Privacy Policy
Effective date: October 22, 2026
myTDJournal ("we", "us") is a web-based trading journal available at https://mytdjournal.com. This policy explains what personal data we collect, why, and what we do with it. Contact: support@mytdjournal.com.
What we collect
- Account data: your email address and a password (stored only as a secure hash by our authentication provider). If Google sign-in is enabled, your Google account email.
- Journal data you enter: trades, accounts, notes, trading rules, risk limits, daily reviews, and any images or screenshots you attach to a day.
- Purchase data: when you buy, our payment provider, Creem, collects your payment details and billing information and tells us your email address and the order reference so we can activate your access. We never see or store your card number.
- Technical data: basic server logs (such as IP address and browser type) created by our hosting and database providers for security and reliability.
How we use it
- To provide the app, keep your journal in the cloud, and sync it across your devices.
- To verify your purchase and activate or revoke your access.
- To answer support requests and send essential account emails (confirmation and password reset).
We do not sell your personal data, we do not use it for advertising, and we do not use your journal data to train AI models. We do not use advertising or tracking cookies.
Screenshot import
When you import trades from a screenshot, the image is read by software running inside your own browser. The image is not sent to a server for reading. A screenshot is stored only if you attach it to a trading day.
Who processes your data
- Supabase (database and authentication).
- Cloudflare (website hosting and delivery).
- Creem (payments, acting as merchant of record).
These providers process data only to deliver their services to us. We may also disclose information if required by law.
Storage and retention
Your data is kept while your account is active. You can export a backup of your journal from the app. To delete your account and all data, email support@mytdjournal.com from your registered address and we will delete it within 30 days, except records we must keep for legal or tax reasons (such as purchase records, held by our payment provider).
Your rights
You can ask to access, correct, export, or delete your personal data at any time by emailing support@mytdjournal.com. If you live in the EU/UK or California, you may have additional rights under local law, and we will honor valid requests.
Security
Data is transmitted over HTTPS and protected by per-user access rules in the database, so one user cannot read another user's journal. No system is perfectly secure, and we cannot guarantee absolute security.
Children
myTDJournal is not intended for people under 18, and we do not knowingly collect their data.
Changes
We may update this policy. The effective date above shows the latest version, and material changes will be announced on this website or by email.
Contact
myTDJournal – support@mytdjournal.com