Privacy Policy

1. Introduction

StayFunded ("we", "our", "us") operates the StayFunded web application at stayfunded.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information: When you create an account, we collect your email address and display name. Passwords are hashed and managed by Supabase Auth — we never store plaintext passwords.

Trading Data: Trade records, account configurations, journal entries, checklists, and notes you enter into the application. This data is stored in our Supabase database and associated with your user account.

Payment Information: If you subscribe to StayFunded Pro, payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other financial payment information on our servers. We store only your Stripe customer ID for subscription management.

Usage Data: We may collect basic analytics such as page views and feature usage to improve the product. We do not use third-party tracking scripts or sell data to advertisers.

3. How We Use Your Information

• To provide, maintain, and improve the StayFunded service
• To process your subscription and manage billing through Stripe
• To respond to support requests submitted through the application
• To send important service-related communications (e.g., security alerts, billing confirmations)
• To enforce our Terms of Service and protect against fraud

4. Data Storage & Security

Your data is stored on Supabase (hosted on AWS) with Row Level Security (RLS) policies ensuring that users can only access their own data. All data is encrypted in transit (TLS) and at rest.

Guest users (not signed in) have their data stored locally in the browser via localStorage. This data never leaves your device unless you create an account and explicitly sync it.

5. Third-Party Services

We use the following third-party services:

• Supabase — Authentication and database hosting
• Stripe — Payment processing for Pro subscriptions
• Vercel — Application hosting and deployment

Each of these services has their own privacy policies. We encourage you to review them.

6. Data Sharing

We do not sell, rent, or share your personal information or trading data with third parties for marketing purposes. We may disclose information only if required by law or to protect our legal rights.

7. Your Rights

You have the right to:

• Access your personal data stored in StayFunded
• Export your trading data at any time
• Delete your account and all associated data by contacting support@stayfunded.app
• Correct inaccurate information in your profile settings

For EU/EEA users: You have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove all associated personal data and trading records within 30 days. Anonymized, aggregated data may be retained for analytics purposes.

9. Cookies

We use essential cookies for authentication (Supabase auth tokens). We do not use advertising cookies or third-party tracking cookies.

10. Children's Privacy

StayFunded is not intended for users under the age of 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the application or sending an email.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at support@stayfunded.app.