Privacy Policy for TradeWave
Last Updated: September 29, 2026
Educational Simulator Notice: TradeWave is a risk-free cryptocurrency paper-trading and
educational platform. The app does not execute real-money transactions, does not connect to real crypto
wallets or bank accounts, and does not provide financial or investment advice.
1. Introduction
This Privacy Policy explains how TradeWave ("we", "us", or "our") collects, uses, protects, and discloses your
information when you use the TradeWave mobile application on Android. We are committed to transparency, data
minimization, and protecting user privacy in compliance with applicable laws and Google Play developer policies.
2. Information We Collect and How It Is Collected
Depending on how you use TradeWave (as a guest or signed-in user), we collect the following categories of data:
A. Personal Information (Optional)
- Account Credentials: If you choose to create an account or sign in with Google, we collect
your Email address, Name (display name), and a unique User
ID. Guest mode is also available and does not require providing personal credentials.
- Profile Customization: In-app avatar selection or profile photo URL from your Google
account.
B. In-App Activity and Virtual Portfolio Data
- Paper Trading Portfolio: Virtual cash balance, simulated cryptocurrency holdings, buy/sell
trade logs, and performance statistics. For signed-in users, this data is synchronized to Firebase Cloud
Firestore so you can access your practice portfolio across devices. For guest users, this data remains
stored exclusively on your local device.
C. Financial Information & Purchases
- In-App Purchases (Subscriptions): If you upgrade to TradeWave Pro, transactions are
processed directly by Google Play Billing. We do not collect or store your payment card numbers or banking
information. We and our subscription management provider (RevenueCat) receive transaction confirmation,
subscription status, and purchase history tokens to unlock Pro features.
D. Device Identifiers & Analytics (Consented)
- Firebase Analytics (optional): Only if you choose "Allow usage analytics" (you can change this any time in Profile & settings), we collect app interaction events (such as screens viewed, buttons tapped, sign-in methods) and mobile instance
identifiers to analyze performance and improve the app. Personal identifiers and trading amounts are never sent to analytics events. Google Signals, advertising-ID collection and ad personalization are turned off. The app works fully if you decline.
- Firebase Crashlytics (optional): With the same choice, crash reports (stack trace, device model, OS version, app version and a Firebase installation ID) are sent to Google so we can fix crashes. They never include your name, email or trading data.
- PostHog session recordings (optional): With the same choice, PostHog (US cloud) receives anonymous recordings of how screens are used: screen names, layout and taps, plus device model, OS and app version. All text, text fields and images are blanked out on your device before upload, so recordings never show your name, email, balances, trade amounts or coach questions. Recordings are not linked to your account.
- Advertising Identifiers (Google Mobile Ads / AdMob): Free-tier users are served
advertisements. TradeWave does not request the Google Advertising ID permission (
AD_ID) and only requests non-personalized ads. The Google Mobile Ads SDK still processes the device IP address (from which an approximate location can be inferred), the app set ID, ad interactions and diagnostics to deliver, measure and prevent fraud in ad delivery. TradeWave Pro subscribers enjoy an ad-free experience.
E. AI Chat & RAG Queries (Coach Wavey)
- When using the Coach Wavey AI assistant with a user-supplied Google Gemini API key, your questions and, unless you turn it off in Profile & settings, a summary of your paper portfolio (cash, positions and recent trades; no name or email) are transmitted to Google's Generative AI API to produce educational responses. The API key is stored securely
in your device's hardware keychain using
expo-secure-store and is sent only to Google with each request, never to our servers. Offline responses in the Playbook are processed entirely on-device without network transmission.
3. Third-Party SDKs and Service Providers
We work with trusted third-party service providers that process data under strict security standards:
| Service Provider |
Purpose |
Data Handled |
| Google Firebase (Auth, Firestore, Analytics, Crashlytics) |
User authentication, cloud sync for simulated portfolios, and consented usage analytics. |
Email, Display Name, User ID, Paper trading logs; app interaction events, crash reports and app-instance ID only with analytics consent. |
| PostHog |
Consented, anonymous session recordings to find usability problems. |
Screen names, masked screen layout and taps, device model, OS and app version (only with analytics consent). |
| Google Mobile Ads (AdMob) |
Serving rewarded and interstitial ads to support the free version. |
App set ID, IP-derived approximate location, ad interaction metrics, diagnostics (non-personalized ads only).
|
| RevenueCat |
Managing Google Play in-app subscriptions and Pro entitlements. |
App User ID, Purchase history tokens, subscription tier status. |
| Google Generative AI (Gemini) |
Optional AI trading coach interactions when configured by the user. |
User chat prompts sent directly from device via user's API key. |
| Market Data Providers |
Fetching real-time cryptocurrency market prices and rendering candlestick charts. |
Standard HTTP request metadata (IP address). No personal data is sent. |
4. How We Use Your Data
We use the data we handle strictly to:
- Provide, maintain, and synchronize your practice paper-trading account.
- Process and verify TradeWave Pro subscriptions and restore purchases.
- Monitor application stability, fix bugs, and optimize app speed and responsiveness.
- Display non-personalized ads to users on the free tier.
- Enforce account security and prevent fraudulent misuse.
5. Data Storage, Encryption, and Security
- Encryption in Transit: All communications between the app, Firebase, AdMob, RevenueCat, and
third-party APIs use industry-standard HTTPS and Transport Layer Security (TLS).
- Local Storage: Guest portfolios, cache, and UI preferences are stored in local device
storage. Sensitive keys (such as user-provided Gemini API keys) are stored in the device's hardware keychain
via
SecureStore.
- Access Control: Cloud-synced user data is protected by Firebase security rules, restricting
data access strictly to authenticated account owners.
6. Account Deletion and Data Retention
We respect your right to control your personal data and provide clear, accessible mechanisms to delete it:
How to Request Account and Data Deletion
You can request complete deletion of your TradeWave account and all associated cloud data at any time:
- In the app: Open Profile & settings and tap Delete account. This deletes your Firebase Authentication record, profile and all cloud portfolio data, then erases data on the device. Guests can tap Erase data on this device.
- Email Request: Send an email to digitaltoolshub4all@gmail.com
with the subject line
TradeWave Account and Data Deletion Request. Please send the request
from the email address associated with your TradeWave account.
- What is Deleted: Upon receiving your request, we permanently delete your Firebase
Authentication record, Firestore profile document, and all cloud-stored paper trading portfolio records
and transaction history. Associated customer identifiers in RevenueCat are also deleted or anonymized.
- Processing Timeline: Requests are processed within 30 days of verification.
- Local Data: For guest mode or locally cached data, you can instantly erase all local
data by tapping Erase data on this device in Profile & settings, or by clearing the app's storage in Android Settings.
7. Children's Privacy
TradeWave is intended for general audiences aged 13 and older (or the applicable minimum age in your
jurisdiction). We do not knowingly collect personal data from children under 13. If we become aware that a child
under 13 has provided us with personal information, we will take immediate steps to delete such data from our
servers.
8. Your Choices & Controls
- Guest Mode: You can practice trading completely anonymously without registering an account.
- Analytics & Ads Consent: You can review the analytics and advertising consent choices
within the app settings.
- Ad-Free Experience: You can upgrade to TradeWave Pro to remove all ads.
- API Key Management: You can view, test, or permanently delete your stored Gemini API key
from the Coach Wavey settings at any time.
9. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our app features or regulatory
requirements. Any updates will be published on this page with an updated "Last Updated" date. We encourage you
to review this policy periodically.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data privacy, please
contact us at:
TradeWave Team
Email: digitaltoolshub4all@gmail.com
Website: https://digitaltoolshub.github.io