Privacy policy

This Privacy Policy describes how aqryl (“we,” “us,” or “our”) collects, uses, discloses, and protects information when you use the websites, applications, and services offered at https://aqryl.app (the “Service”).

1. Who we are

The Service is operated in connection with the aqryl trading journal and related social and analytics features. For privacy requests, contact us at support@aqryl.app.

2. Information we collect

2.1 Account and authentication

• Email and credentials. If you sign in with email, we process your email address to send magic-link messages and manage your account through our authentication provider (Supabase Auth).
• Third-party sign-in. If you choose Google or similar providers offered in the product, we receive identifiers and profile basics as permitted by that provider’s authorization flow.
• Security. We may process session tokens, device or browser metadata, and (if you enable it) multi-factor authentication factors supported by our auth provider.

2.2 Profile, onboarding, and preferences

We store profile and onboarding fields you provide or that the application collects as part of setup, such as display name, username, avatar and banner images, bio, timezone, country, trading experience, markets, goals, broker or platform names, and similar questionnaire responses stored in your profile record.

2.3 Trading journal content

We store journal entries and related trading data you enter, including trade dates, symbols, direction, prices, size, fees, P&L fields, strategy labels, reflections, tags, scores, comments, and attachments. Screenshots you attach are stored in our file storage and linked to your entries.

If you enable public sharing for a journal entry, we generate an unguessable share link so anyone with the link can view that entry as permitted by the product. Do not enable sharing for information you want to keep private.

2.4 Explore (social) features

When you use Explore, we process short-form posts and replies, likes, reposts, bookmarks, follows, blocks, poll votes, mentions, notifications, content reports, and in-product signals such as post views. Posts may reference or surface journal information when you choose to attach or promote trades to the feed.

Where you add a URL, we may fetch and cache Open Graph metadata (title, description, image, domain) to show link previews.

2.5 Analytics you choose to share publicly

The product can compute analytics from your journal. If you turn on settings that make analytics visible on your public Explore profile, other users may see aggregated performance summaries you explicitly share.

2.6 Playbook, calendar, risk, and related tools

We store structured content you create inside productivity features (for example strategies, canvases, calendars, and risk views) in our database in accordance with those features’ behavior.

2.7 Payments and subscriptions

Paid plans are processed by Stripe. We receive subscription status, plan identifiers, and Stripe customer or subscription IDs needed to manage billing. We do not store full payment card numbers on our servers; card data is handled by Stripe under its own terms and privacy policy.

2.8 Referrals

If you participate in referral features, we store referral codes and attribution fields to credit or analyze referrals.

2.9 Communications

We process emails and in-product messages needed to operate the Service (for example authentication emails, security notices, and responses you send to support).

2.10 Technical, cookies, and analytics

• Logs and diagnostics. Our hosting and application stack may collect IP address, user agent, timestamps, and error logs for security and reliability.
• Analytics. We use Vercel Analytics in the web application to understand aggregate usage.
• Optional media search. If configured, the application can call the Klipy API through our servers so you can search GIFs or stickers; requests may include search text and an app-assigned customer identifier as required by that integration.

2.11 Legal and compliance records

We may maintain records showing that you accepted a particular version of our Terms or Privacy Policy, along with timestamps and, where logged, IP address and user agent associated with acceptance.

3. How we use information

We use information to provide, secure, personalize, and improve the Service; authenticate users; process subscriptions; operate social and sharing features you choose to use; detect abuse and enforce our Terms; comply with law; and communicate with you about the Service.

4. Legal bases (EEA, UK, and similar jurisdictions)

Where GDPR or similar laws apply, we rely on one or more of: contract (providing the Service you request); legitimate interests (security, product improvement, fraud prevention, and internal analytics, balanced against your rights); consent where required (for example optional marketing if we offer it); and legal obligation.

5. How we share information

We share information with service providers who process data on our instructions, including:

• Supabase for authentication, database, and file storage;
• Stripe for payments;
• Vercel for hosting and analytics;
• Klipy when the GIF/sticker integration is enabled;
• Email delivery providers used by Supabase or us for transactional messages.

We may disclose information if required by law, to protect rights and safety, or as part of a merger or acquisition with appropriate safeguards.

Content you publish to Explore or via public journal links is visible to recipients as designed by the product.

6. Retention

We retain information while your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. When you delete your account (where offered), we delete or de-identify personal information subject to legal exceptions and backup cycles.

7. Security

We implement administrative, technical, and organizational measures appropriate to the nature of the Service. No method of transmission or storage is completely secure.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your personal information, and to object to certain processing or withdraw consent where processing is consent-based.

The Service includes tools to export certain account data in machine-readable form and to request account deletion where implemented. You may also contact support@aqryl.app for assistance.

You can control some cookies or analytics through your browser settings; core authentication features may require essential cookies or local storage.

9. International transfers

We may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

10. Children

The Service is not directed to children under 13 (or the minimum age required locally), and we do not knowingly collect their personal information.

11. U.S. state privacy notices

Residents of certain U.S. states may have additional rights (for example, to know, delete, or opt out of certain sharing). Contact support@aqryl.app to exercise rights; we do not sell personal information for money as that term is commonly defined in state laws.

12. Changes

We may update this policy by posting a revised version on https://aqryl.app/privacy and updating the “effective” date. Material changes may require additional notice or consent where required by law.

13. Contact

Questions: support@aqryl.app · Website: https://aqryl.app