Privacy Policy

This policy describes what data we collect when you use intent: trade, why we collect it, who we share it with, and how you can exercise your rights over it.

Short version, in three sentences: Your trade data is yours. We use industry-standard encrypted storage and we do not sell or share your data with anyone for marketing or AI training. We collect only what we need to run the Service, process your subscription, and provide the AI features you use.

1. What we collect and why

Optional web usage analytics: when configured, PostHog processes analytics in the United States only after you opt in under Settings. We send only future app-open, completed-signup and first-trade event names, at most once each per page visit, with a random visit identifier and person profiles disabled. We do not send account identifiers, emails, trade details, URLs or caller-provided properties. PostHog receives the connection IP; its project settings determine whether IP is retained and whether GeoIP processing occurs before discard. We do not claim that IP is invisible. We use no replay, autocapture, analytics SDK, retry or offline queue. Do Not Track and Global Privacy Control prevent capture. The choice is stored only in this browser and is not synced with your account. Uncheck the control to stop future requests and attempt to abort pending ones. Events already received cannot be recalled. No optional PostHog capture runs in the native iOS or Android app.

What we do not collect: we do not use advertising services, run advertising or tracking pixels, collect your IP address for marketing, embed third-party advertising trackers, or collect data from social-media buttons. Diagnostic telemetry records fixed event names and technical build context rather than the contents of your trades. Most stays on our own servers (Supabase); the minimal iOS diagnostic subset described above is sent to Sentry, and optional web events described above go to PostHog after consent. None is sold, used for advertising, or used to track you across apps or websites.

Bug-report screenshots (optional): if you choose to attach a screenshot to an in-app bug report, it may contain your trade data. The image is uploaded over an encrypted connection to private storage, is used only to investigate your report, is never shared, sold, or used for training, and is automatically deleted within 30 days. The app never captures your screen on its own — only an image you deliberately pick.

Bug-report diagnostics: when you submit an in-app bug report we also attach a short technical diagnostics summary to help us reproduce the issue: your platform and app version, the screen you were on, your viewport size and language, and a truncated list of recent in-app error types (the error name and code location only — never the error message text or console output). We collect only this fixed set of fields, and a filter removes anything that looks personal from them — no login tokens, no email addresses, no trade amounts or account numbers, and no free-text content. Because it is attached to the report you sent, it is linked to your account, used only to investigate your report, never sold or shared for advertising or training, and deleted on the same schedule as the report (within 30 days).

2. Payment processing

Web purchases (tilorah.co)

We use Stripe, Inc. ("Stripe") as our payment processor for subscriptions and for one-time AI top-up packs bought on our website before top-up sales ended. New AI top-up packs are not offered. Tilorah Core LLC is the seller of the Service. We are responsible for billing, taxes, and refunds, and Stripe processes payments on our behalf. We never see or store your full card number. When you purchase a subscription on the website, or when you previously purchased a top-up pack, the following information is collected by Stripe directly:

• Name and email address
• Billing address (country and, where required by law, full address)
• Payment method information (card number, expiry, CVC) — handled by Stripe's PCI-DSS compliant systems; we never see or store your card details
• IP address at time of purchase (for fraud prevention)
• Tax identification (e.g., VAT ID) where you provide it for B2B purchases

Stripe uses this information to process your payment, issue receipts, and prevent fraud. Stripe's privacy policy applies to their handling of this information: stripe.com/privacy

Information Stripe shares with us:

• Your email (to associate the subscription with your intent: trade account)
• Subscription or one-time purchase reference, product, and amount
• Subscription status (active, cancelled, past-due, refunded)
• Payment reference ID (so we can match support requests to purchases)

Stripe does not share your full card details, billing address, or IP address with us.

In-app purchases (iOS / Android)

Standard and Grand subscriptions are processed through Apple's App Store using StoreKit on iOS and through Google Play Billing on Android. New AI top-up packs are not offered on either platform, while credits from prior App Store or Google Play purchases remain usable with an active Standard or Grand plan. Your payment details go to Apple or Google, never to us. We may use RevenueCat, Inc. or another billing service for some store purchases to validate a receipt and manage entitlements. Where RevenueCat is used, it receives the store receipt and a pseudonymous account identifier (your intent: trade user ID), not your name, email, or card data. RevenueCat's privacy policy: revenuecat.com/privacy. Apple and Google handle payment information under their own privacy policies.

3. Subscription management

For website purchases, Stripe creates a subscription or payment record tied to your signed-in account (or the purchase email where applicable). For app purchases, Apple or Google provides the store transaction and the applicable validation service or server verification updates the entitlement. We sync the resulting account state to our database (Supabase, Singapore region). We store the subscription tier, billing source, billing period and expiry, provider identifiers, receipt or transaction status, refund events, and any existing AI-credit balance. When you delete your account, its entitlement and AI-credit balance are deleted with it. Separate receipt, refund, transaction, and related subscription records that we or our payment processors must retain for accounting, tax, fraud prevention, or dispute handling follow the Section 7 subscription-record schedule: retained for 7 years after account deletion and then deleted or de-identified, unless a longer period is required by law.

This means:

• You can use the app offline; subscription validity is checked against our server periodically when online.
• If you sign out or use a different device, your subscription is tied to your account email — sign in with the same email to restore access.
• For Stripe purchases, cancel, manage billing, or update your payment method using the billing portal in Settings → Subscription.
• For Apple or Google purchases, manage or cancel the subscription in the applicable store account. Store purchases follow the store's refund process.

