Security & data
Read-only, by construction.
Connecting a brokerage to anything is a real decision. Here is exactly what happens, what is stored, and what never moves — in plainer terms than the Privacy Policy, which says the same things more formally.
Never stored, never seen
Where your broker login goes.
It reaches your broker. It does not reach us — not encrypted, not hashed, not briefly. There is no field for it anywhere in the product.
- Your brokerYou sign in here, on the broker’s or SnapTrade’s own screens. Your login stays on this side.
- Read-only · revocable
- SnapTradeThe aggregator. Holds the link and enforces read-only access.
- Trade history only
- TradeonomistStores it under your account. Database rules let you read your rows and nobody else’s.
- Your rows
- YouYour trades, rules and Score, and nothing about anyone else.
What never leaves
- No trading permission
- No money movement
- No data sale
- No analytics or advertising SDK
What reaches an AI provider
- The reflection you write, to pull out the trades
- A picture you choose to have read
- For the coach: a summary of your own record and your question
Only when you use those features.
Enforced by the aggregator
What the connection cannot do.
Your broker login
You enter credentials on your broker’s or SnapTrade’s own screens. Tradeonomist holds a connection reference and nothing else — no username, no password, no two-factor codes.
Placing a trade
Access is requested as read-only. Nothing in the codebase touches an order API, and the constraint is applied at the aggregator, which is what actually makes it true.
Moving money
No funding, no withdrawal, no transfer. There is no path to your cash from anything this app can do.
Disconnecting
One tap in the app revokes the authorisation on SnapTrade’s side too, rather than merely forgetting it here. Trades already imported stay, because they are your history.
Pro sync
How accurate synced trades are.
Canadian cost basis
Sales are priced against the pooled average cost of the identical shares you held, the adjusted cost base Canadian rules require. Stock splits are applied, and holdings moved from a closed account carry over.
Checked against the broker
Every sync compares the holdings the app computed with the positions your broker reports.
The complete list
Everyone who sees anything.
Seven parties, each doing a job you can point at.
| Party | What it does | What it receives |
|---|---|---|
| Supabase | Hosting, database, authentication | All app data lives there |
| Anthropic | Language model: extracts trades from your reflection, reads a picture you choose to have read, and writes AI coach notes and answers | That reflection text or image, or a summary of your own record for the coach, for those purposes only |
| SnapTrade | Brokerage aggregation, only if you connect one | Your broker credentials — which never reach us |
| RevenueCat | Subscription management | A random account ID and your purchase history from the store, nothing about your trades |
| Resend | Sends email, such as the reminder when a push cannot reach you | Your email address and the message |
| Expo | Relays push notifications | A push token and the notification text |
| Apple / Google | Push delivery and billing | A push token; the store handles payment and Tradeonomist never sees your card |
There is no eighth. Crash and error diagnostics stay in Tradeonomist’s own database rather than going to a reporting service, and email addresses, access tokens and long digit sequences are stripped on your device before any error report leaves it. Set a base currency and the rate behind it comes from a public European Central Bank feed — asked by the server, for a pair of currency codes, with nothing about you attached.
Withheld below five people
Comparison without exposure.
Where the app shows how you compare with others, it reports an average across people at your rank — never an individual, never a name, and never anything financial.
Below five other qualifying people the figure is withheld rather than averaged from a handful. A small average is both meaningless and capable of identifying someone.
Exportable, and deletable
Leaving takes one tap.
Everything the app holds is visible inside the app. You can export it as a single structured file, and delete your account from Settings — which removes your profile, reflections, discipline history, trades and lesson progress, and revokes any brokerage connection.
Rights under PIPEDA, the GDPR and US state privacy laws are honoured regardless of where you live. Details in the Privacy Policy.