correct inaccurate data
- Delete your account and all associated data
- Opt out of analytics collection (toggle in the app)
To exercise any of these rights, contact us at the email below.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through the app. The “Last Updated” date at the top reflects the most recent revision.
10. Contact
For privacy inquiries, data requests, or questions:
Email: [email protected]