Privacy Policy

Information we collect

Account information

When you create an account you sign in with Apple, Google, or an email and password. We store your email address (when your provider shares it) and an authentication identifier. This is what lets your journal follow you across the web and your iPhone.

Trading journal information

The trades, positions, journal entries, notes, tags, setups, reflections, and review fields you create or sync, along with trade events and import history. This includes symbols, direction, timestamps, sizes, fees, and profit and loss figures.

Broker sync information

Broker sync is optional. If you connect a broker, we collect the information needed to connect to it, which depending on the broker may include API keys, API secrets, access or refresh tokens, private keys, a broker login, or an MT5 login, server, and password, along with the trading data the broker returns.

Screenshots and attachments

Screenshots and other attachments you add to trades are stored locally on your device. They are not uploaded to our cloud storage and are not included in AI reviews.

AI review information

If you choose to generate an AI review, selected trading context is sent to a third-party AI provider to produce the written review. This may include aggregated statistics, symbols, setup and behavior tags, and your reporting-currency context. We do not intentionally send your email, Apple or Google identifier, broker credentials, or broker passwords to the AI provider.

Premium and subscription information

Purchases are handled by the Apple App Store and StoreKit. We do not receive your card number, billing address, or full payment details. We use a subscription management provider to read and manage subscription status, purchase receipts, product identifiers, and premium entitlement. We send that provider an app user identifier so purchases can be linked to premium access; before you sign in this may be an anonymous identifier, and after you sign in it may be your account identifier.

Analytics and product usage

We use a third-party analytics provider to understand general app usage and improve the product, for example launches, screen views, feature usage, and whether a sync or import succeeded. We do not intentionally send broker credentials, passwords, trade notes, account numbers, symbols, or profit and loss values to analytics.

Local storage on your device

Journal data is stored in the app's local database and protected by your device's system security and encryption where available. On iOS, broker credentials may also be protected in the device Keychain, which is designed for sensitive secrets. Deleting the app removes app-scoped local data from the device, although platform-controlled backups such as iCloud may retain copies depending on your settings.

Accounts and cloud sync

Astro uses a cloud infrastructure provider for authentication, the cloud database, cloud sync, real-time updates, and secure server-side functions. If you create an account or use cloud sync, selected data, including trades, positions, trade events, import history, broker connection metadata, reporting-currency settings, and sync state, is stored with that provider and associated with your account. Communication with our cloud provider uses HTTPS.

Broker connections and broker sync

Broker sync is optional and requires you to choose to connect a broker. The credentials you provide are used only to provide broker connection and sync, and are encrypted in cloud infrastructure so sync can work across devices. We use broker access to read your trade and account data, such as trade history, symbols, prices, quantities, fees, profit and loss, balances, equity, and margin. We never use it to place, change, or cancel trades. For some brokers such as MetaTrader 5, sync runs on secure backend infrastructure. You can disconnect a broker in the app at any time, which stops future sync for that connection.

Premium and payments

Astro offers a free tier and a paid premium tier. Payments and subscriptions are handled by the Apple App Store and StoreKit, and we do not receive or store your card number, billing address, or full payment details. We use a subscription management provider to read, validate, and manage subscription entitlements; that provider does not directly process your card payment.

AI reviews

AI reviews are optional. When you generate one, the app sends selected trading context to a third-party AI provider over HTTPS so it can produce a written review. We do not intentionally send broker credentials, passwords, API secrets, tokens, private keys, your Apple or Google identifier, or your screenshots. Generated reviews are stored locally on your device.

How your data is stored and protected

Data is encrypted in transit using HTTPS, and broker credentials stored in cloud infrastructure are encrypted at rest. Access to your records is isolated per account, so one user cannot read another user's data, and broker credentials are reachable only through restricted, server-side access. No system is perfectly secure, but we work to protect your data and to limit who and what can reach it.

No ads and no sale of your data

Astro does not display third-party ads. We do not sell your personal data, do not use data brokers, and do not use your data, broker credentials, or trading data for targeted advertising or cross-app tracking.

Your choices, account deletion, and data rights

You can view, edit, export, and delete your trades and journal content from within Astro. Signing out clears the local session and may remove locally synced data from that device, but does not delete your cloud data. If you delete your account in the app, we delete account-linked data from our cloud database, including cloud-synced journal data, trades, trade events, import history, broker connections, broker credentials, and settings. We also remove the local session and local account data where possible. Some operational logs, analytics data, or third-party records may remain according to those providers' retention policies.

If you are in a region with data-protection laws, such as the European Union or Turkey, you also have rights to access, correct, export, and delete your personal data, and to object to or restrict certain processing. To exercise any of these, use the in-app controls or email supportastrotrade@gmail.com.

Data retention

Local data remains on your device until you delete it, sign out where local cleanup applies, delete your account, or delete the app. Cloud data remains associated with your account until it is removed through in-app deletion or account deletion. Broker credentials remain stored while the connection is active or until removed through disconnect or account deletion. Data held by Apple, Google, and our other providers is retained according to their own policies.

Service providers we rely on

We use a small set of trusted providers to operate Astro. Each receives only the data it needs for its role, and processes it under its own privacy and security practices.

• Cloud infrastructure provider. Authentication, cloud database, cloud sync, real-time updates, server-side functions, and encrypted broker-credential storage. Holds your account identifiers and cloud-synced journal and trading data.
• Apple (Sign-In and App Store / StoreKit). Optional sign-in, app distribution, subscriptions, and payments. Apple processes your payment and standard diagnostics. We do not receive your card details.
• Google (Sign-In). Optional sign-in. We receive a Google identity token used for authentication.
• Subscription management provider. Subscription entitlement management, receipt validation, and restore support. Receives an app user identifier, purchase receipts, product identifiers, and subscription status. It does not directly process card payments.
• Analytics provider. Product usage analytics, without financial values. Receives usage and feature events only.
• AI provider. Optional AI reviews. Receives selected and aggregated trading context when you generate a review.
• Broker APIs and MT5 backend infrastructure. Optional broker sync. For some brokers such as MetaTrader 5, sync runs on secure backend infrastructure that connects using the credentials you provide and stores the results in your account.
• Exchange-rate provider. Currency-rate lookups for reporting-currency calculations. Receives currency-pair requests only, with no journal content or credentials.

International processing

Astro is operated from Istanbul, Turkey, and the providers above may process your data in countries other than your own, including within the European Union and the United States. By using online features you understand that your data may be processed outside your country of residence.

Age requirement

Astro is a financial tool intended for adults. Under our terms of service you must be at least 18 to use Astro. It is not directed to children, and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us data, contact us and we will remove it.

Changes to this policy

We may update this policy as the product changes. When we make a material change, we will update the date at the top of this page and, where appropriate, note it in the app or on the App Store listing. Continuing to use Astro after an update means you accept the revised policy.

Contact

Questions about your privacy or this policy can go to supportastrotrade@gmail.com. You can also read our terms of service.