Privacy policy
The short version. We hold your email address and what you bought. Your trading journal stays in your own browser and we never receive it, unless you switch on AI coaching and ask us to analyse it. We do not use advertising or analytics trackers, and we set exactly one cookie, to keep you signed in.
What we collect
| What | Why | How long |
|---|---|---|
| Email address | To create your account, send your sign-in link, and email you about your licence. | Until you ask us to delete your account. |
| What you bought and when | To know what you have access to, and to handle refunds and disputes. | Kept as long as we must for tax and accounting records. |
| Sign-in and session tokens | To keep you signed in. Only a one-way hash is stored, never the token itself. | Sign-in links 15 minutes; sessions 90 days. |
| Server logs | To keep the service running and to investigate faults and abuse. | A short rolling window. |
| AI usage records | To enforce your monthly limits and understand what the feature costs to run. This is counts and token totals, not the content of your requests. | Until you ask us to delete your account. |
What stays on your machine
Your journal is written to your own browser first, so a replay session never waits on the network to record a fill. A copy is then stored on our servers against your account: every trade, note and your screen-time totals.
That copy exists so the journal survives. Clearing your browser storage no longer destroys it, and signing in on another machine brings it with you. It also means we can read it, which the browser-only version did not, so the rest of this section says what we do and do not do with it.
Chart snapshots are the exception. Those images stay in your browser and are never uploaded, because they are large and add nothing we need. Clearing your browser storage does delete them.
Anonymised comparison, later
Replay has an unusual property: two people can practise the exact same historical week, bar for bar. We intend to use that, by comparing what people did on identical price action and showing you where your decisions sat among everyone else’s. “Most people who ran this week moved their stop within four bars of entry” is the kind of thing it would tell you.
If we build it, it will be built on these rules, and we are stating them now rather than after the fact:
- Aggregates only, and never below a threshold where a single person could be picked out of the number.
- Your notes are never included. They are the part of a journal people write honestly, and they are yours.
- It describes what people did, not what happened to them. We make no claims about who profits, here or anywhere else in this product.
- You can opt out in the app and your sessions are excluded from then on, with no effect on anything else you paid for.
Nothing of the kind exists today, and no comparison has been produced from anyone’s journal. This paragraph is here because consent given after data is collected is not consent, and we would rather write the rule while it still costs us something to keep.
AI coaching, if you turn it on
AI coaching is off until you accept a notice in the app that says this. When you use it, the journal data needed for the request is sent from your browser to us, and on to Anthropic, who run the model that reads it.
- Anthropic do not use it to train their models.
- Anthropic delete inputs and outputs within 30 days, other than content flagged for policy violations, which they may keep for up to two years.
- We do not store the content of your AI requests or the replies.
- Turn the feature off and nothing further is sent.
Cookies
One cookie, named replay_session. It keeps you signed in, it is strictly
necessary for the service to work, and it cannot be read by scripts. There is no advertising,
profiling or analytics cookie, which is why you are not being asked to dismiss a banner.
Who else sees your data
| Who | What they get |
|---|---|
| Paddle | Merchant of record. They handle payment and hold your billing details. We receive your email address and what you bought, never your card. |
| Anthropic | Only if you turn on AI coaching, and only the journal data for that request. |
| Our email provider | Your email address, to deliver sign-in links and licence emails. |
| Our hosting provider | Stores the database and serves the application. |
We do not sell your data, and we do not share it for advertising.
Where your data is processed
Our providers may process data outside your country, including in the United States. Where that involves transferring personal data out of the UK or EEA, it is done under the safeguards those providers have in place, such as standard contractual clauses.
Why we are allowed to hold it
We process your email address and purchase record to perform our contract with you. We keep accounting records because the law requires it. We keep logs and usage counts on the basis of our legitimate interest in running a secure, working service. AI coaching is processed on your consent, which you give by switching it on and withdraw by switching it off.
Your rights
Depending on where you live, you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, or ask us to send it to you in a portable form. Email hello@usewicks.com and we will respond within 30 days.
Deleting your account removes your email address and entitlements from our systems. It does not touch your journal, because that was never ours to delete. If you are in the UK or EEA and think we have got this wrong, you may complain to your data protection authority.
Children
Wicks is not intended for anyone under 18 and we do not knowingly collect their data.
Changes
If we change this policy in a way that materially affects you, we will email licence holders before it takes effect.