Privacy Policy

Version 1.0.0 · Effective 2026-04-18

Last Updated: April 18, 2026

Version: 1.0.0

This Privacy Policy explains how Provision Tech Advisors LLC ("TradeStreak", "we", "us") collects, uses, shares, and protects personal information when you use the TradeStreak mobile application and related services (the "Service"). It is a companion to our Terms of Service.

1. Who We Are

TradeStreak is a Virginia limited liability company providing an educational investing platform. Mailing address: 11600 Heronview Dr, Fredericksburg, VA 22408, USA. Privacy contact: privacy@tradestreak.app.

2. Information We Collect

2.1 Information you give us

• Account. Name, email address, password (stored as a bcrypt hash — we never see your plaintext password), date of birth (age-gate only; not stored long-term).
• Profile. Display name, avatar, optional bio.
• Brokerage linking (optional). If you choose to connect an external broker, we receive read-only tokens and encrypted account identifiers from our aggregator (currently SnapTrade). We never receive, store, or have access to your broker password.
• Goals and preferences. Your experience level, primary goal, learning pace, and other onboarding answers used to personalize the Service.
• Subscription. Apple StoreKit transaction IDs and receipt metadata when you purchase a Pro Subscription. We do not see your credit-card number — Apple handles payment.
• Communications. Any message you send us (support requests, feedback).

2.2 Information we collect automatically

• Device. Model, operating-system version, language, IP address, approximate location derived from IP, advertising identifier (if you have not opted out at the OS level), app version, crash logs.
• Usage. Which lessons and scenarios you open, how long you spend, XP earned, streaks, quiz answers, scenario decisions, in-app interactions, notification opens.
• Cookies / local storage. We use on-device storage for session tokens, cached content, and product settings. The Service does not use cross-site web cookies.

2.3 Information from third parties

• Apple. When you sign in with Apple, we receive your Apple-supplied stable user ID and, if you consent, your name and a private relay email.
• Brokerage aggregator (SnapTrade). Read-only snapshots of your linked account's holdings, cost basis, and activity history. You can revoke this at any time.
• Market data providers. Polygon.io and Financial Modeling Prep provide quote, historical-price, and reference data. These providers do not receive identifiable user information from us.
• Analytics / crash reporting. Apple TestFlight / App Store Connect may share aggregate crash-rate telemetry. We do not operate any additional third-party analytics at this time.

2.4 What we do NOT collect

• We do not collect biometric data (Face ID / Touch ID never leave your device).
• We do not collect precise GPS location.
• We do not sell personal information (see Section 8).
• We do not use tracking pixels or build cross-app advertising profiles.

3. How We Use Information

We use the information we collect to:

• Create and maintain your account;
• Provide, personalize, and improve the Service;
• Deliver daily market briefings, streak reminders, and other opted-in push notifications;
• Process subscription purchases (via Apple) and restore entitlements;
• Enforce our Terms of Service, detect fraud and abuse, and protect the safety of the Service and our users;
• Respond to your support requests;
• Comply with legal obligations, including tax, accounting, and record-keeping requirements;
• Develop new features (including aggregated, de-identified analytics of how lessons are used).

4. Legal Bases (for users in the EEA/UK)

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal information under the following legal bases of the GDPR / UK GDPR:

• Contract (Art. 6(1)(b)) — to deliver the Service you signed up for.
• Legitimate interests (Art. 6(1)(f)) — to secure the Service, prevent abuse, develop features, and maintain aggregated product metrics.
• Consent (Art. 6(1)(a)) — for push notifications, optional brokerage linking, and any future marketing emails.
• Legal obligation (Art. 6(1)(c)) — to keep financial/tax records and respond to lawful government requests.

