Effective date: 28 August 2026 Last updated: 28 August 2026
1. Who we are
Trading Practice (“we”, “us”, “our”) operates the Trading Practice app and this website.
For any question about this policy or about your data, contact us at privacy@tradingpractice.io. We respond within 30 days.
Trading Practice is an educational trading simulator. It is not a broker, does not hold funds, does not execute real trades and does not provide investment advice.
2. The short version
Trading Practice has no user accounts. You do not register, and we never ask for your email address or your name.
Your lessons, your simulated trades, your journal and your settings are stored only on your device. We cannot see them, we do not back them up, and they are not synchronised anywhere. If you delete the app, they are gone.
The app requests no permissions at all — no camera, no photos, no location, no contacts, no microphone.
The only thing that leaves your device is anonymous usage analytics, and you can switch that off.
This policy also covers this website, which is a separate thing from the app and collects a little less — see 3.6.
3. What we collect
3.1 What we do not collect
We do not collect your name, your email address, or any other contact detail — nothing in the app asks for them. We do not collect payment details; the app is free and has no in-app purchases. We do not collect your location, your contacts, your photos, your camera or your microphone, and the app does not ask for permission to any of them. We do not use advertising networks, we do not track you across other companies’ apps or websites, and we do not sell or share personal data for behavioural advertising.
3.2 What stays on your device
The following is created by you and never leaves your device. We have no copy of it and no way to obtain one.
| Data | Where it lives |
|---|---|
| Lesson progress, quiz scores, saved cards, learning streak | Your device only |
| Simulated trading activity — virtual positions, entries, exits, sizes, simulated results | Your device only |
| Trading journal, including any notes and tags you write | Your device only |
| Discipline session history | Your device only |
| Your settings, including language and the analytics choice | Your device only |
3.3 A device identifier
On first launch the app generates a random identifier for your installation and stores it on your device. It is not derived from your hardware and is not linked to you as a person.
Its only use is as the identity reported to analytics, described below, and it is sent only in a hashed form. If you switch analytics off, it is not sent anywhere at all. You can replace it at any time with Settings → Privacy → Reset all data.
3.4 Anonymous usage analytics
If analytics are enabled, we record which screens are opened and which features are used, together with your app version, device model and operating system version, through Firebase Analytics (Google).
Alongside those events we send a small set of derived signals — for example how many journal entries exist, whether a daily goal is set, and how long ago the app was first opened. These are counts and yes/no flags computed on your device; the underlying lessons, trades and notes are never sent.
Events are tied to a hash of the device identifier from 3.3 and to a resettable identifier generated by Firebase.
You can switch all of this off at any time in Settings → Privacy → Share anonymous analytics. That flips Firebase’s own collection switch, so its automatic events stop too, not just ours.
3.5 What our servers store about you
Nothing.
The app makes one request of its own: it downloads the public list of partner brokers shown in your profile. That request carries no identifier. As with any request to any website, the server can see the network address it came from; we do not record it or associate it with anything.
3.6 This website
Visiting tradingpractice.io is not the same as using the app, and the two do not share anything.
The site is hosted by Vercel, which keeps standard server logs — including your network address — for a short period, as any web host does. It also runs Vercel Web Analytics, which counts page views and a handful of deliberate interactions: which language you switch to, and which download button you press.
That analytics is cookieless. It sets no cookie, stores nothing on your device and does not build a profile of you or follow you to other sites, which is why this site has no cookie banner to click away.
The site has no login, no forms and no comment fields, so there is nothing here for you to submit to us.
4. Third parties
We share data only with the providers below, only to the extent needed for them to perform their function, and only under contracts requiring them to protect it.
