Privacy Policy for TraderSpy

1. Introduction

TraderSpy ("we," "our," or "the App") provides cryptocurrency trading signals and related tools. We are committed to protecting your privacy and handling your data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, display name, and password (or credentials from sign-in providers such as Apple or Google)
• Subscription & Payment: Payment and billing information processed by third-party payment providers (e.g., Apple App Store, Google Play); we do not store full payment card details
• Preferences: Notification settings, watchlists, alert configurations, and signal preferences

2.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and app version
• Usage Data: Features used, signal views, time spent in the app, and interaction with content (for improving the service and analytics)
• Log Data: IP address, crash reports, and performance data

2.3 What We Do NOT Collect

• We do not collect your cryptocurrency wallet addresses or private keys unless you voluntarily provide them for a specific feature
• We do not have access to your exchange accounts or trading history on external platforms unless you explicitly connect such services

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the TraderSpy app and trading signal services
• Authenticate your account and manage subscriptions
• Send you trading signals, alerts, and push notifications according to your preferences
• Respond to support requests and communicate with you about the service
• Analyze usage to improve user experience, fix bugs, and develop new features
• Comply with legal obligations and enforce our terms of service
• Send service-related and (where permitted) marketing communications

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

• Contract: To perform our agreement with you (e.g., providing signals and subscription access)
• Legitimate Interests: To improve our services, ensure security, and analyze usage in a way that does not override your rights
• Consent: Where you have given consent (e.g., marketing, optional features)
• Legal Obligation: Where required by law

5. Data Sharing and Third Parties

We may share your information with:

• Service Providers: Cloud hosting, analytics, crash reporting, push notifications, and payment processors, under strict data processing agreements
• Sign-in Providers: If you use Apple or Google sign-in, those providers process your sign-in data according to their own policies
• Legal Requirements: When required by law, court order, or to protect our rights, safety, or property

We do not sell your personal information. We do not share your data with third parties for their marketing purposes.

6. Data Retention

• Account and profile data: Retained while your account is active and for a reasonable period after deletion for legal and support purposes
• Usage and analytics data: Typically anonymized or aggregated; raw logs retained only as long as necessary for operations and security
• Payment records: Retained as required by tax and financial regulations
• You may request deletion of your personal data subject to applicable law (see Your Rights below)

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and secure development practices. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal exceptions
• Portability: Receive your data in a structured, machine-readable format
• Object or Restrict: Object to or request restriction of certain processing
• Withdraw Consent: Where processing is based on consent, withdraw it at any time
• Complain: Lodge a complaint with a supervisory authority in your country

To exercise these rights, contact us using the details in the Contact section. We will respond within the timeframes required by applicable law (e.g., 30 days under GDPR/CCPA).

9. International Transfers

Your data may be processed in countries outside your residence. Where we transfer data from the EEA or UK, we ensure appropriate safeguards (e.g., standard contractual clauses or adequacy decisions) are in place.

10. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (subject to exceptions)
• Right to opt out of the "sale" or "sharing" of personal information — we do not sell or share personal information for cross-context behavioral advertising
• Right to non-discrimination for exercising your privacy rights

11. Children's Privacy

TraderSpy is not intended for users under 18. We do not knowingly collect personal information from children. If you believe we have collected such data, please contact us and we will delete it promptly.

12. Push Notifications and Alerts

We use push notifications to deliver trading signals and alerts. You can disable these in your device or app settings. Notification content may include market and signal-related information; we do not use push for unrelated marketing without your consent.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date, and where required by law, by in-app notice or email. Your continued use of TraderSpy after changes constitutes acceptance of the updated policy.

14. Contact Us