Privacy Policy

Revtra · Effective date: 5 July 2026

This Privacy Policy explains what information Revtra (“the app”, “we”, “us”) collects, why we collect it, how it is stored, and the choices you have. By using the app you agree to the practices described here. This policy works together with our Terms of Use.

1. Who we are

Revtra is a mobile trading-journal application that lets you record your trades, review your statistics, and optionally sync read-only data from a supported cryptocurrency exchange. You can reach us at support@revtra.app for any privacy question or request.

2. Information we collect

a. Account information

To create an account we collect your email address and a password. Authentication is handled by our backend provider (Supabase). Passwords are stored by that provider in hashed form; we never see your plain-text password.

b. Trade journal data you enter

Anything you add to your journal, including: instrument/symbol, entry and exit prices, position size, profit and loss, dates, fees, your starting capital, deposits/withdrawals you record, strategy and psychology notes, ratings, and any photos you choose to attach from your device gallery. This data is stored with your account so it is available across sessions.

c. Exchange integration data (optional)

If you connect an exchange, you provide API credentials (an API key, secret, and passphrase). These are used only to read your account data. See Section 6 for exactly how these are handled. Once connected, the app reads your balances and trade/transfer history (typically the last 90 days, limited by the exchange) so it can build your journal and statistics.

d. Technical data

The app requires only internet access to function. We do not build advertising profiles and we do not embed third-party analytics or tracking SDKs.

3. Information we do not collect or access

The app explicitly blocks access to your location, contacts, microphone, and camera. It requests gallery access only at the moment you choose to attach a photo to a journal entry, and only for that purpose.

4. How we use your information

• To create and secure your account and let you sign in.
• To store, display, and sync your trade journal and statistics.
• To read and import your exchange balances and trade history when you connect an exchange.
• To generate your on-device statistics, insights, and rule-based trading plan.
• To respond to your support and privacy requests.

We do not sell your personal data, and we do not use it for advertising.

5. How your exchange API keys are protected

This is important, so we spell it out:

• We ask you to create read-only API keys. The app never calls order or withdrawal endpoints — it is technically limited to reading data.
• Your API keys are stored encrypted on your device using the operating system’s secure storage (Keystore on Android / Keychain on iOS).
• Your secret key never leaves your device. Requests to the exchange are signed locally on your device; only the resulting signature is transmitted.
• To reach the exchange from regions where it may be network-restricted, requests may be relayed through a secure server function. That relay forwards your already-signed request and never receives your secret key.
• When you disconnect the exchange, your stored keys are removed from your device.

6. Where your data is stored and how it is secured

• Your account and journal data are stored in a managed cloud database (Supabase). Access is protected by row-level security so each user can access only their own data. Data is transmitted over encrypted (HTTPS) connections.
• Your exchange API keys are stored only in your device’s secure storage, not in our database.

7. Third parties we share data with

We keep third parties to the minimum needed to run the app:

• Supabase — our backend, database, and authentication provider (a data processor acting on our behalf).
• Your chosen exchange (e.g. OKX) — when you connect it, your API key and passphrase are sent to the exchange to authenticate read-only requests. Your use of the exchange is also governed by the exchange’s own privacy policy.

We do not share your data with advertising networks, data brokers, or third-party AI providers.

8. Data retention and deletion

• Your account and journal data are kept until you delete them or delete your account.
• You can delete your account — and the associated data — from within the app. This action is permanent.
• Exchange API keys are removed from your device when you disconnect the exchange or delete your account.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. You can exercise most of these directly in the app, or contact us at support@revtra.app and we will respond within a reasonable time.

10. Children

The app is intended for users who are 18 years or older and is not directed to children. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

11. International data transfers

Your data may be processed on servers located in countries other than your own. Where this happens, we rely on our providers’ safeguards to protect your data in line with applicable law.

12. Changes to this policy

We may update this policy as the app evolves. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Continued use after changes means you accept the updated policy.

13. Contact us

Questions or requests about your privacy? Email support@revtra.app.

---