Every third party with whom we share user data — including analytics tools and third-party SDKs, and any parent, subsidiary or related entity with access to user data — is required to provide the same or equal protection of user data as stated in this privacy policy.
| Provider | What they receive | Purpose | Where | Their policy |
|---|---|---|---|---|
| Google (Firebase Analytics) | A hash of the device identifier, a Firebase-generated resettable identifier, product interaction events, the derived signals in 3.4, app version, device model and OS version | Product analytics, only while analytics are enabled | United States and other countries where Google operates | https://firebase.google.com/support/privacy |
| Supabase | Nothing about you. It hosts the public broker list the app downloads | Hosting | Not applicable — receives no data about you | https://supabase.com/privacy |
| Vercel | Website visits only, never anything from the app: your network address in server logs, plus cookieless page-view and interaction counts | Hosting and analytics for tradingpractice.io | United States and other Vercel regions | https://vercel.com/legal/privacy-policy |
We do not use an AI provider, a crash-reporting provider, an advertising network, an attribution provider, or an email provider — the app sends no email.
4.1 Links to third-party sites
The app contains links to partner brokers and to their app store listings. Following one takes you to a service we do not operate and whose privacy practices are their own. We share no data about you with them; they see only what your browser or the App Store discloses to any visitor. A link is not a recommendation to open an account or to trade with real money.
5. Legal basis for processing (EEA and UK users)
| Purpose | Legal basis |
|---|---|
| Providing the app itself | Performance of a contract (Art. 6(1)(b) GDPR) |
| Usage analytics | Your consent (Art. 6(1)(a)) — withdrawable at any time in Settings → Privacy |
| Meeting legal obligations | Legal obligation (Art. 6(1)(c)) |
6. How long data is kept
| Data | Retention |
|---|---|
| Everything in section 3.2 | On your device, until you erase it or delete the app. We never receive it |
| Usage analytics | 14 months, in pseudonymised form, per Firebase’s retention setting |
| Website visits | Vercel’s server logs and aggregate visit counts, kept for Vercel’s own retention period. There is nothing in them that identifies you |
We hold no account record, so there is nothing for us to delete on request and no deletion queue to join.
7. Your rights and how to use them
Because we hold almost nothing about you, these are actions you take in the app rather than requests to us.
- Erase everything on your device — Settings → Privacy → Reset all data. This deletes your lessons, journal, trades and settings, and replaces the device identifier. It cannot be undone and there is no backup.
- Withdraw consent for analytics — Settings → Privacy → Share anonymous analytics.
- Access, correct, port, object or restrict — email privacy@tradingpractice.io. Note that we cannot identify you from what little we hold, so we may need the device identifier, which you can copy by holding the version row in Settings.
- Complain to your data protection authority. In the EEA this is your national supervisory authority; in the UK, the Information Commissioner’s Office (ico.org.uk).
We do not charge for any of this and do not require you to contact support to erase your data — it is available directly in the app.
8. Users upgrading from an earlier version
Earlier versions of Trading Practice had accounts and stored progress on our servers. If you are upgrading from one of those versions, the first launch of this version does two things, once:
- copies your existing lesson progress, saved cards, daily goal and journal onto your device, so you do not lose them; and
- deletes the sign-in token from your device. Your email address was only ever held inside that token, so deleting it removes your email from the device.
After that the app never contacts those servers again. The stored records from the account era are deleted on our side by 30 November 2026. To have them deleted sooner, email privacy@tradingpractice.io.
9. International transfers
Analytics data may be processed in the United States and in other countries where Google, Vercel or their sub-processors operate. Where data leaves the EEA or the UK we rely on the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum, as incorporated into Google’s data processing terms. You can request a copy of the safeguards by emailing us.
10. Security
Data in transit is encrypted with TLS. The device identifier is stored in the operating system’s secure storage — Keychain on iOS, Keystore on Android — and is marked so it is not carried into cloud backups. No system is perfectly secure; if a breach affects your data and creates a risk to you, we will notify you and the relevant authority as required by law.
11. Children
Trading Practice is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with data, contact privacy@tradingpractice.io and we will delete it.
12. Changes to this policy
If we change this policy we will update the “Last updated” date above and, where the change is material, notify you in the app before it takes effect.
13. Contact
Trading Practice Email: privacy@tradingpractice.io