Privacy Policy

TradeLVL · Effective October 8, 2026

TradeLVL (the "app") is an educational trading simulator operated by Aidan Soto, an individual sole proprietor in New Jersey and the seller identified in the applicable Apple App Store or Google Play listing ("we", "us"). This policy explains what the app collects, why, who receives it and the choices you have.

The short version. There is no account and no sign-in. Your trades, journal and progress stay on your device. The app has no ads, no analytics and no tracking. We do not sell your personal information or share it for targeted advertising. Online features send limited data described below. Subscription payment is handled by Apple or Google. You may optionally give us a verified email for an additional acknowledgment, renewal reminders and subscription support.

Local app data

Your simulated trades, journal entries and notes, settings, puzzle rating and history, saved mistakes, duel results, game scores, completed simulator decision examples and process scores, streak, lesson progress, study plan, and the date and version of your Terms acceptance are stored locally in the app. The locally stored acceptance record includes the statement shown to you and the app version; it is used to avoid asking again unless the Terms version changes. If you add the home screen widget, the app saves your streak, daily puzzle status, rating and the dates of mistakes due for review in storage shared only with that widget on your device. We do not receive any of this unless you use a feature below. On iPhone, an Apple device backup may include local app data if your backup settings permit it; Apple controls and stores that backup under its own terms. TradeLVL disables Android app-data backup.

Your App ID

The first time you open the app it creates a random identifier, called your App ID. It is not your name, phone number, advertising identifier or any hardware identifier. It is used for the leaderboard, the daily puzzle stat, AI coach limits and to link your subscription in RevenueCat. Deleting your data in the app replaces it with a new one. You can see it in Rules & setups as "App ID for privacy requests".

Weekly leaderboard and leagues

The public leaderboard is off by default. If you turn on "Show me on the weekly leaderboard" in Rules & setups, the app sends our server your App ID, an automatically generated display name (for example "Steady Heron 41"), your best Puzzle Rush score for the week, your puzzle rating, whether you have Pro (shown as a badge only after we confirm it with RevenueCat) and, if you joined one, your league code. Other users can see the generated name and scores. Scores are reported by the app and are not verified, and nothing of value is ever awarded for them. You cannot enter your own name, so nothing you type is published. While the leaderboard is on, finishing the daily puzzle also sends your App ID, the date and whether you got it right, so we can show how many players solved it. To limit automated write abuse, our server keeps a daily rotating, salted hash of the request's network (IP) address for 2 days and an aggregate daily capacity counter for up to 3 days; the plain address is not stored by our code and neither counter contains your App ID. We may post the weekly top 10 (generated names and scores) and the daily solve rate in our Discord community and on our website. We delete weekly boards 12 weeks after the week ends and daily results after 35 days.

Friend duels

A duel code contains only a puzzle number, a score and a time. Codes are created on your device and shared only if you choose to send one. We do not receive them.

AI coach

The AI coach is an AI, not a person. It is off until you allow it: whether you start it from a feature or from the switch in Rules & setups, the app first explains what will be shared and asks your permission, and it asks again if what we share changes. If you allow it and use it (including the weekly coach report for Pro members), the simulated trades, setup tags, grades, mistake tags, notes, questions and practice statistics (such as puzzle accuracy, game scores and streak) you choose to send are transmitted to our server and to Anthropic, PBC, which provides the Claude AI model that writes the feedback. Your App ID and whether you have Pro are sent to apply usage limits. To stop automated abuse, our server keeps a daily rotating, salted hash of your network (IP) address for 2 days. The plain address is not stored by our code, but we treat the hash as pseudonymous data rather than claiming it is anonymous. We do not store the content of your requests; we keep usage counts per App ID for up to about two months and aggregate daily/monthly capacity counters that are not linked to an App ID. Anthropic processes requests as our service provider under its commercial terms and does not use them to train its models. Anthropic deletes them within 30 days, except that content flagged for breaking its usage policy can be kept for up to 2 years, and its safety classification scores for up to 7 years. Do not put personal information in your notes or questions. You can turn the coach off at any time in Rules & setups.

Reporting a response. Each AI response has a Report button. If you report one, the app sends us the response text, the reason you picked, the feature it came from and your App ID, so we can review it and improve the coach's safeguards. We keep reports for 90 days.

Purchases

TradeLVL Pro is sold through the Apple App Store or Google Play, which handle payment. We never receive your card or bank details. We use RevenueCat, Inc. to confirm whether you have an active subscription. RevenueCat receives your App ID and purchase records from Apple or Google (such as product, price, dates and transaction identifiers). RevenueCat's software in the app also sends it basic technical information such as device model, operating system and app version, store country and IP address. See RevenueCat's privacy policy at revenuecat.com/privacy. Because purchase records are needed to keep your subscription working, "Delete all my data" does not remove them; email us to request deletion.

