Privacy notice

TradeTraining, the website at www.tradetraining.app and the app you can install from it, is run by [OPERATOR NAME] (“we”, “us”). We decide how and why your personal information is used, which makes us its “controller” under UK data protection law: the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Run by

[OPERATOR NAME]

Address

[REGISTERED ADDRESS]

Email

[CONTACT EMAIL]

ICO registration

[ICO REGISTRATION NUMBER]

For anything about your personal information, email [CONTACT EMAIL]. More ways to reach us are on our contact page.

• You can try lessons as a guest without giving us an email address.
• We keep your answers and progress so the app can work: your learning path, XP, streaks, leagues and reviews.
• A few service providers help us run the app, and every one is listed below. We do not sell your personal information.
• Analytics in your browser (PostHog, and Google Analytics on our public pages), and advertising tags from Meta and Google, run only if you say yes, and you can change your mind at any time.
• Our server also records some things you do in the app, such as starting as a guest or keeping a streak, to run and improve it. That stores nothing on your device, and you can object to it.
• You can ask to see, correct, download or delete your information, and you can complain to the Information Commissioner’s Office (ICO).

The law asks us to name a “lawful basis” for each use of your information. Ours are: contract (we need it to provide something you asked for), legitimate interests (a reasonable business need that does not override your rights), consent (you said yes and can take it back) and legal obligation (the law requires it).

We do not ask for sensitive information, such as your health, religion or ethnicity. Please do not include it in anything you type into the app.

• In a league, the other learners in it see your display name and your XP for the week.
• Your friends also see your streak.
• Other learners can find you by searching for your display name, to send a friend request. You can block someone from the Friends page.

Your display name is whatever you choose in Profile settings, so you do not have to use your real name. Guest accounts start with a made-up nickname.

These companies handle personal information for us. Each receives only what it needs for its job. We do not sell your personal information.

We would also share information if the law required it, for example to comply with a court order.

Several of these providers are based in the United States or use servers there, as each card above says. When personal information leaves the UK, the law requires a safeguard:

• for the European Union and European Economic Area, the UK’s “adequacy regulations”, which recognise their protection as equivalent;
• for a US company certified under the UK Extension to the EU–US Data Privacy Framework, the UK adequacy regulations that cover it;
• otherwise, the ICO’s International Data Transfer Agreement, or its Addendum to the EU’s standard contractual clauses, in our contract with the provider.

Which one applies to each provider: [CONFIRM THE TRANSFER SAFEGUARD FOR EACH PROVIDER].

We keep personal information only as long as we need it. Some of these periods have not been decided yet, and are shown in square brackets.

Your account and learning records

For as long as your account exists. Once a deletion request has been processed, the account and its learning records are deleted ([HOW LONG A DELETION REQUEST TAKES]), and copies in database backups are overwritten within [HOW LONG DATABASE BACKUPS ARE KEPT].

Guest accounts

Nothing deletes unused guest accounts automatically yet: [HOW LONG UNUSED GUEST ACCOUNTS ARE KEPT].

Analytics events in PostHog

[HOW LONG ANALYTICS EVENTS ARE KEPT]

Google Analytics

Event and user data: 14 months from collection; a later visit does not extend it. Google’s standard summary reports are not affected by that setting. Its cookies last about 6 months.

Hosting logs

[HOW LONG HOSTING LOGS ARE KEPT]

Security records

[HOW LONG SECURITY RECORDS ARE KEPT]

Emails you send us

[HOW LONG EMAILS TO US ARE KEPT]

Payment records, once Plus is on sale

[HOW LONG PAYMENT RECORDS ARE KEPT]

Cookies and browser storage

Each one is listed, with how long it lasts, in our cookie policy.

Under UK data protection law you can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong. You can change your display name and settings yourself in Profile settings;
• delete your account and learning data, from Profile settings or the account deletion page. Requests are processed by hand at the moment, and the account stays in place until then. We also ask Google to delete the Google Analytics data linked to your account ID;
• restrict what we do with your information while a concern is sorted out;
• stop anything we do on the basis of legitimate interests (you can object), including streak reminders, which you can also switch off yourself;
• send you or another service the information you gave us, in a common machine-readable format;
• withdraw consent at any time, for example by changing your choice in Cookie settings. Withdrawing does not affect what happened before.

We do not make decisions about you based only on automated processing that have legal or similarly significant effects. The app marks answers automatically and uses the result to unlock lessons, which affects only your progress in the app.

How to ask

Email [CONTACT EMAIL]. We may ask you to sign in first, so we know the account is yours. A guest account can only be identified from the device where it is signed in, so make a guest request from there, in Profile settings or on the account deletion page. The law gives us one month to respond, which can be extended by up to two more months for complex requests; we would tell you if so.

Complaints

If you are unhappy with how we have handled your information, please tell us first at [CONTACT EMAIL]. You can also complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk/make-a-complaint.

We use cookies and similar technologies, such as your browser’s local storage. The ones needed to keep you signed in and to remember your choices are always on; analytics and advertising ones wait until you accept them. Our cookie policy lists every one. You can change your choice at any time in Cookie settings.

TradeTraining is for people aged [MINIMUM AGE] and over. If you think someone younger has given us personal information, please contact us so we can delete it.

Connections to the site are encrypted (HTTPS). Database rules let each learner read only their own progress, and scores, streaks and other records can be changed only by our server, after it has checked your answer. Passwords are stored by Supabase in a scrambled form that we cannot read.

We will update this notice when what we do with your information changes, and change the date at the top. If a change affects you, we will tell you in the app.