Privacy Policy

Almost everything the app holds is something you typed into it yourself. There is no hidden collection, no tracking pixels and no advertising network.

Account details, needed to give you a login:

• Your email address.
• Your password, stored only as a salted hash by Supabase Auth. Nobody, including us, can read your password.
• A display name, used to greet you in the app. You choose it at signup and can change it in Settings.

Trading accounts you create inside the app:

• The account name, its type (live, paper or prop challenge), its starting balance and its currency.

Trade records, which is the bulk of what the app stores:

• Date, session, market, instrument, direction, setup and higher timeframe bias.
• Entry time and price, exit time and price, quantity, point value, stop loss, take profit, planned risk in currency and planned risk to reward ratio.
• Result in R, realised profit and loss, and commission and fees.
• A trade number and the time the record was created.

Psychology and review entries, which are the reason this app exists and are often the most personal thing in it:

• Confidence, execution quality and focus, each scored from 1 to 10.
• The emotions you tag on a trade, whether you followed your plan, the mistakes you tag, and whether your checklist was clean.
• A grade for the trade, plus free text notes and lessons.
• Weekly reviews: your best and worst trade of the week, your biggest lesson, your most common mistake, your biggest improvement and your focus for next week.
• Monthly reviews: your best and worst setup, your most common mistake and your lesson for the month.
• Daily recaps: how a day went and one thing for the next one, written for any day including the ones you did not trade.
• Session Prep: the rules and focus you write for a trading day, and what you write about how you are arriving that day. This is your own writing about your state of mind, which makes it the most personal text in the app.
• Your trading plan, if you write one, and which day you completed a pre-session checklist on.

Your written plan, checklists and setups:

• Your trading plans and pre-market checklists, including the names you give them.
• Which setup and confluences you tag on a trade, whether you followed the plan, and your notes on it.
• A description you write for any of your setups: what it is, when you take it, and the confluences that make it valid, along with which of your checklists and trading plans you attach to it.

Screenshots you choose to upload:

• Chart images attached to a trade, held in a private storage bucket. They are not public, they are not indexed by search engines, and they are reachable only through short lived signed links issued to you.
• If you use screenshot fill, the screenshot you choose to have read. It is passed to our AI provider to read the trades in it, and the provider does not keep it. The form also attaches it to the trade as one of its chart images, described above, which you can remove before or after saving.

Ask Quil conversations, if you use the AI features:

• Your questions and Quil's answers, saved to your account so you can come back to them, with the trades each answer cited and which AI model wrote it. You can rename or delete any conversation, they are in your data export, and they are deleted with your account.

Feedback, if you choose to send any:

• The text of any message you send through Send feedback, whether it is a bug, an idea or something confusing, and the page you were on when you sent it. If we answer, we keep our answer and the status of your request (for example planned or live) with it, show both to you in the app, and email them to your account address. You also get an email confirming we received it.

If you buy Pro:

• Whether your subscription is active, when it renews or ends, the reference numbers Link gives your purchase, and when you confirmed at checkout that Pro should start straight away. We never see or store your card details.

Preferences, so the app behaves the way you expect:

• Your timezone, used to work out which trading session a trade falls into.
• Your custom dropdown options for setups, mistakes, emotions, sessions, markets, higher timeframe bias and grades. A default set is created for you at signup and you can add your own.
• Whether you asked for tips and the weekly recap by email, and when you said yes or no.

Technical records created automatically:

• A session cookie that keeps you logged in. It is required for the app to work and is not used to track you anywhere else.
• Standard server logs kept by our hosting and database providers, which include IP addresses and request times and exist for security and reliability.
• If you say yes to the analytics prompt, product-usage events: which pages you visit, and actions like logging a trade. Never trade content, notes or screenshots. These are tied to a random identifier for your browser, never to your account, your name or your email, so we cannot look up what any particular person did. It is optional, off by default until you accept, and you can turn it off again anytime in Settings. See "Who else touches your data" below.

• No card or bank details. If you buy Pro, Link collects your payment details directly and we never see them.
• No broker credentials, API keys or connections to any brokerage account.
• No advertising, and no third party trackers beyond the optional analytics described below.
• No contacts, location or device identifiers beyond what is in a normal web server log.

