Privacy Policy
Version 1.0 — Effective 4 August 2026This is the same policy the app asks you to accept at sign-up. See also the Terms & Conditions and Risk Disclaimer.
1. What we collect
1.1 Account data: the email address and display name provided by your Apple or Google sign-in, your sign-in provider identifiers, and the country you select at sign-up (or, once you subscribe, the country reported by your app store).
1.2 Content you create: your strategies and their conditions, watchlists, applications of strategies to instruments, and settings (theme, digest timing, notification preferences).
1.3 Service activity: your alert history and the evaluation results behind it, backtest requests and results, and match/ranking data computed for your configurations.
1.4 Device data: push notification tokens for your devices, and the app version and platform.
1.5 Subscription data: your plan, subscription status, renewal state, store identifiers for your subscription, and an append-only history of subscription lifecycle events (for example "subscribed", "renewed", "cancelled renewal", "refunded"). We never receive or store card or payment details — payment is handled entirely by Apple or Google.
1.6 Promotion records: which promotional codes you redeemed, when, and the sign-in identity and email that redeemed them (kept to enforce one-redemption-per-person; see 5.3).
1.7 Legal acceptance records: which version of the Terms, this policy, and the Risk Disclaimer you accepted, when, from which app version, the email on the account at the time, and a best-effort IP address (kept as evidence of acceptance; see 5.3).
1.8 Technical logs: request identifiers, timestamps, and operational events, used to run and support the Service.
1.9 We do not collect: payment card details, precise location, your contacts, or advertising identifiers. The Service contains no third-party advertising or analytics SDKs.
2. Why we process it (and legal bases where applicable)
2.1 To provide the Service you asked for — evaluating your strategies, sending your alerts and digests, showing your history, honouring your plan (performance of our contract).
2.2 To operate billing entitlements from store events (performance of our contract).
2.3 To prevent fraud and abuse — including enforcing one-promotion-per-person and detecting misuse of the Service (our legitimate interest in running the Service honestly).
2.4 To keep evidence of what you agreed to and of subscription events (our legitimate interest in, and where applicable legal obligation of, establishing and defending legal claims).
2.5 To communicate with you about the Service itself. We do not send marketing without a separate choice, and we never sell your personal data.
3. Who receives it
3.1 Apple and Google: sign-in, billing, and push notification delivery (APNs and Firebase Cloud Messaging) as independent services you also have a relationship with.
3.2 Our hosting and infrastructure providers, acting on our instructions.
3.3 Market data providers receive no personal data from us.
3.4 Authorities or advisers where required by law or to establish or defend legal claims.
3.5 A buyer or successor in a business transfer, under this policy, with notice to you.
4. International transfers
Your data is stored on our hosting infrastructure and may be processed outside your country. Where a transfer requires safeguards (for example from the UK), we rely on recognised mechanisms such as adequacy decisions or standard contractual clauses. Details are available on request.
5. How long we keep it
5.1 While your account is active: for as long as needed to provide the Service. Alert history is kept for your plan's retention window and then removed by scheduled cleanup.
5.2 When you delete your account: your account is closed immediately and permanently; strategies, watchlists, applications, and device push tokens are removed from service at deletion, and the remaining account data is scrubbed on a scheduled cycle.
5.3 Exceptions that survive deletion, kept separate and used for nothing else: (a) legal acceptance records (1.7) — up to 15 years after account deletion; (b) subscription event history (1.5) — up to 15 years after account deletion; (c) promotion redemption records (1.6) — for the life of the promotion scheme. The 15-year period is set by the longest limitation period for contract claims among our launch countries (Ontario, Canada's 15-year ultimate period); these records exist to prove what was agreed and what occurred if a claim is ever made (see UK GDPR Article 17(3)(e) and equivalents), and access to them is restricted to that purpose.
6. Your rights
6.1 Everyone, regardless of region: you can export everything we hold about you from the account screen (delivered as a machine-readable file), correct your settings in the app, and delete your account in the app.
6.2 United Kingdom: under UK GDPR you have rights of access, rectification, erasure (subject to the retention exceptions in 5.3), restriction, portability, and objection, and the right to complain to the Information Commissioner's Office (ico.org.uk).
6.3 Australia: under the Privacy Act 1988 (Cth) and the Australian Privacy Principles you may request access and correction, and complain to the OAIC (oaic.gov.au).
6.4 Canada: under PIPEDA you may request access and correction, and complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
6.5 Singapore: under the PDPA you may request access and correction, and complain to the PDPC (pdpc.gov.sg).
6.6 United States: depending on your state you may have rights of access, deletion, and correction; we honour access and deletion requests for all US users as described in 6.1.
6.7 To exercise any right that the in-app tools do not cover, contact support@sixone8.app. We may need to verify you control the account before acting.
7. Security
Data is encrypted in transit; access is restricted and logged; we hold no payment card data at all. No system is perfectly secure — if a breach affects you and the law requires notice, we will notify you and the relevant authority.
8. Children
The Service is for adults (18+). We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.
9. Changes to this policy
When we publish a new version, you will be asked to accept it in the app before continuing, and the version and time of your acceptance are recorded.