Privacy Policy
This explains what ZenuOne collects, why, who else sees it, and what you can do about it. It is written to be read rather than to be defensible, so if anything here is unclear, ask.
The short version. We collect your email, what you write in your trading journal, and how you use the platform. We do not sell any of it. Your journal is sent to our AI provider only when you use the coach. You can export or delete everything at any time.
1. Who we are
ZenuOne is operated by Terraangel Studios LLC, Florida, United States. For anything in this policy, contact us through the address on the help page.
2. What we collect
You give us
- Account details — email address, display name, password (stored only as a cryptographic hash; we never see it).
- Trading journal — symbols, prices, quantities, dates, and the written parts: your thesis, your review, whether you followed your plan, and the emotions you record.
- Coach conversations — what you ask the AI coach and what it replies.
- Learning activity — lessons completed, quiz answers and scores, challenges, XP and streaks.
- Practice trades — positions taken in the simulated account.
Collected automatically
- Timezone — needed so streaks and daily challenges use your calendar day rather than UTC.
- Terms acceptance — the version you accepted, when, and the browser you used. This is kept as proof of consent and may be shown to a payment provider if a charge is disputed.
- Basic technical data — the usual server logs from our hosting provider, including IP address, kept for security and debugging.
What we never collect
Card details. Payment happens entirely on Stripe's own pages. We receive only whether you are subscribed, which plan, and when the period ends. We never see your card number.
We do not connect to your broker, and we cannot see your real accounts or balances. Everything in your journal is there because you typed it.
3. Why we hold it
- To run your account and give you access to what you paid for.
- To generate your statistics, calendar and progress — all of which are computed from your own entries.
- To give the AI coach context about your trading, which is the entire reason it is useful.
- To take payment and manage subscriptions.
- To respond when you contact support.
- To defend against fraudulent chargebacks.
We do not use your data to train any AI model, and we do not build advertising profiles.
4. Who else sees it
We use a small number of providers, each doing one job. We do not sell data to anyone, and there is no advertising network involved.
| Provider | What they receive | Why |
|---|---|---|
| Supabase | Everything — your account and all journal data | Database and authentication. This is where the platform lives. |
| Stripe | Email, and payment details you enter on their page | Processes payments and subscriptions. |
| Anthropic | Your recent trades and journal notes, but only when you use the coach | Powers the AI coach. |
| Yahoo Finance | Nothing about you — only the symbol being charted | Market prices for the practice account. |
| Google Fonts | Your IP address, when a page loads | Serves the typeface. |
Worth being clear about the coach. When you send it a message, your recent trades — including what you wrote about them — are sent to Anthropic to generate the reply. If you would rather that never happens, simply do not use the coach; every other feature works without it.
Anthropic does not train models on data sent through their API.
5. Where your data lives
Our providers operate in the United States and may process data in other countries. If you are in the UK, EU or another region with data transfer rules, your data may be transferred outside it. Each provider we use offers standard contractual protections for those transfers.
6. Cookies and local storage
We do not use advertising or analytics cookies, and there is no tracking across other websites.
We store two things in your browser:
- Your login session, so you stay signed in.
- Your interface sound preference, so it is remembered.
Stripe sets its own cookies on its checkout pages, which are covered by Stripe's privacy policy.
7. How long we keep it
- While your account exists — your journal and learning progress, so your history stays intact whether or not you are subscribed.
- Seven years — payment and subscription records, as required for tax and accounting.
- Terms acceptance records are kept as long as they might be needed to answer a payment dispute.
Deleting your account removes your journal, coach conversations and learning history permanently. Records we are legally required to keep are retained in anonymised form.
8. Your rights
Wherever you live, you may:
- See what we hold about you.
- Export your journal in a portable format.
- Correct anything inaccurate — most of it you can edit directly.
- Delete your account and its data.
- Object to specific processing, or withdraw consent.
Contact support and we will action it within 30 days. There is no charge, and asking will never affect your account.
If you are in the EU or UK you may also complain to your local data protection authority. We would rather you told us first.
9. Security
Data is encrypted in transit and at rest by our hosting provider. Access to your rows is enforced at the database level, so one user's credentials cannot read another user's journal even through direct API access.
No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority without unnecessary delay.
10. Children
ZenuOne is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, tell us and it will be removed.
11. Changes
If this policy changes materially, we will notify you by email or in the app before it takes effect. Each version is dated.
12. Contact
Questions, requests, or a data concern: see the help page for the support address. Related reading: Terms of Service.