1. Introduction
ChartWise is a professional trading management and journaling application designed to help traders connect to their MetaTrader 4 and MetaTrader 5 platforms, manage live positions, analyse performance, and receive AI-powered coaching insights.
This privacy policy explains:
- What personal and non-personal data we collect from you when you use ChartWise
- Why we collect it and how we use it
- How we protect it
- Your rights and choices
By downloading, installing, or using ChartWise you agree to the practices described in this policy. If you do not agree, please do not use the app.
2. What Information We Collect
2.1 Account & Identity Information
When you register for a ChartWise account we collect:
| Data | Purpose |
|---|---|
| Email address | Account creation, login, and communications |
| Full name | Personalisation of the app experience |
| Password (hashed, never stored in plain text) | Authentication |
| Google OAuth token (if you sign in with Google) | Authentication via Google Sign-In |
| Profile picture URL (from Google, if provided) | Optional display in-app |
| Subscription status and entitlement tier | Access control for Pro features |
2.2 Trading & Financial Data
ChartWise connects to your MetaTrader terminal through a local desktop bridge application ("MT Bridge") that runs on the same Wi-Fi network as your device. We collect:
| Data | Purpose |
|---|---|
| Trade history (symbol, open/close price, lot size, P&L, open/close time) | Dashboard, journal, analytics |
| Live open positions (ticket, symbol, type, lots, open price, current P&L, SL/TP) | Real-time position management |
| Partial take-profit levels configured by you | Chart line management |
| Trailing stop configuration (mode, distance, activation price) | Automated trade management |
| Auto Break-Even configuration and trigger status | Automated trade management |
| Account balance, equity, and margin | Dashboard and analytics |
| MetaTrader server name and account number | Bridge authentication and display |
Important: We do not store your MetaTrader password. Your MT4/MT5 credentials remain entirely within the MetaTrader terminal and are never transmitted to ChartWise servers.
2.3 AI Coach & Journal Data
| Data | Purpose |
|---|---|
| Trading journal notes and trade annotations you write | AI coaching analysis and journaling |
| Psychological state tags you label on trades | AI coaching insights |
| Trading rules you define | Rule compliance checks |
| Goals you set (weekly, monthly targets) | Progress tracking and AI insights |
| AI chat messages you send | Generating AI coaching responses |
AI chat messages and trade context are processed to generate coaching responses and are retained as part of your account history.
2.4 Device & Technical Data
| Data | Purpose |
|---|---|
| Device type and OS version | Compatibility and crash diagnosis |
| App version | Update management and support |
| Session tokens (JWT) | Secure authentication |
| WebSocket connection metadata | Bridge connectivity |
| Error logs and stack traces (anonymised) | Bug fixing via Sentry |
| Push notification device token | Trade alerts and notifications |
We do not collect: advertising identifier (IDFA/GAID), IMEI, phone number, or contacts.
2.5 Usage & Analytics Data
| Data | Purpose |
|---|---|
| Feature engagement events | Product improvement |
| Onboarding funnel steps completed | Onboarding optimisation |
| Screen navigation patterns | UX improvement |
You can opt out of analytics at any time in Settings → Privacy → Analytics.
2.6 Subscription & Billing Data
ChartWise uses RevenueCat to manage in-app subscriptions. We receive:
- Your subscription status and entitlement level
- Purchase timestamps and renewal status
We do not receive or store your credit card number, Apple ID payment details, or Google Play payment details. All payment processing is handled directly by Apple or Google.
3. How We Use Your Information
- Provide core app functionality — live position management, trade journal, AI coaching, analytics dashboard
- Authenticate and secure your account — JWT sessions, Face ID app lock, Google OAuth
- Deliver AI coaching insights — analyse your trades, psychology tags, and journal entries to generate personalised feedback
- Enable real-time trade management — relay commands between the mobile app and your MT Bridge over WebSocket
- Process subscription access — verify Pro entitlements via RevenueCat
- Diagnose crashes and bugs — Sentry captures anonymised error reports to help us fix issues faster
- Send trade alerts — push notifications for triggered trailing stops, auto BE events, and partial TP hits
- Improve the product — analyse anonymised usage patterns (with your consent) to prioritise features
- Comply with legal obligations — respond to lawful requests from authorities where required
We do not use your data for advertising, sell it to third parties for marketing, or use it to build advertising profiles.
