Diplog ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

We collect information you provide directly to us, including:

• Account information: email address, and name (if you sign in with Apple or Google — password is never visible to us with social sign-in)
• Journal entries: trade setup checklists, entry/no-entry decisions, financial details (P&L, position information) you log
• Chart images: photos you attach to a journal entry from your device library
• Voice-derived text: your spoken pre-trade and post-trade reflections are transcribed to text on your device; we do not store or transmit the raw audio recording
• AI-generated content: trading plans and reflection summaries generated from your journal/voice-transcript input
• Trading rules and settings you configure (e.g. daily trade limits)
• Purchase and subscription status, synced via RevenueCat

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate AI-powered trading plans and reflection summaries from your journal and voice-transcript input
• Manage your subscription and billing via the Apple App Store, Google Play, and RevenueCat
• Respond to support requests
• Comply with legal obligations

We do not process, capture, or store your raw credit card details or bank account information on our servers. All payments are handled directly by Apple (App Store) or Google (Google Play), depending on your device. We use RevenueCat to manage subscription status and entitlements across platforms — RevenueCat receives purchase receipts but never has access to your payment card details.

RevenueCat's privacy practices are governed by their own Privacy Policy, and Apple/Google's data handling is governed by their own respective privacy policies.

Your data is stored securely using Supabase (PostgreSQL) and Supabase Storage (for chart images), hosted on infrastructure compliant with industry security standards. Row Level Security (RLS) policies ensure each user can only access their own data.

We use the following third-party services:

• Apple Sign-In / Google Sign-In — authentication only; we never receive or store your Apple or Google password
• Apple App Store / Google Play — payment processing for subscriptions
• RevenueCat — subscription management and entitlement synchronization across platforms
• Anthropic (Claude AI) — generates AI trading-plan and reflection insights from your journal text and voice transcripts. Anthropic processes this data as our service provider and does not use it to train their models
• Vercel — hosting for our website (including this policy)

We retain your data for as long as your account is active. Upon account deletion, your data is immediately deleted.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing activities

To exercise any of these rights, contact us at rlfgus8708@gmail.com.

Diplog is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the Service. Continued use after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, please contact us at rlfgus8708@gmail.com.