Security & data
Read-only, by construction.
Connecting a brokerage to anything is a real decision. Here is exactly what happens, what is stored, and what never moves — in plainer terms than the Privacy Policy, which says the same things more formally.
Never stored, never seen
Where your broker login goes.
It reaches your broker. It does not reach us — not encrypted, not hashed, not briefly. There is no field for it anywhere in the product.
Enforced by the aggregator
What the connection cannot do.
Your broker login
You enter credentials on your broker’s or SnapTrade’s own screens. Tradeonomist holds a connection reference and nothing else — no username, no password, no two-factor codes.
Placing a trade
Access is requested as read-only. Nothing in the codebase touches an order API, and the constraint is applied at the aggregator, which is what actually makes it true.
Moving money
No funding, no withdrawal, no transfer. There is no path to your cash from anything this app can do.
Disconnecting
Disconnecting inside the app revokes the authorisation on SnapTrade’s side too, rather than merely forgetting it here. Trades already imported stay, because they are your history.
Four, and there is no fifth
Everyone who sees anything.
The complete list. Four, and each one does a job you can point at.
| Party | What it does | What it receives |
|---|---|---|
| Supabase | Hosting, database, authentication | All app data lives there |
| Anthropic | Extracts the trades from your written reflection | The text of that reflection, for that purpose only |
| SnapTrade | Brokerage aggregation, only if you connect one | Your broker credentials — which never reach us |
| Apple / Google | Push delivery and billing | A push token; the store handles payment |
There is no fifth. Crash and error diagnostics stay in Tradeonomist’s own database rather than going to a reporting service, and email addresses, access tokens and long digit sequences are stripped on your device before any error report leaves it.
Withheld below five people
Comparison without exposure.
Where the app shows how you compare with others, it reports an average across people at your rank — never an individual, never a name, and never anything financial.
Below five other qualifying people the figure is withheld rather than averaged from a handful. A small average is both meaningless and capable of identifying someone.
Exportable, and deletable
Leaving takes one tap.
Everything the app holds is visible inside the app. You can export it as a single structured file, and delete your account from Settings — which removes your profile, reflections, discipline history, trades and lesson progress, and revokes any brokerage connection.
Rights under PIPEDA, the GDPR and US state privacy laws are honoured regardless of where you live. Details in the Privacy Policy.