4. AI providers

The Service uses third-party AI providers — currently OpenAI (GPT-4o / GPT-4o-mini) — to generate the AI Output you request (chart analysis, AI Insights). Image and text data you submit is transmitted to these providers over encrypted connections.

Our AI providers operate under data-processing agreements that:

• Prohibit training of any machine learning model on customer data.
• Require deletion of submitted data within their stated retention windows (zero retention or 30 days, depending on the provider and feature).
• Require security controls including encryption in transit and at rest.

We do not sell or share your Content with any third party for marketing, advertising, or training purposes.

5. Cross-border data flows

intent: trade is operated from the United States. Your data is processed in the following locations:

• Application database: Supabase, Singapore region (ap-southeast-1)
• AI providers: OpenAI (United States)
• Payment processing: Stripe (United States), Apple (App Store/StoreKit), or Google (Google Play Billing), under their own policies
• In-app purchase validation: RevenueCat (United States), when we use that service
• iOS diagnostics: Sentry (United States)
• Optional web analytics: PostHog (United States), only after separate opt-in
• Email and support: hello@tilorah.co (United States)

If you are a resident of Thailand: by using the Service, you consent to the transfer of your personal data to the United States and Singapore for the purposes described in this Privacy Policy. We rely on standard contractual clauses or equivalent mechanisms with our processors. For optional PostHog analytics, separate Settings consent applies and can be withdrawn there without deleting your account. For other processing, you may withdraw this consent at any time by deleting your account, after which we will delete your personal data within 90 days, except where retention is required by law or for the resolution of disputes.

If you are a resident of the European Economic Area or the United Kingdom: data transfers outside the EEA / UK are made under standard contractual clauses approved by the European Commission, or equivalent safeguards.

6. How we share data

We share data only with the third parties needed to operate the Service:

• Supabase (Singapore region) — hosting our database and authentication.
• Stripe (United States) — payment processing on our behalf for web purchases. Tilorah Core LLC is the seller of the Service.
• Apple and Google (United States) — payment processing for in-app purchases on iOS and Android.
• RevenueCat, Inc. (United States) — where used, validates in-app store purchases and manages entitlements (receives the store purchase receipt and a pseudonymous account identifier — never your name, email, or card data).
• OpenAI (United States) — AI processing for features you actively use.
• Sentry (United States) — processes the minimal, sanitized iOS crash and startup diagnostic events described in Section 1.
• Email service providers — for transactional emails (sign-in links, receipts, refund confirmations).
• Tilorah Core LLC personnel — only as necessary to provide support, fix bugs, or comply with law.

We do not sell your personal data. We do not share your data with advertisers, data brokers, or marketing partners.

We may disclose data when required by law (e.g., a valid subpoena or court order) or to protect the rights, property, or safety of our users, the public, or Tilorah Core LLC. Where lawful, we will give you notice before disclosure.

7. Data retention

• Trade content: retained as long as your account exists.
• Subscription records: retained for 7 years after account deletion (US tax-record requirement), then deleted or de-identified unless a longer period is required by law.
• Beta signups: retained until invitation, withdrawal of consent, or account deletion.
• Support emails: retained for 24 months after the conversation ends.
• Diagnostic logs: retained for 90 days.

On account deletion, we remove your trade content and personal data within 90 days, except for the categories above retained by law.

8. Your rights

You have the following rights regarding your personal data. To exercise any of them, email hello@tilorah.co with the subject line "Data request" and your account email. We respond within 30 days.

• Access — get a copy of the personal data we hold about you. (You can also self-serve via Settings → Export.)
• Correction — fix data that is inaccurate or incomplete.
• Deletion — delete your account and personal data. (You can also self-serve via Settings → Account → Delete account.)
• Portability — get a machine-readable export of your data.
• Objection — object to specific processing.
• Withdrawal of consent — withdraw consent for processing that relies on consent (e.g., cross-border transfers).

Residents of California, the EEA, the UK, and Thailand have specific additional rights under their local laws (CCPA, GDPR, UK GDPR, PDPA) — these are honored under the same process.

9. Cookies and tracking

The Service uses local storage (IndexedDB) and necessary cookies for sign-in sessions and language preference. We do not use advertising or cross-site tracking cookies, and the pricing page (sub.html) embeds no marketing pixels. Our first-party telemetry and the minimal iOS Sentry diagnostics described in Section 1 capture fixed crash, diagnostic, and startup-performance event names (never the contents of your trades). They are never shared with advertisers or used to track you across other sites or apps.

10. Children

The Service is not intended for children under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a child under 18, contact us and we will delete it promptly.

11. Security

We use industry-standard practices to protect your data: TLS in transit, encryption at rest at our hosting providers, row-level security policies in our database (your account can only see its own data), Supabase authentication by email/password, Google, or Apple, and minimal employee access on a need-to-know basis. Supabase handles password credentials and identity-provider tokens; Tilorah does not receive your Google or Apple password.

No system is perfectly secure. If we discover a security incident affecting your personal data, we will notify you within the timeframes required by applicable law.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or in-app notice at least 30 days before they take effect. Non-material changes (typo fixes, clarifications) take effect on posting. The "Last updated" date at the top of this page always reflects the most recent change.

13. Contact

Tilorah Core LLC
Privacy contact: hello@tilorah.co
Web: tilorah.co

These terms are reviewed and updated regularly. A formal attorney review is scheduled following our pricing relaunch. hello@tilorah.co