Optional subscription email and notices. Apple or Google provides the official receipt, purchase history and store billing notices. You can subscribe without giving us an email. If you choose to verify one, we link it to your App ID and use it only to send an additional TradeLVL acknowledgment, renewal reminders and subscription support. Netlify stores it for us and Resend delivers the messages. To prevent verification-message abuse, we keep a salted email hash for up to one day and a daily rotating, salted network-address hash for up to two days, used only to limit requests; our code does not store the plain network address. After the reminder service is registered for a subscription, we also set the email as RevenueCat's subscription email attribute so purchase events can be matched to the same subscription. If you verify an email but do not register it for a subscription, we delete it within 30 days and do not set it in RevenueCat. We keep a registered optional email while the reminder service is active and delete it within 90 days after the subscription ends. Choosing "Delete all my data" removes the optional email, notice settings and RevenueCat email attribute even if the store subscription remains active. Deleting data does not cancel the subscription; Apple or Google continues to provide official billing notices.

Renewal consent records. Before you subscribe, the app asks you to confirm the automatic renewal terms. After the purchase goes through, the app and our server save the full record of what you agreed to (date and time, store, plan, price, transaction information, exact wording and app/UI versions). RevenueCat receives selected attributes such as the date, product, transaction and consent sentence, not the entire server record. We keep the full record to document your authorization and resolve billing or consumer-protection disputes, for at least three years and at least one year after the subscription ends, whichever is later. If store status is temporarily unavailable, deletion waits and our monitor reports a problem; if an end date cannot be recovered, a seven-year outer limit prevents indefinite retention. Deleting your data in the app does not delete these limited transaction records during that period. In Rules & setups you can always see and save a copy of your subscription details.

Notifications

If you turn on the daily puzzle reminder, it is scheduled locally on your device. Apple or Google controls official store billing notices. If you add the optional verified email described above, we send additional reminders there; the app may also schedule a local reminder if you allow notifications. We do not run a push notification server and do not collect a push token.

Server logs and hosting

Our server runs on Netlify in the United States. Our own server code does not write what you send, the AI response, your App ID or the network hash to application logs. To monitor AI cost and reliability, it logs only the feature name, model name, number of AI calls, aggregate input/output token counts, whether a safety retry or fallback occurred and success or error status. Netlify may keep function, request and security logs, which can include the time of a request, IP address, app version and error details, under its current service settings and Privacy Policy.

Links to other sites

Some buttons open our website or other sites, which have their own privacy policies. Our website and community are separate services from the app.

Ads, analytics and tracking

The app contains no third-party advertising or analytics software and does not track you across other companies' apps or websites. We do not sell or share personal information, as those terms are defined under California and other US state privacy laws, and we do not use it for targeted advertising.

Do Not Track and Global Privacy Control. Because we do not track you across other sites or apps and do not sell or share personal information, we treat every user as if they had turned on a Do Not Track or Global Privacy Control signal. Our website may respond to these signals differently; see its own policy.

Who receives data

We use these providers only for the purposes described above and require them to protect the data consistently with this policy and applicable law. We may also disclose information if the law requires it, to protect our rights or users' safety, or as part of a sale or reorganization of the business, in which case this policy continues to apply.

Age

The app is intended for adults 18 and older. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a minor has sent us information, contact us and we will delete it.

Age checks required by law. Some US states (for example Texas) require apps to check a user's age category through the app store. In the iPhone and Android apps, nothing loads until this check finishes. Where it applies, the app asks Apple (Declared Age Range) or Google (Play Age Signals) for your age range. The store shares only an age range, never your birthday. If you are under 18, the app is blocked on that account. If the store asks you to verify your age, you decline required sharing, or Google reports that the age range was not shared, the app stays closed and lets you try again. Google does not tell us whether a not-shared result means the user or parent refused or the account is not eligible, so the app does not replace that result with self-attestation. If an older iPhone does not support Apple's age-range interface, you must confirm that you are 18 or older to continue. If the check cannot finish because you are offline, the app stays closed, unless the check passed on this device in the last 30 days. The app keeps one small record, on your device only: either that access is blocked because you are under 18, or the date the check last passed and whether you confirmed your age yourself on an older iPhone. It does not keep your age range and does not send anything about your age to our server.

Your choices and rights

Security

Data sent to our server travels over encrypted connections (HTTPS). No method of storage or transmission is completely secure, but we keep what we collect to the minimum the features need.

International users

We are based in the United States, and our server and service providers process data in the United States.

Changes

If we change this policy, we will update this page and the effective date above. Material changes will also be noted in the app.

Contact

Aidan Soto, an individual sole proprietor in New Jersey and the operator of TradeLVL, USA · admin@famousoptionstrading.com