JRNL Privacy Policy
Last Updated: January 30, 2026
1. Introduction
Welcome to JRNL ("we," "our," or "us"). JRNL is a trading journal application designed to help traders track their performance, analyze their trading patterns, and receive AI-powered coaching insights. We are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). Please read this policy carefully to understand our practices regarding your data.
2. Information We Collect
2.1 Account Information
- Name: Your display name for your account
- Email Address: Collected through Sign in with Apple (optional, may be hidden email)
- User ID: Unique identifier for your account
- Profile Picture: Optional avatar image you may upload
2.2 Trading Data
- Trading Sessions: Date, time, duration, and session metadata
- Trade Entries: Symbol, entry price, exit price, quantity, position type (long/short), entry time, exit time, profit/loss, fees, and notes
- Trading Rules: Your personal trading rules and compliance tracking
- Goals: Trading goals and progress tracking
- Market Preparation: Pre-market plans and checklists
- Risk Preferences: Risk per trade settings and risk management preferences
- Emotional State: Self-reported emotional states during trading sessions
2.3 Voice Data
- Voice Recordings: Audio recordings you make for voice notes, trade entries, and voice coaching interactions
- Transcriptions: Text transcriptions of your voice recordings
- Note: Voice recordings are processed for transcription and then deleted. Only transcriptions are stored.
2.4 Usage Data
- App Usage: Features used, session frequency, and interaction patterns
- Performance Metrics: App performance data, crash reports, and error logs
- Subscription Information: Subscription tier, trial status, and payment information (handled by Apple)
- AI Usage: Number of AI requests, model usage, and associated costs (for internal analytics via PostHog)
2.5 Device Information
- Device Type: iOS device model and operating system version
- iCloud Status: Whether iCloud backup is enabled
3. How We Use Your Information
3.1 Core App Functionality
- To provide and maintain the trading journal service
- To store and organize your trading data
- To generate journal entries and insights
- To provide AI-powered coaching and analysis
- To track your progress, achievements, and streaks
3.2 AI Processing
- To transcribe voice recordings to text
- To generate AI insights and coaching responses
- To analyze trading patterns and provide recommendations
- To create editorial journal entries from session data
- To provide real-time voice coaching during trading sessions
3.3 Service Improvement
- To analyze usage patterns and improve app functionality
- To fix bugs and optimize performance
- To develop new features
- To conduct anonymized, aggregated research
3.4 Communication
- To send important updates about the service
- To respond to your inquiries and support requests
- To notify you of changes to this Privacy Policy
4. Data Storage
4.1 Local Storage
Your data is primarily stored locally on your iOS device using:
- FileManager: JSON files stored in the app's documents directory with iOS file protection
- UserDefaults: App preferences and settings
- Keychain: Secure storage for API keys and sensitive credentials
All local data is encrypted using iOS's built-in encryption (Data Protection API) when the device is locked.
4.2 Cloud Storage
- iCloud: Optional backup of your data to your personal iCloud account (if enabled). Data is encrypted in transit and at rest by Apple.
- No Third-Party Cloud: We do not store your data on our own servers or third-party cloud services.
4.3 Data Retention
- Your data is retained as long as your account is active
- Voice recordings are deleted immediately after transcription
- You can delete any data at any time through the app
- Upon account deletion, all data is permanently removed from your device and iCloud
5. Third-Party Services
We use the following third-party services to provide AI functionality. These services process your data according to their own privacy policies:
5.1 OpenRouter
- Purpose: AI model routing and API access for various AI models (Claude, GPT-4, etc.)