5. How We Share Information

We share information with:

• Service providers who process data on our behalf: Amazon Web Services (hosting + database), Anthropic (AI generation — we strip personally identifiable information from prompts where practical), Apple (sign-in, payments, push delivery).
• SnapTrade when you link a brokerage account (aggregator holding the OAuth tokens on your behalf).
• Professional advisers (lawyers, accountants, auditors) under confidentiality obligations.
• Successors in connection with a merger, acquisition, or sale of assets — with notice to you and the same protections or better.
• Law enforcement / regulators when required by law, subpoena, or court order, or to protect the rights, property, or safety of TradeStreak, users, or the public. We push back on overly broad requests.

5.1 We do not sell personal information

We do not sell or "share for cross-context behavioral advertising" (as defined by the California Consumer Privacy Act) any personal information. We do not operate an ad network.

6. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email privacy@tradestreak.app and we will delete the account and any data collected.

For users aged 13 to the age of majority in their jurisdiction, a parent or guardian should review these policies with the user before they accept.

7. Your Rights and Choices

7.1 All users

• Access. Request a copy of the personal information we hold about you.
• Correction. Update your profile at any time from the Settings screen or by contacting us.
• Deletion. Delete your account from in-app Settings. Deletion removes your profile and associated records; aggregated/de-identified analytics may persist.
• Export. Request an export of your data in a portable format.
• Push notifications. Opt in or out of push notifications in the iOS Settings app.
• Brokerage linking. Revoke read-only access in the app's Trade → Brokers screen, or directly with SnapTrade.

7.2 California residents (CCPA / CPRA)

You have the right to:

• Know what personal information we collect and how we use it (this Policy);
• Access a copy of your personal information;
• Request deletion;
• Correct inaccurate information;
• Limit use and disclosure of sensitive personal information (we do not collect any that would trigger this right beyond what's required to deliver the Service);
• Not be discriminated against for exercising these rights.

We respond to verified requests within 45 days. Submit requests to privacy@tradestreak.app. We will verify your identity using information we already hold about you (typically by sending a confirmation email to the address on file).

7.3 EEA / UK / Swiss residents (GDPR / UK GDPR)

You have the rights above plus the right to lodge a complaint with your local supervisory authority. Our EU representative is not yet appointed; we do not currently market to or target the EEA or UK. If and when we begin marketing there, we will appoint an EU representative under Article 27 GDPR and update this Policy.

7.4 Other U.S. state privacy laws

If you reside in a state with a comprehensive privacy law (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others), you have substantially equivalent rights. Email privacy@tradestreak.app to exercise them.

8. Data Retention

We retain personal information for as long as your account is active and for a reasonable period after deletion to:

• Comply with legal, tax, and accounting obligations (generally seven years);
• Resolve disputes;
• Enforce our agreements;
• Maintain the integrity of the leaderboard, achievements, and other social features.

After the retention period, personal information is deleted or aggregated / de-identified.

9. Security

We use industry-standard safeguards to protect personal information:

• TLS 1.2+ for all network traffic;
• Encryption at rest for databases (AWS KMS-managed keys);
• Bcrypt password hashing;
• Role-scoped IAM permissions on the backend;
• Audit logging of administrative access.

No system is perfectly secure. We encourage you to use a strong, unique password and to enable iOS Face ID / Touch ID for app access.

If we suffer a data breach affecting your personal information, we will notify you and any applicable authority in accordance with applicable law.

10. International Transfers

TradeStreak is based in the United States, and our primary infrastructure runs on Amazon Web Services in the US. If you access the Service from outside the US, your information will be transferred to, processed, and stored in the US under U.S. law. For EEA/UK transfers, we rely on the EU-U.S. Data Privacy Framework (and/or Standard Contractual Clauses where the Framework does not apply). Contact us for a copy of the applicable transfer mechanism.

11. Automated Decision-Making

We do not use automated decision-making (including profiling) that produces legal or similarly significant effects on you.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you in-app and by email. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy. The "Last Updated" date at the top of this Policy reflects the current version.

13. Contact

Privacy questions, rights requests, or complaints: privacy@tradestreak.app

Mailing address: Provision Tech Advisors LLC, 11600 Heronview Dr, Fredericksburg, VA 22408, USA