Last updated: 15 July 2026
1. Controller
TradeLock is operated by Tradeily (legal entity, company details, and registered address to be confirmed), United Kingdom.
Privacy contact: support@tradeily.com (or privacy@tradeily.com if enabled).
Reviewer note: Confirm ICO registration requirements for the final entity.
2. What we collect
Account data
Email address, password (hashed), display name (if provided), account creation date.
Subscription data
Subscription tier, status, renewal date, Stripe customer / subscription IDs. We do not store card details — Stripe handles payment data.
App usage data
Lock start/end times, lock duration, streak counts, reclaimed-time (“life account”) totals, override / emergency-release events, goals you set, and journal entries you write if those features sync to our servers.
Reviewer note: Confirm whether journal entries sync to the server or remain local only — this materially changes this policy. Until confirmed, assume server-synced journal content is stored as account-associated content you choose to create.
Device data
Device type, OS version, app version, and crash / diagnostic logs as needed to operate and improve the Service.
Authentication
Authentication is provided via Better Auth on our systems (session tokens; passwords hashed).
3. What we do NOT collect — IMPORTANT
On-device Screen Time / DeviceActivity data
On iOS, TradeLock uses Apple’s FamilyControls, ManagedSettings, and DeviceActivity frameworks. Information about which apps you select and which apps you open is intended to be processed entirely on-device. We do not intend to see it, transmit it, or store it on our servers.
Reviewer note: This claim must be verified against the actual iOS implementation and must match App Store privacy nutrition labels exactly. If implementation differs, this section must be updated before shipping.
Trading data
We do not collect trading data. We have no connection to your broker, and no access to your positions, balances, orders, or P&L — and we will not add broker connections for that purpose under this product model.
4. Why we process data (lawful bases)
| Purpose | Basis |
|---|---|
| Provide the Service (accounts, entitlement checks, sync) | Contract |
| Take payment and manage subscriptions | Contract |
| Improve the app and fix bugs | Legitimate interests |
| Security and fraud prevention | Legitimate interests |
| Legal compliance | Legal obligation |
Reviewer note: Confirm lawful bases under UK GDPR for the final processing map.
5. Sharing
We share data only as needed with processors such as:
- Stripe — payments;
- Better Auth / our hosting infrastructure — authentication and app backends;
- Hosting provider (e.g. Vercel or as configured) — application hosting;
- Email delivery (e.g. transactional email) — account emails;
- Analytics — only if enabled; if none, none.
We do not sell personal data. We do not share your data with advertisers, brokers, or prop firms for their marketing or surveillance of your trading.
Reviewer note: If B2B / white-label ships later and firms can see trader data, this section must be rewritten.
6. Retention
- Account data: while your account is active, then up to 24 months after deletion or longer if required by law (e.g. tax / dispute records related to payments).
- Usage / sync data: typically while your account is active and up to 24 months after last activity, unless you delete sooner where technically feasible.
- Deleted accounts: we aim to purge personal data within 90 days of a verified deletion request, except where retention is required by law or for legitimate dispute resolution.
Reviewer note: Confirm final retention periods with operations and counsel.
7. Your rights
Under UK GDPR you may have rights of access, rectification, erasure, portability, objection, and restriction. Contact support@tradeily.com. You may complain to the ICO (ico.org.uk).
8. International transfers
If hosting or processors store data outside the UK/EEA, we will use appropriate safeguards (such as UK IDTA / Standard Contractual Clauses) as required.
Reviewer note: Confirm actual hosting regions and complete SCC wording if transfers apply.
9. Children
TradeLock is not for under-18s. We do not knowingly collect data from children.
10. Changes
We will notify you of material changes to this Privacy Policy (for example via email or in-app notice).
11. Contact
Privacy questions: support@tradeily.com