| Google LLC (Firebase Authentication), certified under the EU-US Data Privacy Framework |
Sign-in, password storage, password reset and verification emails, Google sign-in |
Email, display name, password hash, IP address, device information |
United States |
| Google LLC (Cloud Firestore) |
The database for accounts, trades, notes, check-ins, connections, shared cards and feedback |
All account and journal data |
United States (multi-region) |
| Google LLC (Cloud Storage for Firebase) |
Storage for trade and feedback screenshots |
Images you upload |
United States |
| Google LLC (Google Analytics 4), certified under the EU-US Data Privacy Framework |
Usage measurement on the public pages and in the app, only with your consent |
A visitor id in a cookie, pages viewed without ids, a short list of actions, platform connection errors, browser and coarse location, and with consent the account id (a random string); never journal content or email |
United States |
| Google LLC (Gemini API, paid tier), certified under the EU-US Data Privacy Framework |
Writes the AI reviews and answers questions about your journal, only after you agree in the app; under Google's paid-tier terms the content is not used to improve Google's products |
A summary of your trades computed by our server (results, symbols, strategies, tags), your trade and day notes cut to a short length with email addresses, links and long numbers removed, and sleep, energy and mood only if you agreed to the check-ins; never your name, email address or account names and numbers |
United States |
| Hostinger International Ltd. (Cyprus) |
Hosting of the website and the server functions that handle platform connections and generate share images |
IP address, request logs, connection credentials in transit |
Germany (Frankfurt) |
| Hostinger International Ltd. (Cyprus) |
Email hosting for our support address, and sending our notification and invitation emails from noreply@setupbook.io |
Emails you send us and our replies; your email address and the notification's text |
Hostinger's email data centres |
| Google LLC (Firebase Cloud Messaging), certified under the EU-US Data Privacy Framework |
Delivers push notifications to the browsers and phones you turned them on for |
The device's installation id and the notification's title and text |
United States |
| Paddle.com Market Limited (United Kingdom; Paddle.com Inc. for customers in the United States) |
Reseller and merchant of record for Pro subscriptions: checkout, payment, receipts, taxes, the customer portal for invoices, payment method and cancellation |
Email, name, country and billing address, payment details (entered on Paddle's pages and kept by Paddle, never by us), transaction and subscription history, your account id |
United Kingdom, United States |