4. Permissions We Request
4.1 Camera
Why we need it: ChartWise uses the camera exclusively to scan the QR code displayed by the MT Bridge desktop application to establish a secure, encrypted local connection. The camera is only activated when you explicitly tap "Scan QR Code" in the Bridge Setup screen.
What we store: Nothing. No images or video are ever recorded or saved by ChartWise.
4.2 Face ID / Biometrics (iOS)
Why we need it: ChartWise offers an optional Face ID app lock to protect your trading account data when the app is backgrounded. Authentication is performed entirely on-device by iOS; no biometric data is transmitted to our servers.
What we store: Nothing. No biometric data ever leaves your device.
4.3 Photo Library — Add Only
Why we need it: When you choose to share a trade performance card or AI insight snapshot, ChartWise can save the generated image to your Photos library. This only happens when you explicitly tap "Save to Photos."
What we store: Only the image you chose to save. We do not read, browse, or access your existing photos.
4.4 Local Network Access
Why we need it: ChartWise communicates with the MT Bridge desktop application over your local Wi-Fi network using a WebSocket connection. This permission allows the app to discover and connect to the bridge. No data is relayed to any third party over this connection.
4.5 Push Notifications
Why we need it: With your permission, ChartWise sends push notifications to alert you to trading events — partial take-profit triggered, trailing stop activation, and auto break-even events. You can enable or disable notifications at any time in your device Settings.
What we store: A device push token is stored securely on our servers solely to deliver notifications to your specific device.
4.6 Background App Refresh
Why we need it: ChartWise uses background fetch and background processing to periodically sync trade data and receive silent push notifications that keep your position data up to date when you return to the app.
5. Third-Party Services
| Service | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| RevenueCat | Subscription & entitlement management | Anonymised user ID, subscription events | revenuecat.com/privacy |
| Sentry | Crash reporting and error monitoring | Anonymised stack traces, device/OS type, app version | sentry.io/privacy |
| Google OAuth | Sign in with Google | Email, name, profile picture | policies.google.com/privacy |
| Apple Sign-In | Sign in with Apple (optional) | Anonymised or real email as chosen by the user | apple.com/legal/privacy |
5.1 AI Processing
AI coaching features are powered by our backend, which may use large language model APIs. When you use AI chat or request AI insights, your trade data and messages are sent to our backend and may be processed by an LLM provider. These providers operate under strict data processing agreements and do not use your data to train models without consent.
6. Data Sharing and Disclosure
We do not sell your personal data. We share data only in the following circumstances:
6.1 Service Providers
We share data with trusted service providers (listed in Section 5) who process it on our behalf under strict data processing agreements. They may only use the data to provide services to us.
6.2 Legal Requirements
We may disclose your data if required by law, court order, or in response to lawful requests by public authorities.
6.3 Business Transfers
If ChartWise is involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
6.4 Protection of Rights
We may disclose information when we believe disclosure is appropriate to protect the rights, property, or safety of ChartWise, our users, or the public.
7. Data Retention
| Data category | Retention period |
|---|---|
| Account information | Until you delete your account |
| Trade history and journal entries | Until you delete your account or specific records |
| AI chat history | Until you delete your account or clear chat history |
| Crash reports (Sentry) | 90 days |
| Analytics events | 12 months (anonymised after 30 days) |
| Push notification tokens | Until you uninstall the app or revoke notification permission |
| Server access logs | 30 days |
When you delete your account, we delete or anonymise all your personal data within 30 days, except where we are legally required to retain it.
8. Data Security
We implement industry-standard security measures:
- Encryption in transit: All communication between the app and our servers uses TLS 1.2 or higher. The app enforces certificate pinning for
thechartwise.comto prevent man-in-the-middle attacks. - Encryption at rest: Database data is encrypted at rest using AES-256.
- Authentication: Passwords are hashed using bcrypt. Sessions use short-lived signed JWT tokens with refresh token rotation.
