Privacy Policy

1. Provider and scope

"Proofline", "we", "us", and "our" refer to the Proofline service. This policy applies to the Proofline mobile, desktop, and web-connected services, including account access, trade journaling, broker or exchange sync, analytics, media attachments, notifications, support, and public trade sharing.

Proofline is the named service provider for this policy. A separate formal legal entity, postal address, and governing privacy representative have not been published in this document yet. That information should be added after legal review. Until then, privacy questions should be sent to support@proofline.app.

2. Information we collect

Account and authentication information

We process account identifiers, email address, display name, profile image where available, authentication provider identifiers, session and token state, onboarding status, selected language or locale, and security-related metadata needed to keep your account available and protected.

Journal account and trading records

Proofline is a trade journal. We process the trade and review data you enter or import, including journal accounts, instruments, directions, execution timestamps, quantities, prices, risk, stop and take-profit plans, realized results, notes, mistakes, rule checks, mood and lifestyle context, review fields, source metadata, inclusion settings, and related calculations.

Media and evidence

If you upload or attach evidence, we process file names, content types, file sizes, storage object paths, upload status, signed upload and download metadata, and the image files themselves, such as chart screenshots or other trade evidence you choose to upload.

Broker, exchange, and sync information

If you use sync or import features, we may process connection configuration, provider name, account identifiers, imported trades, source types, environments such as real or demo, refresh status, import errors, report-upload metadata, and any credentials or authorization material required to operate the integration. Sensitive credentials are handled for the purpose of providing the connection and should never be sent through support email.

Technical, device, and diagnostic information

We may process app version, platform, device type, operating system, network request metadata, log data, crash or diagnostic events, notification device registration data, IP-derived request context, and security events needed to operate, troubleshoot, secure, and improve the service.

Support communications

If you contact support, we process the contact details, message contents, attachments, links, account references, and follow-up information you provide.

3. How we use information

• Provide account access, authentication, onboarding, profile, and journal account features.
• Create, edit, store, retrieve, delete, and display trade records and supporting review context.
• Generate analytics, calendar views, performance summaries, edge and psychology review surfaces, and other decision-support read models.
• Operate broker, exchange, report-upload, and refresh workflows where enabled.
• Store and serve chart images and other media evidence you choose to attach.
• Create, open, revoke, and protect public share links for read-only shared trade views.
• Send service, security, recovery, notification, and support communications where appropriate.
• Detect abuse, secure the service, debug incidents, enforce limits, and comply with law.
• Improve reliability, usability, localization, and product quality.

4. Public share links

Proofline can create read-only public trade links. A public link may expose the selected trade data and related attachments or metadata included in the shared view to anyone who has the URL and required token. Share links are explicit, token-based, and can be regenerated or revoked where the app exposes that control.

Do not create or distribute a public share link for information you want to keep private. If a shared link was distributed by mistake, revoke it in the app where available and contact support.

5. Analytics and decision support

Proofline analytics are review and reporting tools. They may calculate performance summaries, calendar views, symbol or session breakdowns, rule and mistake patterns, and psychology-related signals based on the data available in your account. These outputs are not investment, trading, tax, financial, legal, or risk-management advice.

Analytics can be incomplete or misleading if your trade data is incomplete, incorrectly entered, stale, excluded, duplicated, or imported from a provider with limitations. You remain responsible for verifying trading records against your broker, exchange, and account statements.

6. Legal bases where applicable

Depending on your location, we rely on one or more legal bases to process information: performance of a contract when we provide the service you requested; legitimate interests such as security, fraud prevention, debugging, service improvement, and support; consent where required for optional features or communications; and legal obligation where retention, disclosure, or compliance is required by law.

7. Service providers and third parties

We use service providers to operate Proofline. These may include authentication providers, cloud hosting, database infrastructure, storage providers, notification gateways, crash and diagnostic tools, email or support tools, market-data providers, and broker or exchange integration providers.

Proofline currently relies on services such as Supabase for authentication and storage-related infrastructure, PostgreSQL-backed application data, optional Firebase notification infrastructure, Twelve Data or similar market-data providers, and provider-specific broker or exchange integrations. Third-party services process information according to their own terms and privacy practices when you interact with them directly or authorize a connection.

We do not sell personal information in the ordinary meaning of selling a customer list or journal content for money. We also do not use your private trade journal content to operate a public social trading feed.

8. Premium, billing, and app stores

Proofline contains premium capability concepts for features such as broker sync, image uploads, and deeper analytics. Subscription checkout and purchase restoration are not live in the current product state described by this policy. If billing is introduced later, payment and refund processing may be handled by the relevant app store or billing provider, and this policy should be updated to describe the additional data flows.

9. Retention

We retain account, journal, trade, media, sync, and analytics-related information for as long as needed to provide the service, maintain security, comply with law, resolve disputes, enforce agreements, and support backups or audit requirements. Public share links may remain accessible until revoked, expired, deleted, or otherwise disabled.

If you delete content or close an account, some information may remain for a limited period in backups, logs, security records, legal records, or provider systems where immediate deletion is not technically or legally possible.

10. Security

We use reasonable technical and organizational safeguards designed to protect information, including access controls, transport security, token-based access for public share links, provider-managed authentication, and storage controls. No online service can guarantee absolute security.

You are responsible for protecting your account credentials, devices, email inbox, recovery links, broker credentials, API keys, and public share links. Contact us promptly if you suspect unauthorized access.

11. International processing

Proofline and its service providers may process information in countries other than your country of residence. Where required, we use appropriate safeguards for cross-border transfers, such as provider contractual commitments or other lawful transfer mechanisms.

12. Your choices and rights

Depending on your location, you may have rights to request access, correction, deletion, export, restriction, objection, or withdrawal of consent for certain processing. You may also have the right to complain to a data protection authority.

To make a request, contact support@proofline.app. We may need to verify your identity and account ownership before acting on a request. Some requests may be limited by security, legal, fraud prevention, backup, or operational requirements.

13. Children

Proofline is not directed to children and is intended for users who are legally able to manage accounts and make their own trading decisions. If you believe a child has provided personal information to Proofline, contact us so we can take appropriate action.

14. Changes to this policy

We may update this Privacy Policy as the product, providers, laws, or operating practices change. The updated version will be posted on this page with a revised effective date. Material changes may also be communicated in-app or by other reasonable means where required.

15. Contact

Privacy questions, access requests, deletion requests, and security concerns can be sent to support@proofline.app.