We use your data to run the journal for you and for nothing else. We do not sell it, rent it, share it for marketing, or use it to train machine learning models.

• To provide the service you asked for, which covers storing your trades, computing your statistics and showing you your own history. Legal basis: performance of a contract, GDPR Article 6(1)(b).
• To keep accounts secure and prevent abuse, which covers server logs and authentication records. Legal basis: legitimate interests, GDPR Article 6(1)(f).
• To keep the app working, which covers the error reports sent to our monitoring provider when something breaks. Those carry technical detail such as which line of code failed, never your trade content, your notes, your screenshots or your email address. Our interest is a service that stays usable; yours is the same one. Legal basis: legitimate interests, GDPR Article 6(1)(f).
• To sell and run Pro if you buy it: the subscription status and references described above, and the record of your checkout confirmation. Legal basis: performance of a contract, GDPR Article 6(1)(b), and for our own bookkeeping, a legal obligation, Article 6(1)(c).
• To email you about your account: notices about your trial ending, a purchase, a withdrawal, or a price change. Legal basis: performance of a contract, Article 6(1)(b).
• To keep the free trial to one per person: when a trial starts we keep a fingerprint of your email address, a one-way hash rather than the address, so the trial cannot be claimed again by deleting the account or by writing the same address another way. It cannot be turned back into your address; it can only be matched against an address someone already has, and that check at signup is all it is used for. Legal basis: legitimate interests, GDPR Article 6(1)(f): a free trial stays possible only if it is not repeated without end.
• To meet legal obligations where one applies. Legal basis: GDPR Article 6(1)(c).
• For the three things you are asked about separately and can switch off at any time in Settings: product analytics, the AI features, and emails with tips for getting started and a weekly recap of your trading. None of them runs unless you say yes. Every one of those emails has an unsubscribe link that works without logging in. You can say yes to the AI features when you sign up, in a separate box that is never ticked for you and is not a condition of having an account, or later in the app. Legal basis: consent, GDPR Article 6(1)(a).

Only an email address and a password are required, because without them there is no account to log in to. Everything else is yours to give or withhold: every trade, note, review, screenshot and preference is something you choose to add, and the app works with any of it left out. The three consent-based purposes above are optional too, and declining them takes nothing else away.

Your trading and psychology entries are not special category data under GDPR Article 9. What you record here is your own state of mind in the context of your performance, which is not data concerning health, sex life, religion, politics, trade union membership, race or biometrics, and none of those is asked for anywhere in the app. We are aware it can still feel deeply personal, since it records how you felt and where you went wrong, so it is protected the same way as everything else here.

This app exists to find patterns in your own behaviour, so it is worth being plain about what that means under the GDPR. Two different things happen here, and only one of them is optional.

The journal itself computes things about you automatically, for every account: a Quil Score for whether your edge looks real or looks like luck, a reading of how consistently you followed your own plan, a tally of which mistakes keep recurring and what they cost, and five fixed checks on when and how big you traded (for example, trades taken soon after a loss). Under Article 4(4) that is profiling, because it evaluates aspects of your performance and your behaviour. We say so rather than leave it unsaid, even though it is the ordinary functioning of a trading journal. It is computed from your own entries, it is shown only to you, it is never shared, and because it is the service you signed up for it runs on our contract with you rather than on consent.

The AI features go further, and they are the optional half. If you turn them on, they read what you have written and characterise it in words: how consistently you followed your plan, which mistakes keep coming back, how your results line up against the emotions you recorded. That is profiling too, and it is the reason these features are consent-based. It happens only when you ask for it, by opening a question, pressing Generate, choosing a screenshot to read or pressing Suggest tags on a trade's note. Nothing is analysed in the background or on a schedule, and nothing is sent for analysis at all if you decline or later withdraw in Settings.

For both of them: no decision is taken about you automatically. The output is a number or a paragraph for you to read and disagree with. It does not change your access to anything, set a price, or produce any other legal or similarly significant effect, so the GDPR's rules on automated decision-making in Article 22 do not apply.

All of it is a description of what you logged, not a judgement of you as a trader, and it is only ever as accurate as what you typed.