- Local bridge security: The mobile app authenticates to the MT Bridge using a signed one-time token, ensuring only your authorised device can connect.
- Biometrics: Your Face ID data never leaves your device. App-lock authentication is 100% on-device.
- Access control: Internal team access to production user data is role-restricted and audited.
While we take all reasonable steps, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to security@thechartwise.com.
9. Your Privacy Rights
| Right | How to exercise |
|---|---|
| Access your data | Email privacy@thechartwise.com |
| Correct inaccurate data | Edit in-app (Settings → Account) or email us |
| Delete your data | Settings → Account → Delete Account, or email us |
| Export your data | Email privacy@thechartwise.com |
| Opt out of analytics | Settings → Privacy → Analytics (toggle off) |
| Manage notifications | Device Settings → Notifications → ChartWise |
We respond to all verifiable data requests within 30 days.
10. GDPR — Users in the European Economic Area & UK
If you are in the EEA, UK, or Switzerland, we process your personal data under the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Account creation and core app features | Contractual necessity — Art. 6(1)(b) GDPR |
| AI coaching, personalisation, analytics | Legitimate interests — Art. 6(1)(f) — you may object at any time |
| Analytics (opt-in) | Consent — Art. 6(1)(a) — withdrawable at any time |
| Legal compliance | Legal obligation — Art. 6(1)(c) |
Your GDPR rights (Arts. 15–22):
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time without affecting prior processing
- Right to lodge a complaint with your national supervisory authority
To exercise any right, contact privacy@thechartwise.com.
11. CCPA — California Residents
Under the California Consumer Privacy Act (CCPA / CPRA), you have the right to:
- Know what categories of personal information we collect and why
- Access specific personal information we hold about you
- Delete your personal information
- Correct inaccurate personal information
- Opt out of sale or sharing — We do not sell or share your personal information
- Non-discrimination
Categories of personal information we collect:
| CCPA category | Examples | Collected? |
|---|---|---|
| Identifiers | Name, email address | Yes |
| Financial information | Account balance, trade P&L | Yes (trading data only) |
| Internet / network activity | App usage events, crash logs | Yes (anonymised) |
| Geolocation data | Precise location | No |
| Biometric data | Face ID | On-device only |
| Commercial information | Subscription status | Yes |
| Sensory / camera data | QR scan | Transient only |
| Inferences / profiles | AI trading insights | Yes (coaching only) |
To submit a CCPA request, email privacy@thechartwise.com with subject: "CCPA Privacy Request".
12. Children's Privacy (COPPA)
ChartWise is designed for professional and retail traders and is not directed at children under the age of 13 (or under 16 in the EEA/UK where applicable).
We do not knowingly collect personal information from children under 13. If you believe your child has provided personal information, please contact us immediately at privacy@thechartwise.com.
13. International Data Transfers
ChartWise's servers are located in the United States / EU. If you access ChartWise from outside this jurisdiction, your data may be transferred internationally.
Where we transfer personal data from the EEA, UK, or Switzerland to a country without an adequacy decision, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with all sub-processors
A list of sub-processors and applicable transfer safeguards is available on request at privacy@thechartwise.com.
14. Changes to This Privacy Policy
We may update this privacy policy periodically. When we do:
- We update the "Last Updated" date at the top
- We display an in-app notice for material changes
- We email registered users for changes that materially affect their rights
- Continued use of ChartWise after the effective date constitutes acceptance of the updated policy
We will obtain fresh consent where required by law. Previous versions are available on request.
15. Contact Us
ChartWise Privacy Team
Email: privacy@thechartwise.com
Website: https://thechartwise.com/privacy
For EEA/UK users with unresolved complaints, you may also contact your local data protection supervisory authority.
This privacy policy was prepared to comply with: Apple App Store Review Guidelines § 5, Apple App Store Privacy Nutrition Label requirements, Google Play Data Safety section requirements, Regulation (EU) 2016/679 — GDPR, UK GDPR and Data Protection Act 2018, California Consumer Privacy Act (CCPA) as amended by CPRA, Children's Online Privacy Protection Act (COPPA).