Privacy Policy

This Privacy Policy applies to the Profit AI iOS application, the website at profitai.co, and any related services we operate (together, the "Service"). It is provided by Profit AI ("Profit AI," "we," "us," or "our") and governs personal information of all users worldwide, including in the United States, the European Economic Area (EEA), the United Kingdom, Switzerland, Canada, and other regions.

Capitalized terms not defined here have the meaning given in our Terms of Service.

Information you provide directly

• Account information: email address, display name, password (stored as a salted hash), and authentication tokens when you sign in via Apple or Google.
• Profile and preferences: trading experience, instruments traded, time zone, and strategy configurations you create inside the app.
• Trade and journal content: trades you log manually or that we sync from a connected broker or prop firm; chart screenshots you upload; notes, tags, and reflections you add to a trade or session.
• Messages: prompts and conversations with the in-app AI mentor and any support requests you send.
• Payment information: in-app purchases are processed by Apple. Apple does not share your full payment details with us; we receive a purchase identifier, subscription status, and renewal events.

Information collected automatically

• Device and technical data: device model, operating system and version, app version, language, IP address (truncated where feasible), crash logs, and diagnostic events.
• Usage data: the features you use, screens you view, time spent in the app, taps on key actions, and aggregated performance metrics.
• Identifiers: an internal account ID and, where you have not opted out, the Apple Identifier for Vendors (IDFV). We do not collect the Identifier for Advertisers (IDFA) without your explicit App Tracking Transparency consent.

Information from connected accounts

If you connect a broker, prop firm, or trading platform (for example, MetaTrader 5, MetaTrader 4, FTMO, or TopStep), we receive the trade history, balance, equity, and open-position data necessary to populate your journal and Trader Score. We request the minimum scope of access needed and never use this information to place trades on your behalf.

Information from third-party sources

• App Store: subscription status, purchase events, and refund notices.
• Authentication providers (Apple, Google): your email and the unique provider ID, only if you choose to sign in with them.
• Analytics and crash reporting providers: aggregated usage and stability metrics tied to a pseudonymous device or account ID.

• Provide, maintain, and operate the Service, including AI chart analysis, the AI mentor, and the trade journal.
• Personalize your experience: apply your custom strategies to chart analyses, calculate your Trader Score, and surface insights from your historical trades.
• Process subscriptions, manage entitlements, prevent fraud, and handle refunds in coordination with Apple.
• Communicate with you about Service updates, security alerts, billing, and customer support requests.
• Improve the Service: measure feature performance, debug issues, and develop new product capabilities.
• Train and evaluate AI models, subject to the safeguards described below.
• Comply with legal obligations and enforce our Terms.

Profit AI uses artificial intelligence to analyze charts you upload, generate trading insights, calculate your Trader Score, and power the in-app AI mentor. AI processing involves both models we operate and trusted third-party model providers acting as our processors under contractual confidentiality and security obligations.

Model training and improvement

We do not sell your data. We may use de-identified or aggregated information to evaluate and improve our models. We do not use the contents of your trade journal, your private notes, or your AI-mentor conversations to train third-party foundation models. You can opt out of having your content used for any model improvement at any time in Settings or by emailing privacy@profitaiapp.com.

Automated decision-making

We do not use solely automated decisions that produce legal or similarly significant effects on you within the meaning of Article 22 of the GDPR. AI-generated outputs (chart breakdowns, score, journal commentary) are informational and require your judgment to act on. You retain the right not to rely on, or to challenge, any AI output we surface.

If you are located in the EEA, the United Kingdom, or Switzerland, we process personal information under one or more of the following GDPR / UK GDPR legal bases:

• Contract (Art. 6(1)(b)): to provide the Service you have requested, including chart analysis, the journal, and the AI mentor.
• Legitimate interests (Art. 6(1)(f)): to secure the Service, prevent fraud, debug issues, measure feature usage, and improve our product. We balance our interests against your rights and freedoms and limit processing accordingly.
• Consent (Art. 6(1)(a)): for optional tracking, marketing communications, and any processing for which we ask for your consent in-app. You may withdraw consent at any time without affecting prior lawful processing.
• Legal obligation (Art. 6(1)(c)): to comply with applicable laws, valid legal process, and tax or accounting requirements.

