Privacy Policy — Aureus Journal

• Account details: email address, username, password (stored encrypted via Supabase Auth — we never have access to your password in plain text)
• Trading data: the trades, accounts, criteria, and notes you choose to log in the service
• Technical data: basic server logs (e.g. IP address, timestamps) automatically generated by our hosting provider (Vercel) and database provider (Supabase) for operations and security

We do not collect more data than necessary to run the service. We never sell your data.

The sole purpose is to provide the service to you: authenticate you, store your journal, and display statistics/insights based on your own data. No data is used for marketing or shared with third parties for commercial purposes.

Data is stored with our subprocessors:

• Supabase (database and authentication)
• Vercel (hosting)

Both are established providers with their own security and data protection commitments (Data Processing Agreements).

Your data is kept for as long as your account is active. If you delete your account, all your data is permanently removed (see section 6).

You have the right to:

• Export all your data at any time via Settings → Export Data (CSV or JSON)
• Delete your account and all associated data via Settings → Client Settings → Delete Account
• Request information about what data we hold about you, by contacting us (see section 7)
• Correct inaccurate information directly in the app (e.g. username, email)

When you delete your account, all your data — trades, account settings, notes, images — is permanently removed from our systems. This action cannot be undone.

If you have questions about your data or want to exercise any of your GDPR rights, contact:

Airo — airomcapital@gmail.com

As the service is in active beta development, this policy may be updated. Material changes will be communicated to you via email or in the app.

Aureus Journal is intended for users aged 18 or older, as the service relates to financial decisions and risk management.