Privacy
Privacy
What leaves your computer, when it starts leaving, and what never leaves at all.
01Where your journal lives
Until you sign in it is one file in your own Application Support folder and there is nowhere else it exists. When you sign in, the same record is kept on our server as well, because that is what lets the web app and a second computer show the trades you entered on the first. Signing in is the moment that changes; nothing is uploaded before it.
02What is never sent, signed in or not
Anything that could move money stays on your machine: broker credentials, account numbers, the connection that places orders, and your open positions. The server holds the record of trades you have already made. It cannot reach your broker and is not given the means to.
03Your screenshots and recordings never leave
Charts you attach and screens you record stay in a folder on your own computer. Nothing uploads them, and there is no copy of them on our server to lose, hand over or leak. What crosses is the row: which trade the picture belongs to, what it is called and the caption you wrote, so a browser can tell you the picture exists and where it is. The exception is the coach, which you switch on yourself: if you send it a chart it goes to the provider whose key you supplied, and the app shows you exactly what would be sent before it sends it.
04What the account itself holds
Signing in with Google tells us your email address and nothing else from your Google account. Alongside it we keep your subscription status and receipt history, which is what selling software requires. We do not sell, share or rent any of it.
05The coach, which you switch on
If you set up the coach with your own API key, the messages you type and a summary of your trades are sent to that provider so it can answer. Nothing is sent until you send a message, the app shows you the exact text beforehand, and the key is stored in your Mac’s Keychain. Delete the key and that stops entirely.
06Your broker connection is local
Where the app talks to a broker it does so through a helper running on your own machine, over the loopback interface, which by definition cannot leave the computer. Your credentials are yours; this app never sees or stores them, and no part of them is sent to us.
07Payments
Card details are handled by Stripe and never touch this app or any server we run. What we see is that a payment succeeded, for which subscription, and the last four digits on the receipt.
08Tracking: none in the app, counts on the website
The Mac app contains no analytics, no advertising identifiers and no third-party SDKs. Nothing reports what you look at or how long you spend there, and crash reports are written to a file on your Mac for you to read or send if you choose to. The website counts nothing at present: page-view and load-time measurement is switched off while the site is in development, so degenpro.com sends no analytics beacon at all. If that changes it will be counts only โ page views and load times through Vercel, our host, with no cookie and no profile built about you โ and this paragraph will say so before it does.
09Getting your data out, or deleting it
Settings has an Export button that writes every trade as CSV, and it works even when a subscription has lapsed. Deleting the local copy is deleting the file. Deleting the server copy is asking us, at the address on the support screen, and it is done within thirty days along with the account.
These are the same words the app itself shows, in Settings. If the two ever differ, the app is right and this page is a bug — tell us and we will fix it.