Privacy Policy

Effective date: October 14, 2026 · TradeTide (operated by Washington Santos)

Plain-English summary first, details below.

1. Who we are

TradeTide is operated by Washington Santos ("TradeTide", "we", "us"). This Privacy Policy explains what information the TradeTide app, website and Cloud Sync service (the "Service") collect, why, where it is stored, and the choices you have. Contact: [email protected].

2. Summary

• Your journal is stored locally on your device by default.
• With Pro Cloud Sync, your trades, notes and settings are also stored on servers run by Cloudflare so they sync between your devices.
• Sign in with Google gives us only your email address and a profile ID. (Microsoft and Apple sign-in are coming soon and not offered yet.)
• Payments are handled by Google Play (Android app from Google Play) or Gumroad (other versions); we never see your card details.
• Gumroad license keys are stored encrypted.
• We don't sell or share your data, show ads, or use tracking cookies.

3. Information we collect

Data you enter (local). Trades (date, ticker, contract, type, quantity, entry and exit prices, notes), day notes and journal entries, and app settings. Without Cloud Sync this stays in your device's local storage.

Cloud Sync data (Pro, optional). If you turn on Cloud Sync, we store your trades, day notes and settings; a random device ID and short device name for each connected device; and timestamps of changes and last sync.

License information. Your Gumroad license key (stored encrypted with AES-GCM), a one-way hash of it, the product and plan, its status (active or inactive), and the purchase email that Gumroad returns. Google Play purchases: if you buy Pro in the Google Play version, we receive and store the Google Play purchase token, product ID (pro_lifetime or pro_monthly) and its status from Google, linked to your signed-in account, so Pro works on all your devices. We don't receive your payment details from Google.

Sign-in information (optional). If you sign in with Google, we receive your email address and a Google profile identifier. Sign in with Microsoft and Sign in with Apple are shown as "coming soon" and are not offered; this policy will be updated before they are. We don't receive your password, contacts, files, calendar or any other account data.

Technical data. Like any web service, our hosting provider processes IP addresses and request metadata to deliver and secure the Service. We don't use them to profile you.

We don't collect payment card details. Payments are processed by Google Play (Google Play Billing) for purchases in the Google Play app, and by Gumroad for purchases on our website and the Windows, web and sideloaded Android versions. Their privacy policies apply to the payment information you give them.

4. Why we use it

• To provide the app and keep your journal on your devices.
• To sync your data between your devices when you turn on Cloud Sync.
• To verify your Pro purchase and recheck subscriptions with Gumroad or Google Play.
• To secure the Service, prevent abuse and enforce device limits.
• To respond to support or deletion requests you send us.

Where GDPR-style laws apply, our legal bases are: performing our contract with you (providing the Service and Pro features), our legitimate interests (security and abuse prevention), and your consent where we ask for it (for example, choosing to sign in with Google).

5. Where data is stored

Local data is stored on your device. Cloud Sync data is stored in a Cloudflare D1 database and processed by Cloudflare Workers. Cloudflare may store and process data in the United States and other countries where it operates. License checks are sent to Gumroad (USA); Google Play purchase checks are sent to Google's Play Developer API. Data is sent over encrypted HTTPS connections.

6. Sharing

We don't sell, rent or trade your personal information, and we don't share it for advertising. We share data only with service providers that run the Service for us (Cloudflare for hosting and storage, Gumroad and Google Play for payments and purchase verification, and Google for sign-in), when required by law, or as part of a sale or transfer of TradeTide, in which case this policy continues to apply.

7. Retention

Local data stays on your device until you delete it or uninstall the app. Cloud Sync data and license information are kept while your account is in use. If your Pro access ends, we may delete Cloud Sync data after 12 months of inactivity. Deleted trades are kept as small deletion markers so the deletion can sync to your other devices. We delete your data sooner if you ask us to.

8. Deletion

On your device: use Settings → Clear all trades, or uninstall the app. Cloud Sync: email [email protected] from your purchase or sign-in email and ask us to delete your account (see tradetideapp.com/delete-account). We'll delete your Cloud Sync data, devices, identities and stored license information within 30 days and confirm by email.

9. Security

We use HTTPS for all connections, encrypt license keys at rest (AES-GCM), store only a one-way hash for license lookup, use signed, expiring session tokens, verify Google sign-in tokens cryptographically, and limit each account to 5 devices. No method of storage or transmission is 100% secure, so please keep your own backups and keep your license key private.

10. Children

The Service isn't directed at children under 13 (and is intended for adults), and we don't knowingly collect information from children under 13. If you believe a child has given us data, contact us and we'll delete it.

11. Your rights

Depending on where you live (for example, under the California Consumer Privacy Act or the EU/UK GDPR), you may have the right to:

• know and access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• receive a copy of your data in a portable format (the app's JSON export also gives you your data anytime);
• object to or restrict certain processing, and withdraw consent;
• not be discriminated against for exercising your rights.

We don't sell or "share" personal information for cross-context behavioural advertising as those terms are defined under the CCPA. To exercise any right, email [email protected]. We may need to verify that the request comes from you. You may also complain to your local data-protection authority.

12. Cookies and local storage

We don't use cookies, advertising trackers or third-party analytics. The app uses your device's local storage to save your journal, settings, license status and sign-in session. Google may set its own cookies on their sign-in pages under their own policies.

13. International users

If you use the Service from outside the United States, your data may be transferred to and processed in the United States and other countries where our providers operate, which may have different data-protection laws.

14. Changes to this policy

We may update this Privacy Policy. If we make material changes, we'll update the effective date and, where reasonable, notify you in the app or by email.

15. Contact

Privacy questions or requests: [email protected].