Privacy Policy

Last updated: October 2026

1. Introduction

The Calm Journal ("we", "us", or "our") operates the trading journal application available at calmjournal.in (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Authentication credentials (managed by Supabase Auth)

Trading Data

When you use the Service, we store:

• Trade entries (symbol, quantity, entry/exit prices, dates)
• Diary entries and journal notes
• Checklists and trading rules
• Broker configurations
• Fund transaction records

Usage Data

We automatically collect:

• Device type and browser information
• Pages visited and features used
• IP address (for authentication and security)

Support & Contact Information

When you submit a support query, report a bug, or request a feature, we collect the email address you provide. If you choose to include it, we also collect an optional mobile/phone number so we can reach you if email replies go unanswered. These details are used only to respond to and resolve your request.

3. How We Use Your Information

• To provide and maintain the Service
• To track subscription plan usage and limits
• To communicate with you about your account and support requests
• To detect and prevent fraud or abuse

4. Advertising

The free tier of our Service may display advertisements. At the time of this policy, Google AdSense advertising is not actively configured on this deployment; if enabled in the future, we will update this policy and comply with applicable consent requirements.

5. Data Sharing

We do not sell your personal data. We may share information with:

• Supabase: Our database and authentication provider (hosted on AWS)
• Cloudflare: Our hosting and CDN provider
• Law enforcement: When required by law

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS/HTTPS), encryption at rest, row-level security policies on our database, and secure authentication via Supabase Auth. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your account and trading data for as long as your account is active. You may delete your account at any time from Settings. When you delete your account, most user data is permanently removed. Certain records (such as support queries, bug reports, and feature requests) may be retained in a de-identified form for support and product improvement purposes.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability

To exercise these rights, contact us at the email address below or use the Support page.

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us through our Support page.