Privacy policy

Last updated: 16 October 2026

This policy explains what TJ ("we", "us") collects when you use the TJ trading journal at tjtrace.com and in the TJ app, why we collect it, and the choices you have. TJ is operated from Istanbul, Türkiye. Contact: support@tjtrace.com.

1. What we collect

• Account details: your email address, and if you sign in with Google, your name and profile picture from Google.
• Your age group: at sign-up (or the next time you sign in, for accounts made before 16 October 2026) we ask whether you are 18 or older, 13 to 17, or under 13, and, for 13 to 17, whether a parent or guardian agrees. We save the answer and when you gave it. We don't ask for your date of birth.
• Journal content you enter: trades (prices, size, times, results, notes), screenshots you upload, strategies and confluences, tags and reports, account names and balances, prop-firm rules, risk settings, mistakes and state-of-mind tags.
• Imports, only if you set them up: read-only API keys for Binance or Bybit, stored encrypted and used only to fetch your closed trades; and, on Silvy and Sapphire, your MetaTrader login number and server for automatic sync. Your MetaTrader investor (read-only) password goes straight to our provider MetaApi and is never stored by TJ.
• Daily activity: one record for each day you open TJ, and when you last signed in. We use it to count daily users, show activity and keep the service secure.
• How you found TJ: if you allowed analytics in Cookie settings, the first page, campaign tag and website that brought you to TJ; if you came through a friend's invite link, the invite code (so your friend gets the reward). We save this with your account, to see which channels bring people to TJ.
• Payments, only if you buy a paid plan: Whop runs checkout. Whop collects your name, email address and payment details. TJ never sees your card number. Whop tells TJ your plan, your subscription status (for example active, cancelled or ended) and when your paid period ends. We keep a record of your subscription and payments for accounting.
• Email updates, only if you subscribe: your email address, language and the page where you signed up (for example the prop firm rules cheat sheet). We send the cheat sheet you asked for and occasional short updates. Unsubscribe with the link in any email, or write to support@tjtrace.com.
• Account emails: if you have a TJ account, we send a welcome email, two short tips in your first week and, if you haven't opened TJ for a while, an occasional check-in. We keep a record of which of these emails we sent and when, so you never get the same one twice. Switch them off in Profile → Notifications or with the link in any of these emails.
• AI review, only when you use it: statistics from your journal measured in R (never money amounts, your email or account numbers), any question you type in "Ask your journal", and your trade notes only if you switch on "Let AI read my notes". The review that comes back is saved in your journal.
• Mentor spaces, only if you use them: the spaces you create or join, whether you let your coach see your journal, and the comments you and your coach write.
• Shared strategies, only if you share one: the name you choose to show, your description, the checklist, its results in R calculated from your journal, how often it was copied, and reports from other users.
• On your device: your browser keeps your sign-in session, your cookie choice and small preferences (for example, dismissed alerts). Anything optional is stored only if you allow it. We don't use advertising cookies or third-party trackers. Details in section 9.
• Visit counts: when a page opens, we add one to a daily count for that page and the website or campaign link you came from. This stores nothing on your device, and no IP address or anything that identifies you is kept. If your browser sends "Do Not Track", nothing is counted.

2. Why we use it

• To run your journal: save, show and analyse your trades, and send the alerts you switched on.
• To run the features you choose to use with others: mentor spaces, shared strategies and the crew board.
• To sell and manage paid plans: apply your plan and any founding-member discount, handle refunds, and keep accounting and tax records.
• To send the email updates you subscribed to, and a few emails that help you get started with your account.
• To keep TJ secure and working: preventing abuse, fixing problems and supporting you when you ask.
• To improve TJ: understanding which features are used, based on account-level activity.

Legal grounds: providing the service you signed up for (contract), our legal obligations (for example keeping tax and accounting records), our legitimate interest in keeping TJ secure and improving it, and your consent where we ask for it (for example email updates, letting a coach see your journal, or letting AI read your notes). For users in Türkiye this follows the Personal Data Protection Law No. 6698 (KVKK); for users in the EU and UK, the GDPR.

