Privacy Policy

Browsing the site — including the live cockpit and Market Pulse — requires no account and no personal data. We only collect personal data when you voluntarily submit one of our two forms:

• Full name
• Email address
• Profile type (e.g. retail trader, investor)
• Preferred platform (iOS / Android) and, optionally, the store account email used to distribute beta builds
• Any optional message you write
• An approximate country, taken from your browser’s language setting or from a country code our hosting adds — never from your IP address

Separately, our hosting provider records standard server access logs (IP address, browser type, pages requested, timestamp). We use Google Analytics 4 for anonymous, aggregated traffic statistics, and Iubenda to manage cookie consent.

Where we need to rate-limit form submissions, we store a salted one-way hash of the IP address rather than the address itself, so the original cannot be recovered from our records.

Everything above describes the website. The mobile app is a different product with an account behind it, and it collects the following.

• Your sign-in identity — email address, and a phone number if you choose to add one. If you sign in with Google or Apple we receive the email address associated with that account and nothing else from it.
• Your profile — the email and phone on record, whether you opted in to product emails, which sign-in method you used, and the date the account was created.
• An account identifier issued by Firebase, which is how your subscription and your alerts are attached to you rather than to a device.
• Your subscription state — status, trial dates, renewal dates.
• Your purchase history, held by RevenueCat, our subscription provider. We never receive your card or payment details: the purchase is made by Google Play or the App Store, and we are told only whether it succeeded.
• Push notification tokens for the devices you have signed in on, so we can send you signal alerts. Notifications are opt-in at the operating-system level.
• Which paywall screens you saw before subscribing, so we can tell which explanations actually help people decide.
• App interaction events and an installation identifier, through Firebase Analytics, for aggregate usage statistics.

The app does not collect your location, contacts, photos, files, calendar, microphone, health data or browsing history. It does not read anything from your device that is not listed above.

Legal basis. Your account, subscription and the alerts you asked for are processed to perform our contract with you (Article 6(1)(b) GDPR). Product emails and analytics rest on your consent (Article 6(1)(a)), which you can withdraw in the app or by writing to us.

Who processes it. Google (Firebase — authentication, database, push, analytics) and RevenueCat (subscriptions). Both act as our processors under contract.

Deleting it. You can delete your account and this data from Profile → Delete account in the app, or by email if you no longer have the app. Both routes, and what survives deletion, are on the Delete Your Account page.

• To respond to your beta access or launch notification request
• To distribute beta builds via TestFlight (iOS) or Google Play internal testing, using the store email you provide
• To send you product updates about SmartSignals — you can unsubscribe at any time
• To understand aggregate usage patterns and improve the product

We do not sell your personal data. We do not use it for automated decision-making or profiling, and we do not share it with advertising networks.

For users in the European Economic Area, our legal basis for processing is your explicit consent, given when you submit a form (Article 6(1)(a) GDPR). You may withdraw that consent at any time by emailing us; withdrawal does not affect the lawfulness of processing carried out beforehand.

Form submissions are written to a MySQL database and an access-controlled file on our IONOS server (located in the European Union), and delivered to our internal email address. Both storage locations are blocked from public web access at the server level. All data in transit is encrypted over HTTPS, and outbound email is sent over authenticated TLS-secured SMTP.

We retain personal data for as long as necessary to fulfil the purpose it was collected for — managing the beta programme — and in any case no longer than three years from your last interaction with us. Server access logs and analytics data are retained according to the providers' standard retention windows.

Under the GDPR and comparable laws you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted (the "right to be forgotten")
• Object to, or ask us to restrict, processing
• Receive your data in a portable format
• Lodge a complaint with your local data protection authority

To exercise any of these, email hello@smartsignals.ai. We respond within 30 days.

We use cookies for analytics (Google Analytics 4) and consent management (Iubenda). The live cockpit sets no cookies of its own. You can manage your preferences at any time via the cookie banner or in our Cookie Policy.

Services that process data on our behalf, or whose content we load:

• IONOS — web hosting, database and email delivery (EU)
• Google Analytics 4 — anonymous usage analytics
• Iubenda — cookie consent management
• Google Fonts — webfont delivery
• CoinGecko — market price data shown on the cockpit (no personal data is sent)
• OpenAI — generates the Market Pulse commentary from public news; no user data is sent

SmartSignals publishes automated posts about its own trading signals and market readings to public social accounts. Those posts contain market data only. No personal data of site visitors or beta applicants is ever included in, or used to target, a social post.

We may update this policy as the product changes. The "Last updated" date above reflects the current version. Continued use of the site after a change constitutes acceptance of the updated policy.

For any privacy question, contact hello@smartsignals.ai.