- Data Sent: Trading session data, journal entries, and prompts for AI processing
- Privacy Policy: https://openrouter.ai/privacy
- Data Retention: According to OpenRouter's policy (typically not stored for training)
5.2 AssemblyAI
- Purpose: Voice transcription service
- Data Sent: Voice audio recordings for transcription
- Privacy Policy: https://www.assemblyai.com/privacy
- Data Retention: Audio files are deleted after transcription
5.3 OpenAI (Whisper)
- Purpose: Fallback voice transcription service (used if AssemblyAI fails)
- Data Sent: Voice audio recordings for transcription
- Privacy Policy: https://openai.com/privacy
- Data Retention: According to OpenAI's policy
5.4 ElevenLabs
- Purpose: Conversational AI for voice coaching (if used)
- Data Sent: Voice conversations and trading context
- Privacy Policy: https://elevenlabs.io/privacy
- Data Retention: According to ElevenLabs' policy
5.5 Apple Services
- Sign in with Apple: Authentication service
- iCloud: Cloud storage and backup
- App Store: App distribution and in-app purchases
- Privacy Policy: https://www.apple.com/privacy
5.6 Apple Speech Recognition
- Purpose: Real-time voice transcription (on-device and cloud processing)
- Data Sent: Voice audio to Apple's servers for cloud processing (when online)
- Privacy Policy: Covered by Apple's privacy policy
- Note: Some processing happens on-device; cloud processing improves accuracy
5.7 PostHog
- Purpose: Product analytics and feature usage tracking
- Data Sent: Anonymized usage events, feature interactions, app-generated user ID
- Privacy Policy: https://posthog.com/privacy
- Data Retention: According to PostHog's policy
- Note: Analytics are disabled in debug/development builds
6. Data Sharing and Disclosure
6.1 We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties.
6.2 Service Providers
We share data only with service providers necessary for app functionality:
- AI service providers (OpenRouter, AssemblyAI, OpenAI, ElevenLabs) for processing your requests
- Apple for authentication, cloud storage, and app distribution
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
6.3 Anonymized Data
We may share anonymized, aggregated data (that cannot identify you) for:
- Research and analytics
- Service improvement
- Industry insights
6.4 Legal Requirements
We may disclose your information if required by law or in response to valid legal requests.
7. Your Rights and Choices
7.1 Access and Export
- You can access all your data through the app
- You can export your trading data at any time
- Your data is stored in JSON format and can be accessed via file sharing
7.2 Deletion
- You can delete individual trades, sessions, or journal entries at any time
- You can delete your entire account and all associated data
- Deletion is permanent and cannot be undone
7.3 AI Features
- You can disable AI features in app settings
- You can choose not to use voice transcription
- You can opt out of AI coaching while still using the journal
7.4 GDPR Rights (European Users)
If you are located in the European Economic Area (EEA), you have additional rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing of your data
- Right to Withdraw Consent: Withdraw consent for data processing
To exercise these rights, contact us at the email address below.
7.5 CCPA Rights (California Users)
If you are a California resident, you have additional rights:
- Right to Know: Request information about data collected and shared
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
- Right to Non-Discrimination: We will not discriminate for exercising your rights
To exercise these rights, contact us at the email address below.
8. Children's Privacy (COPPA Compliance)
JRNL is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected information from a child under 18, we will delete that information promptly.
If you are under 18, please do not use JRNL or provide any personal information to us.
9. Security
We implement industry-standard security measures to protect your data:
- Encryption: Data is encrypted at rest using iOS Data Protection API
- Secure Transmission: All data transmitted to third-party services uses HTTPS/TLS encryption
- Keychain Storage: Sensitive credentials stored in iOS Keychain
- File Protection: Local files use iOS complete file protection
- No Backend Servers: We do not operate backend servers that could be compromised
However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. International Data Transfers
Your data may be processed and stored in countries other than your country of residence. When we transfer data to third-party AI services, those services may process data in various locations worldwide. By using JRNL, you consent to the transfer of your data to these locations.
We ensure that appropriate safeguards are in place for international transfers, including:
- Contractual clauses with service providers
- Compliance with applicable data protection laws
- Use of services that comply with GDPR and other privacy frameworks
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy in the app
- Updating the "Last Updated" date
- Providing in-app notifications for significant changes
Your continued use of JRNL after changes become effective constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or wish to exercise your privacy rights, please contact us:
Email: help@traderrnl.app
Response Time: We will respond to privacy inquiries within 30 days.
13. Additional Information
13.1 Data Controller
JRNL is the data controller for your personal information. We are responsible for determining how your data is processed and for what purposes.
13.2 Legal Basis for Processing (GDPR)
For EEA users, we process your data based on:
- Consent: You consent to data processing by using the app
- Contract Performance: Processing necessary to provide the service
- Legitimate Interests: Service improvement and analytics (anonymized)
13.3 Data Minimization
We collect only the data necessary to provide the service. We do not collect unnecessary personal information.
13.4 Purpose Limitation
We use your data only for the purposes described in this policy. We do not use your data for purposes other than those disclosed.
This Privacy Policy is effective as of December 2025. By using JRNL, you acknowledge that you have read and understood this Privacy Policy.
