Privacy Policy

Last updated: October 1, 2026

This Privacy Policy explains how MyTradAI ("we", "us", "our") collects, uses, and protects your information when you use the MyTradAI iOS application and the website mytradai.com (together, the "Service").

Users in Europe: requests from the European Economic Area, Switzerland and the United Kingdom are answered only by Mistral AI models (Mistral Small), accessed through OpenRouter and run on Mistral's own servers — never by Google Gemini. To route them, our servers look up the country of the IP address each analysis request comes from, using a database held on our own servers; the address is not sent to anyone for the lookup.

1. Information we collect

Account information

• Email address — provided when you sign in with Apple or Google. Used solely to create and operate your account. If you use Apple's "Hide My Email", we only receive the private relay address.
• Account identifier — an internal ID that links your reports and subscription status to your account.

Device and usage information

• Device identifier — an app-generated identifier used to enforce fair free-tier limits. It is not the advertising identifier (IDFA).
• Usage data — the number of analyses you run per day, used to apply free-tier quotas and subscription entitlements.
• Diagnostics — if a report fails to generate, we keep an error log tied to your account so we can fix the problem.

Content you submit

• Tickers you analyze and chart images you upload are sent to our servers to generate your report. Chart images are sent to our AI providers only to produce your analysis; how each provider may handle them is described in section 3.
• Screenshots shared from another app — if you use your phone's Share action on a broker screenshot to send it to MyTradAI, the app tries to detect and black out account numbers, balances and names on your device, before anything leaves your phone. You are shown exactly what will be uploaded and can black out anything else yourself before continuing. This detection is automatic and best-effort, not a guarantee — it is weaker for non-English text, and on Android it cannot read Arabic at all — so review the image before you continue. Once you continue, the image is sent to the AI provider that writes your report (section 3) and is retained the same way as any other chart image (section 6).
• Support messages — if you contact us through Feedback & Support, we receive the message you send and your account email so we can reply.

2. How we use your information

• To operate your account and deliver Stock Analysis and Chart Analysis reports.
• To enforce free-tier quotas and unlock subscription entitlements.
• To respond to support requests and fix errors.
• To keep the Service secure and prevent abuse.

We do not use your data for advertising, we do not sell or rent it to third parties, and we do not track you across other companies' apps or websites.

3. AI processing

Reports are written on our servers by third-party AI models. AI API keys are held server-side and are never present in the app.

Before your first analysis, the app shows which AI providers receive your request and what is sent, and asks your permission. Nothing is sent until you tap Allow. You can withdraw permission anytime in Settings → How AI is used; analysis then stops until you allow it again.

A screenshot you share into MyTradAI from another app is masked on your phone first (account numbers, balances and names are blacked out, and you can black out anything else before sending). It is then sent only to AI providers that do not train on it: Anthropic Claude, which deletes it within 30 days, or Mistral AI through OpenRouter under a zero-data-retention setting. It is never sent to Google Gemini or to OpenRouter's free models.

What is sent, and what is not

• Sent: the ticker, its exchange, the chart image and your app language, together with public market data we gather for that ticker.
• Never sent: your name, email or account.

Who receives it

• Google Gemini — the default model, used on Google's unpaid API tier. Google may use what we submit to improve its products, and human reviewers may read it.
• Anthropic Claude — used for paid plans. Anthropic does not use it to train its models and deletes it within 30 days.
• Mistral AI — used for users in the European Economic Area, Switzerland and the United Kingdom, through OpenRouter. Mistral and OpenRouter handle these requests under their own terms.
• OpenRouter free models — a backup for users outside Europe when the models above are unavailable. The companies hosting these models may log requests and use them to improve or train their models.

AI can make mistakes. Reports are for information only and are not investment advice.

4. Payments

Subscriptions are purchased through Apple's App Store and managed with RevenueCat, our subscription infrastructure provider. Apple processes all payments — we never receive or store your payment card details. RevenueCat receives a transaction identifier and subscription status so we can unlock your entitlements.

5. Third-party services

• Apple — Sign in with Apple, App Store purchases.
• Google — Sign in with Google; Gemini AI models.
• Anthropic — Claude AI models (paid tiers).
• OpenRouter — access to Mistral AI models for users in Europe, and backup access to free open AI models for everyone else.
• Mistral AI — AI models for users in Europe (via OpenRouter).
• DB-IP — IP geolocation by DB-IP, licensed under CC BY 4.0. The database runs on our servers; nothing is sent to DB-IP.
• RevenueCat — subscription entitlement management.
• Market data and news providers — used server-side to gather public market data for your reports; they do not receive your identity.
• TradingView — the in-app chart widget is provided by TradingView and is subject to TradingView's own terms and privacy policy.

6. Data retention

Your account data and saved reports are retained while your account is active. You can delete your account at any time from within the app (Settings → Account → Delete Account) or by contacting us; deletion removes your account data and saved reports from our systems, except where a legal obligation requires longer retention.

7. Security

All traffic between the app and our servers uses HTTPS/TLS encryption. API keys and secrets are stored in server-side secret stores, never in the app. Access to production data is restricted.

8. Children's privacy

The Service is not directed at anyone under 18 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from anyone below that age.

9. Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address below. We will respond within the timeframe required by applicable law.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced in the app or on this page, and the "Last updated" date above will change. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions or requests: [email protected]