We use a small number of service providers. Each one except Vercel processes your data on our instructions under a data processing agreement as GDPR Article 28 requires; Vercel's position is explained below. None of them is permitted to use your data for its own purposes.

• Supabase, which provides the database, authentication and file storage.
• Vercel, which hosts and serves the application.
• Sentry, which receives error reports (technical details like a stack trace, never trade content, screenshot URLs or your email address) so we can fix problems. EU-based processing.
• PostHog, which receives the product-usage events described above, tied to a random per-browser identifier rather than to your account, and only if you say yes to the analytics prompt. EU-based processing. Say no, or change your mind later in Settings, and nothing is sent.
• Resend, which sends our email: account confirmation, password reset, notices about your trial and any purchase, the tips and recap emails if you asked for them, and the text of anything you send through "Send feedback", along with the confirmation and our answers. EU-based processing (eu-west-1).
• Anthropic, which provides the AI features. It only ever receives data when you personally ask a question, press Generate, choose a screenshot to have read, or press Suggest tags: nothing is sent in the background, on a schedule, or at all if you never use these features. What it receives depends on which feature you use. A weekly or monthly review sends every trade in that period: their fields, your written notes, lessons and session recaps on them, the emotion and mistake tags, the reflections you wrote for that period, and what you wrote on your Notebook pages for that period along with the checklists you ran. Asking Ask Quil about your journal sends the same for the account and date range shown under the question box, along with your tags, your Playbook, trading plans and checklists, and your prop firm's rules as you entered them. A question about using Traquil, or a general question, sends only that question and the earlier messages in the same conversation, not your journal. Filling in a trade from a screenshot sends the one image you choose, together with the instrument symbols you already use and today's date, so the trades in it can be read into the Log Trade form for you to check. Traquil does not store the image, and nothing is saved until you save the trade yourself. Anything visible in the screenshot is sent with it, so crop out what you would rather not share, such as an account number. Suggesting tags from a note sends that one note, the trade's symbol and side, and the names of your own tags and mistakes, so it can suggest tags, a mistake and a lesson for you to accept or ignore; nothing is saved unless you tap a suggestion. Suggesting tags from a trade's day, in the Notebook, sends that trade's note, what you wrote on its day page (before, during and after the session), the checklists you ran that day with your answers, the trade's symbol and side, and the names of your own tags and mistakes; again nothing is saved unless you tap a suggestion. It is never sent anything about any other user, and it is never sent your email address.

On the AI provider specifically, because it is the one people ask about: Anthropic's commercial terms state that it may not train its models on data sent through its API, and its published retention policy is that API inputs and outputs are deleted from its systems within 30 days (longer only where it is investigating a policy violation or where the law requires it). Both statements were checked against Anthropic's own published terms and policy on 21 August 2026, and both should be re-checked before this feature is turned on for anyone.

Where your data sits: the database, authentication and file storage are hosted in the European Union (Supabase, eu-central-1). Error reports are processed in Germany (Sentry), and analytics and transactional email in the European Union (PostHog; Resend, eu-west-1).

Two providers process outside the European Economic Area. Anthropic, which powers the AI features, is a United States company, so anything those features send is transferred to the United States, and only if you turn them on and use them. That transfer relies on the European Commission's Standard Contractual Clauses, under the data processing agreement built into Anthropic's commercial terms.

Vercel, which serves the application, is the second one, and we would rather be exact about it than tidy. It receives no trade data at all: what reaches it is the IP address and request metadata in an ordinary server log line. It serves each visitor from the edge location nearest to them, so a request from the EU is normally handled inside the EEA. Vercel publishes the same Standard Contractual Clauses, but they apply to accounts on its paid plans and ours is not yet one, so for those log lines we cannot currently claim that safeguard. We will move to a paid plan when the first person buys Pro, and this paragraph will change when we do. We would rather tell you this than let a sentence stand that sounds better than the truth.

Link (Sold through Link, LLC, a Stripe company) sells Pro, and it is not one of the processors above. When you buy, we send Link your email address and a reference to your account so the purchase can be matched to it. Link then collects your payment details and billing address directly, takes the payment and keeps the records tax law requires. For that purchase Link is a separate controller under its own privacy notice, and it may process data outside the EEA under its own safeguards. We receive only the subscription status and references described above.

