Privacy Policy

1. Information we collect

We collect the minimum needed to authenticate you, process payment, and operate the app:

Account & identity

• If you sign in with Google: your email address and name, as provided by Google's own Sign-In service and verified server-side. We do not receive your Google password, and we do not receive access to your broader Google account.
• If you sign in with a manual email code instead: the email address you provide, and a one-time verification code (hashed, not stored in plain text) sent to that address to confirm you own it.

Payment & subscription

• When you subscribe, your payment is processed directly by Paystack — we do not see or store your card number, expiry date, or CVV at any point.
• We do store: your Paystack customer code, subscription status (active/cancelled), plan type, and the email address associated with your subscription, so we can verify your entitlement to paid features.

Usage data

• For the free demo tier, we compute a short-lived, non-reversible identifier from your IP address and browser type, used only to apply a daily usage limit. We do not log your browsing history, and this identifier is not linked to any account or email unless you separately subscribe.
• We do not use analytics or advertising trackers in the app itself.

2. How we use your information

• To authenticate you and keep your session secure.
• To verify and maintain your subscription, and to know which features you're entitled to access.
• To send you transactional emails: verification codes, and (if you subscribe) payment receipts or subscription-related notices.
• To enforce fair-use limits on the free demo tier.
• To respond if you contact us for support.

We do not sell your personal information, and we do not use your data to serve you ads — iTrader does not run advertising of any kind.

3. Third parties we share data with

We rely on a small number of infrastructure providers to operate iTrader. Each only receives what it needs to perform its specific function:

• Paystack — processes payments and manages recurring billing. Paystack's own privacy policy governs how they handle your payment details.
• Google (Identity Services) — provides the "Sign in with Google" option, if you choose to use it.
• Resend — delivers our transactional emails (verification codes, receipts). Resend processes the email address and message content needed to deliver that specific email.
• Cloudflare — hosts our application (Pages), backend (Workers), database (D1), and file storage (R2), and provides our domain's DNS and security layer. As our infrastructure provider, Cloudflare has the technical ability to process data flowing through these services in the course of providing them.

We do not share your information with data brokers, advertisers, or any party outside of what's needed to run the service described above.

4. Cookies and local storage

iTrader does not use third-party advertising or tracking cookies. We use your browser's local storage (not cookies) to:

• Keep you signed in between visits (a signed session/subscriber token).
• Remember your chart preferences (theme, chart type, candle colors, last-used currency pair).
• Track whether a free-tier usage limit is currently active, so you see a consistent state if you close and reopen the app.

Clearing your browser's site data will reset these preferences and may sign you out.

5. Data retention

• Email verification codes are deleted immediately after successful use, or automatically once expired (typically within 10 minutes).
• Subscriber records are retained for as long as your account is active, plus a reasonable period afterward for billing/dispute-resolution purposes, after which they may be deleted or anonymized.
• Demo-tier usage identifiers are automatically discarded after a short rolling window (a day or two) and are never accumulated into a long-term profile.

6. Your rights

Depending on your location, you may have rights to access, correct, or delete the personal information we hold about you, or to object to certain processing. To exercise any of these rights, contact us using the details below — we'll respond as promptly as we reasonably can.

If you're located in Nigeria, these rights are informed by the Nigeria Data Protection Act (NDPA) 2023. If you're located elsewhere (e.g. the EU/UK), you may have additional rights under GDPR or similar frameworks; we'll do our best to honor applicable requests regardless of where you're located.

7. Children's privacy

iTrader is not directed at, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Security

We take reasonable technical measures to protect your information, including: verification codes are hashed (not stored in plain text) before being saved; session and subscriber tokens are cryptographically signed; payment data never touches our own servers at all (handled entirely by Paystack); and our backend infrastructure sits behind Cloudflare's network security. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International data transfer

Our infrastructure providers (Cloudflare, Paystack, Google, Resend) operate global networks, which means your data may be processed in countries other than your own. Each provider maintains its own safeguards for cross-border data transfer under their respective privacy policies.

10. Changes to this policy

We may update this policy as iTrader's features change. We'll update the "Last updated" date at the top of this page when we do. Continued use of iTrader after a change constitutes acceptance of the updated policy.

11. Contact

Questions about this policy or your data? Reply to any email from us, or reach out via the contact details provided on the app itself. As a solo-developed product, you'll be reaching the person who actually built iTrader, not a support queue.