3. Who can see your data

• You. Your journal is private to your account.
• TJ administrators. A small number of TJ admins can open journals and screenshots, read-only, to provide support, investigate abuse or errors, and improve TJ. We don't sell your data.
• Other users, only for what you switch on below. Nothing else is shown to other users.
• The crew board, only if you switch it on: other users see your callsign, trade count, win rate and net R. Never amounts in money and never individual trades.
• Your coach, only if you join a mentor space and allow it: they see your trades, screenshots, strategies and analytics, read-only. Never your email, notebook, AI reviews or broker connections. Comments in a mentor space are visible to you and your coach. You can stop sharing or leave at any time.
• Everyone signed in to TJ, only for a strategy you share: its name, description, the name you choose to show, its checklist and its results in R. Never money, your accounts or individual trades. You can stop sharing at any time. Copies other users already made stay with them.
• Service providers who run parts of TJ for us and process data on our instructions:
  • Supabase: database, sign-in and file storage, EU region: Frankfurt, Germany.
  • Netlify: website hosting.
  • Google: only if you use Sign in with Google.
  • Anthropic: the Claude API, only when you use AI review, to write the review.
  • Resend: sends sign-in emails, account emails and the email updates you subscribed to.
  • MetaApi (metaapi.cloud): connects read-only to your MetaTrader account, only if you turn on MetaTrader auto-sync, to read your closed trades.
  • ImprovMX: forwards emails you send to support@tjtrace.com.
• Whop, for payments. Whop runs checkout and billing for TJ. It handles your name, email and payment details under its own privacy policy, and may act as the seller of your subscription. It shares your subscription status back with TJ.
• Authorities, only when the law requires us to share data.

4. International transfers

Your journal is stored in the EU (Frankfurt). Some providers, including Anthropic and Whop, may process data in other countries, including the United States, under their own safeguards. By using TJ you acknowledge these transfers; where KVKK or GDPR require consent or other safeguards for a transfer, we rely on them.

5. How long we keep it

• Your journal is kept while your account exists. If you delete your trades or ask us to delete your account, we delete the data within 30 days, except where the law requires us to keep something longer. Backups roll off within a short period after that.
• Subscription and payment records are kept for as long as tax law requires, even after you delete your account. We keep only what accounting needs. Whop keeps its own records under its own policy.
• Imports: trades from automatic imports that have already been imported are cleared from your import inbox after 60 days.
• Daily activity, mentor spaces, comments and shared strategies are deleted with your account. Copies other users made of a strategy you shared are theirs and stay in their journals.
• The email list: until you unsubscribe or ask us to remove you.

6. Your rights

You can ask to access, correct, export or delete your data, object to or restrict certain uses, and withdraw consent. Many of these you can do yourself: Profile → Download full backup exports everything, Delete all trades removes your journal, and the link in any email unsubscribes you. For anything else, email support@tjtrace.com. For payment details held by Whop, you can also contact Whop directly. Under KVKK Article 11 and the GDPR you can also complain to the Personal Data Protection Authority (KVKK Kurumu) or your local data protection authority.

7. Security

Data travels encrypted (HTTPS). Database rules make sure each user can only read their own journal, and a coach can read a student's journal only while the student allows it. Screenshots are stored privately and shown through short-lived links. Exchange keys must be read-only and are stored encrypted. Card details go to Whop and never reach TJ. No system is perfectly secure, so please use a strong, unique password.

8. Age and young users

Under 13: TJ is not for children under 13, and we don't knowingly collect their data. If someone says at sign-up that they are under 13, we don't create an account. If we learn that an account belongs to a child under 13, we sign it out and delete the account and its data within 30 days. If you think a child under 13 has given us data, email support@tjtrace.com and we will delete it.

13 to 17: you can use TJ only with a parent's or guardian's permission, which we ask you to confirm when you sign up. Where the law needs a parent's consent for us to use a young person's data (for example under KVKK, or under the GDPR in EU countries that set the age above 13), that permission is the consent we rely on. A parent or guardian can use the rights in section 6 for the young user, including asking us to delete the account, by emailing support@tjtrace.com.

Limits for accounts under 18: paid plans, MetaTrader and exchange connections, mentor spaces, strategy sharing and the community board are switched off. Trading with real money is for adults, and nothing in TJ is financial advice.

9. Cookies and similar storage

TJ doesn't use advertising cookies, third-party trackers or social media pixels. It keeps a few small items in your browser's storage on your device (local storage and session storage, which work like cookies). You choose the optional ones when you first visit and can change your mind any time in Cookie settings.

• Needed (always on): your sign-in session (set by our sign-in provider, Supabase), your cookie choice, your language, tour and demo progress, dismissed alerts and similar settings, a friend's invite code if you came through an invite link (kept for 30 days), and, after an "under 13" answer at sign-up, a one-day note that stops a new sign-up from that browser. TJ can't work, or can't do what you asked, without these, so they don't need consent.
• Analytics (only if you allow it): a note of whether this is a new visit, and the first page, campaign tag and website that brought you to TJ. Kept on your device, and saved with your account if you create one. If you say no, we still count page views as described in section 1, without storing anything on your device.
• Videos (only if you allow it or press play): a few pages can show a YouTube video. Nothing loads from YouTube until you press play. Playing it loads YouTube, which may set its own cookies under Google's privacy policy.

Signing in with Google takes you to Google's own page, which uses Google's cookies under Google's policy.

10. Changes

We'll update this page when things change and tell you in the app about important changes.