1. Tradebook is a purely educational app. All lessons, charts, prices, and scenarios are hypothetical and illustrative — they are not real market data, are not connected to any brokerage service, and do not facilitate any real transaction.
2. The content is not financial, investment, tax, or legal advice, nor a solicitation, recommendation, or encouragement to buy, sell, or hold any financial instrument.
3. Trading carries high risk and can lead to a total loss of your capital. Before making any decision, consult a licensed professional. You are solely responsible for your own decisions.
The controller of your data is Petros Liapis (sole proprietor), based in Zürich, Switzerland, operating the app under the trade name Tradebook. Contact: support@tradebookapp.net.
The Tradebook app uses anonymous sign-in exclusively. We do not ask for an email, password, or identity details at registration. We collect the following:
a) Anonymous user identifier (UUID): Generated automatically on first launch via anonymous authentication (Supabase) and serves as a permanent and stable identifier of your device/account for as long as the anonymous account exists. It is not linked to any natural person without additional information.
b) Progress and performance data: Completed lessons, streaks, exercise results, resume position, and question history — stored in the Supabase database (tables: profiles, progress, question_log, resume_state, streaks, streak_events) to preserve your progress across devices. Syncing is best-effort: the local device memory (localStorage) is the primary source of truth, and the send to Supabase times out silently after ~2 seconds if it fails, with no error message. The streak ledger is append-only and immutable; it is erased only upon account deletion.
c) Push notification data (only if consent is given): If you choose to receive push notifications, we store in the push_subscriptions table: the notification endpoint, cryptographic keys (p256dh, auth) at rest, and a truncated user-agent (up to 500 characters). These keys are accessible to the administrator for the purpose of sending notifications. This is the only data that can be associated with a device.
d) Subscription and purchase data: Entitlement status (active subscription, expired, etc.) via RevenueCat. We do not process payment details directly — these are handled exclusively by the App Store (Apple) or the Play Store (Google).
e) Nickname and public leaderboards: Your nickname (default “Trader”) may be displayed publicly on in-app leaderboards. Do not use real personal information as your nickname.
f) Time zone: Push notification timing uses a time zone that defaults to Europe/Athens. There is currently no manual time-zone setting in the user interface.
g) Local device data (not transmitted): Cached progress and subscription status are stored primarily in device memory (WKWebView localStorage). They never leave your device, except for the Supabase sync described above.
We process your data on the basis of GDPR Article 6 and Swiss DSG/revDSG:
Performance of a contract (Art. 6(1)(b) GDPR): Delivering educational content, managing access, and operating the app.
Legitimate interest (Art. 6(1)(f) GDPR): Syncing and preserving progress across devices.
Consent (Art. 6(1)(a) GDPR): Sending push notifications — only after your explicit opt-in. You may withdraw consent at any time through your device settings.
Data is retained for as long as you have an active anonymous account. Upon deletion (§7), we immediately delete all Supabase records tied to your anonymous identifier — including the immutable streak ledger — and the local device data.
Supabase, Inc. (USA) — Database and anonymous authentication.
RevenueCat, Inc. (USA) — Purchase-receipt verification and subscription-entitlement management. Receives the anonymous identifier and purchase information from the App Store / Play Store and applies its own independent data-retention policy.
Apple Inc. / Google LLC (USA) — App store and payment processing. Governed by their own privacy policies.
Your data may be transferred outside Switzerland/the EU, primarily to the USA (Supabase, RevenueCat, Apple, Google). The transfer is carried out on the basis of:
— EU → Switzerland: European Commission adequacy decision.
— EU/Switzerland → USA: Standard Contractual Clauses (EU SCCs) and/or the Swiss-US Data Privacy Framework.
Under GDPR (Articles 15–22) and DSG/revDSG you have the right to: access, rectification, erasure (via the “Delete account” option in the app’s Profile), withdrawal of consent (push: through device settings), portability, and objection.
To exercise your rights: support@tradebookapp.net. Due to the anonymous model, identification is performed from your device (GDPR Art. 11).
You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) (Switzerland) or with the competent data-protection supervisory authority of your country of residence within the EU.
Tradebook is an educational app that is not directed at children. Minimum recommended age: 17. We do not knowingly collect data from individuals under 17 years of age.
We do not use any analytics or tracking SDK. No App Tracking Transparency (ATT) prompt is shown. The app’s NSPrivacyTracking declaration is false. We do not sell or share data with advertisers.
For California residents: we disclose that we collect the data categories of §2 (identifiers, usage data, purchase data) exclusively for the purposes of §3. We do not sell or share personal information with third parties for commercial purposes or behavioral advertising. Consequently, no “Do Not Sell or Share” link is required.
We may update this Privacy Policy from time to time. In the event of material changes, you will be notified through the app. Continued use after the update constitutes acceptance.
Tradebook · Zürich, Switzerland · support@tradebookapp.net