Privacy Policy

This Privacy Policy sets out the rules for processing and protecting the personal data of Users of the Wick: Trade Journal application (the "App"), available at wickapp.online and as an app on Google Play.

§1. Data Controller

The controller of the personal data of App Users is the creator of the Wick app.

§2. What data we process

Registration data: email address, password (stored only in hashed form), optionally a username. When signing in with Google: email and Google account identifier.

Data entered in the App: trading accounts (name, capital), trades (symbol, direction, date, result, RR, confidence), notes, and screenshots (up to 5 per trade).

Technical data: IP address, browser type, operating system, collected automatically by the hosting infrastructure.

Local data (localStorage): theme, language, session token, selected account, which never leave your device except to the parties listed below.

§3. Legal basis for processing

Performance of the service contract (Art. 6(1)(b) GDPR), consent for optional features such as notifications (lit. a), and legitimate interest regarding the security of the App (lit. f).

§4. Who we share data with

• Supabase, Inc. — database, authentication, server functions
• Google LLC — Google sign-in
• Resend — transactional email delivery (registration confirmation, password reset)

Data may be transferred outside the European Economic Area under standard contractual clauses. We never sell your data or share it for marketing purposes.

§5. How long we keep your data

Until the User deletes their account (Profile tab in the App). Deletion is immediate and irreversible, unless the law requires longer retention.

§6. Your rights

Access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, and the right to lodge a complaint with the President of the Personal Data Protection Office (UODO). Access, rectification, and erasure can be done yourself from the Profile tab in the App.

§7. Security

TLS/HTTPS encryption, passwords stored only in hashed form, row-level access control (Row Level Security). Only you can see your data.

§8. Cookies and similar technologies

The App does not use advertising cookies or tracking technologies. It only uses localStorage necessary for the App to function (session, preferences), see §2.

§9. Children's data

The App is not directed at individuals under the age of 18, and the Controller does not knowingly collect personal data from such individuals.

§10. Changes to this Policy

The Controller reserves the right to make changes to this Policy. Users will be informed of material changes through the App or the email address associated with their account.

§11. Contact

Any questions regarding this Policy or the processing of personal data should be directed to: wickjournalapp@gmail.com