1. Who We Are

Trenaly ("we", "us") is the party responsible for processing your personal data (the data controller) for the website and apps. The Service is intended for users aged 18 or older, and we do not knowingly collect data from children.

2. Data We Collect

Username and email (for registration and sign-in)
Password (stored hashed — we never see it in plain text)
Device type and OS (app only)
IP address and sign-in data (for security and abuse prevention)
Push token (FCM) to deliver app notifications
Your analysis history and results, and your alerts
Subscription info from the store (plan type and expiry)
Your paper-book data in the "Smart Wallets" section, if you activate it (see Section 5)

3. App Permissions

📷 Camera: To capture chart images (optional)
📂 Storage: To read images from the gallery (optional)
🌐 Internet: To connect to our servers (required)

4. AI Image Processing

Chart images are processed by an AI model we built and host on our own servers
We do not send your images to any third party or external AI provider
The full-resolution original image is deleted immediately after analysis
A thumbnail and the result are kept in your Analysis History until you delete them or close your account, and are auto-deleted after 90 days at most

5. Smart Wallets Section: Public Third-Party Data & Paper-Trading Data

Public market and wallet data:

This section processes public market data published by third parties through their public endpoints: the Hyperliquid leaderboard and its public positions, Deribit prices, indices and public trade flow, and public data from Binance, OKX and Bybit.
The wallet addresses we show are public addresses on public networks (blockchains) or on public leaderboards, and are displayed truncated (first 6 and last 4 characters) without display names.
We collect no data about the owners of these wallets beyond what the source venue publishes, we do not attempt to identify them or link addresses to persons, and we keep this information only for a limited period (see Data Retention). If you own a displayed address and have a question, contact us via our support page.
This data is fetched by our servers to our servers; your browser or app never connects to these venues directly, and we send them no data about you.

Your paper-book data (subscribers):

If you activate a paper account we store: the account settings (status, followed assets, virtual balance, reset epoch), the virtual trades, the virtual equity curve, and the skip log with its reasons. These are simulated figures and represent no real money.
This data is linked to your account only; it is not shown to other users and not shared with any third party.
When you delete your account, all paper-book data is permanently deleted together with the rest of your data (simulation account, trades, equity curve and log), in line with the Saudi Personal Data Protection Law (PDPL) and app-store requirements.

Legal bases: performance of a contract (delivering subscription features) and legitimate interest (displaying public market information).

6. How We Use Data & Legal Bases

We use your data to:

Provide the analysis service and manage your account (basis: performance of a contract)
Protect the site and app from unauthorized use (basis: legitimate interest)
Meet legal obligations (basis: legal obligation)
Access camera/gallery when you grant permission (basis: consent)

7. Your Rights

You have the right to access, rectify, erase, and port your data, to restrict or object to processing, and to withdraw consent at any time. You can delete your account yourself from within the app or the account-deletion page. You also have the right to lodge a complaint with your data-protection authority.

To exercise your rights, contact us via our support page. We aim to respond within 30 days.

8. Data Retention

Original image: deleted immediately after analysis
Thumbnail and result: until you delete them or close your account, up to 90 days
Account data: for the life of the account
Security logs (IP): for a limited period for security purposes
Login sessions: purged 30 days after they expire
Paper book (Smart Wallets): the simulation account and its trades for the life of the account or until you reset it; the equity curve is downsampled after 30 days; the skip log is deleted after 30 days; everything is permanently deleted with the account
Public market and wallet data: movement events 30 days, signal log 90 days, and the wallet list is replaced on every refresh

9. Security

🔐 Data encryption in transit (SSL/TLS)
🔒 Passwords stored hashed (one-way, not reversible)
🗑️ Original image deleted immediately after analysis

10. Cookies

We use one strictly-necessary first-party cookie (Trenaly_Session) to keep you signed in, and a security (CSRF) token. We do not use advertising or third-party tracking cookies. You can clear these in your browser, but you will be signed out.

11. Service Providers & International Transfers

We share limited data with providers acting on our behalf, solely to run the Service:

Google (Google Play billing, Firebase push notifications)
Apple (App Store billing)
Brevo (sending transactional email)

They may process data outside your country (including the EU and the US) under appropriate safeguards. Your analysis images stay on our servers and are not sent to them. We do not sell your data.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced in-app or by email, and the "Last Updated" date is always shown at the top of this page.

13. Contact

For questions or complaints, use our support page

Privacy Policy