Privacy Policy

1. Introduction

Trader Insight ("we", "us", "our") makes a trading journal that keeps your records on your own device. This policy explains what the App stores, what leaves your device, and what we can and cannot see.

By using the App you accept the practices described here.

2. What the App stores, and where

Everything you enter is written to storage on your device and nowhere else. That includes:

• Trades — symbol, dates and times, prices, quantities, fees, asset type, fund type and F&O contract
• Every buy and sell that makes up a trade
• Dividends, splits and bonuses recorded against a holding
• Deposits and withdrawals, with their dates
• Notes, both the ones written before a trade and after it
• Strategies, tags and sentiment
• Stops, targets, recorded stop revisions and exit reasons
• Trading books and the capital assigned to each
• Trading rules and how you scored yourself against them
• Tax settings, including losses you type in from an earlier return, fee templates and MTF interest configuration
• The Trendlyne scores last fetched for each stock, and the scores noted on a trade
• Which buys and sales each of your last five imports added, so an import can be undone
• Your app PIN, if you set one — never as typed, only as a salted hash in Android's secure storage
• Preferences — theme, accent colour, currency, which charts and analytics panels are visible, dashboard layout, import column mappings, notification settings

We do not upload any of it. There is no account holding your trading history, because there is no server that stores it. If you uninstall the App or clear its data, that data is gone and we cannot recover it — which is what the export and backup features are for.

Before restoring a backup, the App keeps a copy of the journal as it was, in its own storage on the phone, so the restore can be undone. It keeps the last two such copies and deletes older ones, and Delete everything deletes them all. They never leave the phone.

3. Your phone's own backup

Android can back up apps' data to your Google account, and carry it to a new phone, when that is switched on in your phone's settings. The App takes part, so your journal and settings go with the rest of your phone's backup — held by Google, under your account, where we cannot reach it.

The app PIN is left out. It is encrypted with a key that never leaves this phone, so on a new phone the lock asks you to set a new PIN rather than bringing back one it could not read.

4. Signing in

Signing in is optional and exists so that subscriptions and Google Drive backup can work. You can sign in with Google, or with an email address and a password. Either way we hold your email address and, if your account has one, a display name, through Firebase Authentication. Nothing else.

We never receive your password. Google checks a Google sign-in, and Firebase Authentication checks an email password — including when you type it to set a new app PIN after forgetting the old one — and each tells the App only whether it matched.

5. Google Drive backup

Backup is off until you turn it on. When you do, the App asks for a single Google permission: drive.file. That grants access to the files the App itself creates, and to nothing else in your Drive — it cannot read your documents, your photos, or any file it did not write.

Backups are written to a folder named "TraderInsight" in your own Drive, under your own Google account. They are yours: we cannot read them.

The App tidies up after its own automatic backups. After each one it keeps the ten newest and one from each of the last twelve weeks, and moves the rest to your Drive's bin, where Google keeps them for 30 days before deleting them for good. A backup you take yourself, and any made before this tidying began, is never touched: deleting those is up to you.

Signing in and granting Drive access are two separate consents. You can sign in without ever granting Drive access, and you can revoke Drive access at any time from your Google account permissions page without signing out of the App.

6. Stock scores from Trendlyne

When you open the detail of a stock or ETF trade, the App asks Trendlyne (trendlyne.com, run by Giskard Datatech Pvt. Ltd.) for that stock's Quality, Valuation and Technicals scores and its SWOT lists, and shows them on the trade, drawn by the App itself. Nothing from Trendlyne runs inside the App: what comes back is text, read and displayed.

What Trendlyne receives is the stock symbol and the ordinary details of a web request, such as your IP address. It does not receive your trade: not the price, the quantity, the dates, or whether it is a buy or a sell. Trendlyne's own privacy policy applies to what it does with a request.

The scores are asked for once a day per stock and kept on your device so the same stock is not asked about again that day. Symbols Trendlyne does not list — foreign stocks, derivatives, mutual funds — are not sent at all, or come back with nothing and show nothing.

The App asks at four moments: when you open a stock or ETF trade; when the home screen or the Analytics screen first shows an open position the App has no scores for at all, once per stock; when you add a trade dated today; and when you close one today — the last two so the trade can keep a note of what the stock scored on the day you entered and the day you left. That note is stored on the trade, on your device, and travels with your backups. If you are signed in, once a day you can also ask the App to fetch the scores for every open position at once; that sends one request per open stock.