We do not sell or rent personal information. We share it only in the limited cases below.

Service providers (processors)

We use vetted vendors to host the Service, run analytics and crash reporting, deliver email, process AI workloads, and support customer requests. Each provider is bound by a written data processing agreement that limits use of personal information to the purposes we direct and requires appropriate security measures.

Brokers and prop firms

When you connect a broker or prop firm, you authorize the exchange of trade and account data between that provider and Profit AI. Their use of your data is governed by their own terms and privacy notices.

Apple

Apple processes in-app purchases on the App Store and shares limited subscription metadata (purchase identifier, status, renewal events) with us so we can provision your access.

Legal, safety, and corporate transactions

We may disclose information if required by law, valid legal process, or to protect rights, safety, and property, or in connection with a merger, acquisition, financing, or sale of assets, in which case we will require any successor to honor this Policy or notify you of changes.

We are headquartered in the European Union and use service providers located in the United States and other regions. Where personal information is transferred out of the EEA, the United Kingdom, or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards under Article 46 of the GDPR, including the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and supplementary technical measures such as encryption in transit and at rest. You may request a copy of the relevant safeguards by contacting us at the address below.

Depending on where you live, you may have the following rights in relation to your personal information:

• Access: request a copy of the personal information we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your personal information, subject to legal exceptions.
• Restriction: ask us to restrict processing in specific circumstances.
• Objection: object to processing based on legitimate interests, including profiling.
• Portability: receive your information in a structured, commonly used, machine-readable format.
• Withdraw consent: where processing is based on consent, withdraw it at any time.
• Lodge a complaint: contact your local supervisory authority. EEA users can find theirs at edpb.europa.eu; UK users can complain to the ICO at ico.org.uk.

You can exercise most of these rights directly inside the app (Settings → Account → Privacy) or by emailing privacy@profitaiapp.com. We respond within the time limits required by applicable law (typically 30 days under GDPR, 45 days under most US state laws).

If you are a resident of a US state with a comprehensive privacy law, you have the rights described above as applied through that law. In particular, California residents under the CCPA / CPRA have the right to know what personal information we collect and how we use it, the right to delete and correct, the right to opt out of any "sale" or "sharing" of personal information for cross-context behavioral advertising, and the right to limit the use of sensitive personal information.

We do not sell personal information for money. We do not engage in cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16. You will not be discriminated against for exercising any privacy right.

To exercise your rights, email privacy@profitaiapp.com with the subject line "Privacy Request" and the state you reside in. You may designate an authorized agent to make a request on your behalf, subject to verification.

We retain personal information for as long as your account is active and for the period necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account and profile data: retained for the life of your account; deleted within 30 days of account deletion, except where law requires longer retention.
• Trade journal and chart uploads: retained while your account is active and deleted with your account, unless you delete an entry sooner inside the app.
• Billing records: retained for the period required by tax and accounting law (typically 7 years).
• Backups: encrypted backups are rotated and overwritten on a fixed schedule; data deleted from production may persist in backups for up to 60 days.
• Aggregated or de-identified data: may be retained indefinitely because it can no longer be linked to you.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS 1.2+) and at rest (AES-256), least-privilege access controls, audit logging, secret rotation, and regular third-party security testing. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13 (or under the minimum age in your country, if higher; the GDPR digital consent age varies between 13 and 16 across EU member states). We do not knowingly collect personal information from children under that age. If you believe a child has provided personal information to us, contact privacy@profitaiapp.com and we will delete it promptly.

The mobile app uses local storage and device identifiers described above; it does not use cookies. The website at profitai.co uses a small number of strictly necessary cookies and, with your consent where required, analytics cookies to measure aggregate traffic. You can manage cookie preferences through the cookie banner or your browser settings.

The Service integrates with or links to third-party services (such as the App Store, brokers, prop firms, and analytics providers). We are not responsible for the privacy practices of those third parties. Review their notices to understand how they handle your information.

We may update this Policy as the Service evolves. When we make material changes, we will revise the "Last updated" date and, where required, notify you in-app or by email. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

For privacy questions or to exercise your rights, contact us:

• Email: privacy@profitaiapp.com
• General support: support@profitaiapp.com
• Postal address: please email first and we will provide a current postal address for formal correspondence.