If you want to see the safeguards rather than take our word for them, email us and we will send you a copy of the clauses each provider relies on.

• Every table in the database has row level security enabled, with policies that scope every read and write to the account owner. One user cannot read another user's rows even if the application code were wrong.
• The screenshot bucket is private, and each file lives under a folder keyed to its owner. Access is granted only through signed links with a short lifetime.
• All traffic is served over HTTPS with HSTS, and the app sets a content security policy along with other protective headers.
• Passwords are hashed by Supabase Auth and are never stored or transmitted in readable form.
• A minimum password length is enforced on the server rather than only in the browser.

Your data stays for as long as your account exists. There is no automatic expiry, because a trading journal is only useful if the history stays intact.

Server logs are the exception, and they are not really yours in the same sense: our hosting and database providers keep short operational logs containing IP addresses and request metadata. Those roll off on the providers' own schedules, measured in days rather than years. We keep no logs of our own, we do not export copies, and we use them only to keep the service running and to investigate abuse.

When you delete your account, everything goes with it: your trading accounts and trades, your daily, weekly and monthly reviews, your Session Prep notes, your Notebook pages and checklist runs, your trading plans and checklists, your Ask Quil conversations, what you have written about your setups, your settings and custom options, and your uploaded screenshots. The deletion is immediate and there is no recovery period, no holding queue and no soft-delete.

One thing stays after you delete your account: the trial fingerprint described above, for 12 months from the day the trial started, after which it is deleted automatically. Without it, deleting and re-creating an account would start the trial again. It holds no other data about you.

Subscription records stay with your account and are deleted with it. Link, as merchant of record, keeps its own transaction records for as long as tax and accounting law requires, as its privacy notice describes. Our own bookkeeping keeps the payout statements Link sends us for seven years, as Swedish bookkeeping law requires; they identify you no further than Link's statements do.

We keep no backups of our own. Where a provider holds an operational copy as part of running its own infrastructure, it ages out on that provider's schedule and we cannot reach into it or restore from it, which also means we cannot bring a deleted account back.

One thing we cannot make immediate, said plainly because the two sentences above and below it are in tension: anything the AI features already sent to Anthropic is deleted on Anthropic's schedule (within 30 days) and not at the moment you press delete. We have no way to pull it back sooner. If you never used those features, nothing was ever sent.

You can download a complete, machine readable copy of everything this app stores about you at any time, from Settings, and you do not need to ask us or wait for a reply.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Correct anything inaccurate. Most of it you can edit directly in the app.
• Erase your data, which you can do yourself from Settings at any time.
• Restrict or object to processing.
• Receive your data in a portable, machine readable format.
• Withdraw consent where processing relies on consent.

Two of these deserve saying separately rather than as one line in a list.

You have the right to object. Where we rely on legitimate interests, which is the security logging, the error monitoring and the trial fingerprint described above, you can object to that processing at any time on grounds relating to your particular situation. Tell us and we will stop unless we have compelling legitimate grounds that override your interests, and we will explain which if we think we do.

Withdrawing consent is not retroactive, and that is not a catch. You can withdraw at any time and everything stops from that moment. What withdrawal cannot do is unmake processing that already lawfully happened while the consent was in place, which is what Article 7(3) means when it says withdrawal does not affect the lawfulness of processing before it. It is also why the record of when you gave consent survives when you take it back.

To exercise a right that the app does not already let you perform yourself, email privacy@traquil.app. We will respond within one month, as the GDPR requires. If a request is unusually complex we may extend that by up to two further months, which Article 12(3) allows, and we will tell you within the first month if that happens and why.

If you think we have handled your data badly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or to the supervisory authority in the EU country where you live.

You need to be at least 16 to hold an account. We do not knowingly collect data from anyone younger. If you believe a child below that age has an account, contact us and we will remove it.

If this policy changes in a way that affects you, we will update the date at the top and ask you to accept the new version the next time you open the app. You see the change before it applies to you, not after. Corrections that do not change what we do with your data (a typo, a clearer sentence) do not trigger that prompt.

Questions about this policy or about your data go to privacy@traquil.app.