7. Subscriptions and payments

Paid features are handled by Google Play and by RevenueCat, which tells the App whether a subscription is active. They receive a purchase identifier and your subscription status.

We never see your card, your bank details or your billing address. Google Play handles payment and their privacy policy applies to it.

8. Notifications

Reminders — before a holding turns long term, when you are past your own risk limits, and the morning before an F&O contract you hold expires — are scheduled on your device by the device. Nothing is sent to us, and nothing is sent through a push service — we could not send you a notification if we wanted to. Each kind is off until you switch it on, and the App does not ask for permission to set exact alarms.

9. The home-screen widget

If you add the App's widget to your Android home screen, it shows today's realised P&L, the amount at risk at your stops and how many open positions have no stop — to anyone who can see your home screen. The figures are worked out by the App and kept on the phone for the widget to show; nothing is sent anywhere.

The widget goes blank while the app lock is switched on, and while Hide amounts is on at the top of the home screen.

10. What we do not collect

The App contains no analytics SDK and no crash-reporting SDK. We do not know which screens you open, which features you use, how often you open the App, or whether it crashed.

We also never collect:

• Your name, address or government ID
• Your PAN or Aadhaar number
• Your Demat account number, broker login or trading credentials
• Your bank or card details
• Your real portfolio holdings or live positions
• Your contacts, SMS, call logs or location

The App is not connected to any broker or exchange. It cannot place an order, and it does not fetch live prices — the list of NSE and BSE symbols it offers while you type is a file bundled inside the App, not a request to a server. The one request made about a stock is the Trendlyne scores request described above, and it carries the symbol alone.

11. Security

Your data is held in the App's private storage area, which the operating system keeps separate from other apps. On current Android versions that storage is encrypted at rest by the device itself, tied to your screen lock. The App does not add a second layer of encryption on top of that, and this policy will say so plainly rather than imply protection that is not there.

You can add a PIN or biometric lock to the App itself in Settings, which is worth doing if other people use your phone. The PIN is never stored as typed, only as a salted hash. While the lock is on, the App's screens are kept out of screenshots and the recent-apps view, and the wait after too many wrong guesses runs on a clock that changing the phone's time does not move.

If you forget the PIN, Forgot PIN on the lock screen lets you set a new one once you have confirmed it is you: with your account password if you signed in with email, or with the phone's own screen lock otherwise. Nothing in the journal is deleted.

Anything you export or back up leaves that protection behind and becomes your responsibility — a CSV in your downloads folder, including a saved file of rows an import could not read, is readable by anything that can read the folder.

12. Your rights

Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you have the rights below. Because the data is on your device rather than ours, most of them are things you can exercise directly, without asking us:

• Access — every figure the App holds is visible inside it
• Correction — edit or delete any trade, buy, sale, dividend or note
• Erasure — Settings, Your data, Delete everything removes every trade with its buys, sales, dividends, splits and bonuses, every deposit and withdrawal, the copies kept before a restore and the stored stock scores, keeping only your books, capital figures, rules and settings; clearing the App's storage in your phone's settings, or uninstalling, removes those too
• Portability — Settings, Your data, Export a copy
• Withdrawal of consent — revoke Drive access, or sign out

To have the account record we do hold — your email address and display name — deleted, write to us and it will be removed within 7 days.

13. Children's privacy

The App is not intended for anyone under 18 and we do not knowingly hold information about children. If you believe a child has used the App and provided information, contact us and we will remove it.

14. Compliance with Indian law

This policy is written to comply with:

• The Information Technology Act, 2000
• The IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• The Digital Personal Data Protection Act, 2023

For users outside India we endeavour to comply with the data protection law applicable where you are.

15. Changes to this policy

If this policy changes, the date at the top changes with it and the new version appears in the App. Continuing to use the App after a change means accepting it.

16. Contact

For any question about this policy, your data, or to request deletion of your account record, write to praveen.dev.mys@gmail.com. It is the single support address for the App.

Most requests about your own data do not need us at all. Access, correction, erasure and export are buttons inside the App, because the data is on your device rather than ours.