Privacy Policy

Last updated October 15, 2026

The company name and support email on this page are still being finalized.

OFYE GHOST (the website and the iPhone and Android apps) is run by the operator of OFYE GHOST. This policy explains what we collect, why, and the choices you have. We do not sell your data, show ads, or use tracking or advertising SDKs.

What we collect

• Account: your email address and a password, which we store only as a salted scrypt hash. Sign-in sessions are stored as hashed tokens.
• Trading records you import: the trades or fills in the CSV files you choose to upload (symbol, side, quantity, times, prices, fees, and any stop, target, setup or notes columns), plus the file name, a fingerprint of the file used to detect duplicates, and import results.
• What you enter: your trading rules and their version history, notes and stop or target levels you add to trades, and practice orders.
• Activity log: a record of account actions such as creating an account, saving rules, and imports, so changes can be traced.
• Subscriptions: if you subscribe in the app, Apple or Google processes the payment. RevenueCat receives your GHOST account ID and your subscription and purchase history so we know whether Pro is active. We never see your card details.

Your IP address is used to limit repeated sign-in attempts and is not stored with your account. Our hosting provider keeps standard request logs, which include IP addresses, for a limited time for security and troubleshooting.

Stays on your phone

• App lock uses Face ID, fingerprint or your passcode through your phone's operating system. We never receive biometric data.
• Journal reminders are scheduled on your phone. Nothing about them is sent to us.
• Your sign-in token is kept in the phone's secure storage (Keychain or Keystore).

Cookies

The website uses only strictly necessary cookies: one that keeps you signed in, and one that remembers the rules you set while trying the demo. No analytics or advertising cookies.

How we use it

• To run the analysis you ask for: the Ghost, exits, discipline, practice and rule testing all run on your own records.
• To keep your account secure and the service working.
• We do not use your trades to give investment advice, and we never place trades or move money.

Where the GDPR or similar laws apply, we process your account and trading records to perform our contract with you (providing the service), and security logs and rate limiting on the basis of our legitimate interest in keeping accounts safe. Optional AI explanations rely on your consent, which you give each time you tick the box.

Optional AI explanations

On the website, the Intelligence page can ask a language model provider (Anthropic) to re-word a computed answer. This only happens when you tick the opt-in for that question, and only aggregated results and trade identifiers are sent, never your uploaded file. If you never tick it, nothing is sent.

Who processes data for us

• Vercel (hosting) and Neon (database), which store and serve the service.
• Apple and Google for in-app purchases, and RevenueCat to confirm subscription status.
• Anthropic, only for the optional explanations above.

These providers are based in the United States, so your data is processed there. Where the law requires, transfers rely on the providers' Standard Contractual Clauses or the EU-US Data Privacy Framework.

Your rights

You can ask to access, correct, export or delete your data, or object to or restrict how we use it. Most of this you can do yourself in the app or on the website. For anything else, contact us below and we will respond within 30 days. You can also complain to your local data protection authority.

California residents: in the past 12 months we collected identifiers (email, account ID), commercial information (subscription status) and the trading records you chose to upload, for the purposes above. We do not sell or share personal information for cross-context behavioral advertising, and we honor Global Privacy Control signals. You will not be treated differently for exercising your rights.

Your choices

• Delete everything: in the app go to You, then Delete account and data; on the website go to Settings, then Delete everything. Deletion is immediate and removes your account, trades, imports, rules, notes and log. See how to delete your account.
• Remove one import: Settings on the website lists every import and can remove it.
• Questions or requests: the support email listed on this page once published.

Retention and security

We keep your data while your account exists and delete it when you delete the account. Data is sent over HTTPS, and every request is limited to the signed-in account on the server.

Children

OFYE GHOST is not intended for anyone under 18.

Changes

If this policy changes in a meaningful way we will update the date above and tell you in the app.