Privacy policy
Last updated: 13 November 2026.
This policy explains what information Trading Checkup (tradingcheckup.com) handles, why, where it is kept, how long, and the choices you have. Most tools work inside your own browser and send us nothing. We only hold information when you sign in, send us a form or an email, or use a tool that needs our server. We never sell personal information and we do not run ads.
Who we are
Trading Checkup is a registered Australian business (sole trader), ABN 66 763 463 348, West Lakes SA 5021, Australia. For any privacy question or request, email our Privacy Officer at hello@tradingcheckup.com with the subject “Privacy”. We reply within 30 days, usually much sooner. We follow the Australian Privacy Principles (Privacy Act 1988) and apply the same standard to people in every country.
1. Information that stays on your device
The tools save your settings, plans and results in your browser's storage on your own device. We cannot see them. You can delete them any time with ‘Clear my data on this device’ in Settings, or by clearing this site's data in your browser. If you clear it and did not sync it, we cannot get it back.
2. Your account (optional)
You sign in with your email and a one-time code we email you. There are no passwords. If ‘Continue with Google’ or ‘Continue with Apple’ is shown and you use it, that company tells us your email address and confirms it is yours.
| What we keep | Why | How long |
|---|---|---|
| Email address | To sign you in and contact you about your account | Until you delete your account |
| Name, phone number (with country code) and country (asked when you sign up) | To protect your account (for example, to check it is really you if you lose access) and, only if you choose, to tell you about anything that affects your account, your money or your data. We check the phone number by text message only if you press ‘Verify’. It is never used for marketing. | Until you delete your account |
| 2-step sign-in secret (only if you turn it on) | So your authenticator app can make codes for your account. We never see your codes. | Until you turn it off or delete your account |
| A short list of the devices you signed in on: up to 10 device codes (not IP addresses), the device type (for example ‘Chrome on Android’) and the dates | When you sign in on a new device or browser we email you a security notice with the device type and an approximate city and country from the connection, so you can spot a sign-in that was not you | Until you delete your account (‘Sign out everywhere’ also clears the list) |
| Settings: language, news topics, report email choice (none, daily or weekly), and any watchlist saved before that tool was retired | To keep the site the same on all your devices and send the report you chose | Until you change them or delete your account |
| Tool data you choose to sync (planner limits, challenge, and any journal synced before that tool was retired) – off by default | To keep it on all your devices | Until you switch sync off and remove it, or delete your account |
| Plan details: packs, any trial end date, membership end date | To give you the tools you paid for | While you have an account; payment records as below |
Accounts are stored by Supabase (our database provider) on servers in Sydney, Australia. Each person can read and change only their own records. Delete your account any time in the profile sheet (‘Delete my account’): your email, profile, settings and synced data are removed straight away. Copies may stay in our providers' routine backups for a short time until they are overwritten.
Login email, phone and country. Your login email is changed only through support (we check it is really you first; one change every 90 days). You can change your phone number once every 30 days, and one phone number can belong to only one account – to check that we keep a one-way code made from the number, never linked to anything that shows who owns it. We keep the dates you changed your phone or country (country sets future prices).
2b. Retired tools
On 4 November 2026 we retired these tools: Trade Journal and Risk Range, Watchlist and watchlist alerts, Glossary, the Academy (lessons, quiz and Mentor track), Strategy Library, Options Risk Check, Expiry-Day Odds, Daily pre-flight and Security Checkup. They no longer collect anything. Watchlist alert emails have stopped. Anything you saved in your browser while using them stays on your device until you clear it (journal users can download their trades first). Any watchlist or synced journal kept in your account stays until you delete it in the profile sheet or delete your account, or you can email us and we will delete it.
3. Files you upload to a Workspace tool
Member tools (strategy report, report reader, tradebook autopsy, tax pack, payout check, backtest, AI strategy check, bot kit) use a file or text you choose. It is sent over an encrypted connection (through Cloudflare) to our own server in Australia, where the tool runs automatically. The uploaded file is deleted right after the run and the result files 24 hours after the run. No person reads your file or result. We never use your files to trade, never share them and never use them to train AI. Our run record keeps which tool ran, when, how long it took, the file size, your account id (for the daily run limit) and the short summary shown on screen – never the file itself. Details: How we handle your uploads.
4. Information you send us
| What you send | What we receive | Why | How long |
|---|---|---|---|
| Members waitlist | Name, email, country, what you trade, optional comment | To email you once when membership opens | Until then, or until you ask (at most 24 months) |
| Business or contact form | Name, company, email, your message | To reply | Up to 24 months after our last contact |
| Problem report | What you typed, optional email, page, language, screen size, browser and recent error messages | To fix the problem and reply | Up to 12 months |
| Tip Check sample (only if you tick the box) | The message text and its result, without your name or email | To improve Tip Check | Up to 24 months |
| Prop-firm rule change note (optional) | The firm you picked and, only if you type it, your email | To tell you when that firm's rules change | Until you ask us to stop, at most 24 months |
| Email to us | Your email, message and our reply | To help you | While needed, then deleted |
Fair-use limits and refresh requests (free beta). To count the free daily answers and monthly Workspace runs we keep, for up to 2 days (answers) or 30 days (runs), a count linked to your account or to a one-way daily code made from your IP address (never the address itself). If you press ‘Ask support to refresh it’, we receive your email, your account ID, which limit and the page you were on, keep it with the other forms (up to 120 days) and reply by email. Nothing from your files or questions is included.
Please never put passwords, one-time codes, card numbers or ID documents into a form or the search box. We never ask for them.
5. Emails we send
We send sign-in codes and account notices (needed to run your account). We send a report email only if you choose daily or weekly in Settings, and a result email only if you tick ‘Email me this’. Every report email names us and our ABN and has a one-click unsubscribe, which we act on within 5 working days (usually at once). We keep a short record of what was sent, when and whether it bounced, for up to 12 months. We do not send marketing you did not ask for. Emails are sent by Supabase or our email delivery provider, Resend (United States), once it is switched on.
6. Payments (when membership opens)
Payments are handled by Lemon Squeezy (United States), our payment partner and the seller of record (payments are in test mode until we announce otherwise; nothing is charged yet). You type your card details into the provider's page, not ours, and we never see or store card numbers. We receive your email, plan, amount, country, order number and the payment result (never card numbers), and keep invoices and payment records for 5 years because tax law requires it (longer only if the law of your country requires it).
7. Services that help run the site
- Cloudflare hosts the site, protects it from attacks and passes forms to us. It processes your IP address and browser details to deliver pages. Forms wait there at most 120 days (normally minutes) until our server collects them. To stop spam it keeps a scrambled code of your IP address and the date for 24 hours, not the IP address itself. When you ask for a sign-in code, Cloudflare Turnstile runs an invisible check that you are using a real browser, so bots cannot flood people with code emails. It processes browser and device signals for this check only; see the Cloudflare Turnstile Privacy Addendum.
- Visit counts. To see which pages help people, the site counts page visits and seconds on each page, without cookies. We keep the page name, seconds, country, phone or computer, the site that linked you here, and a visitor code that changes every day and cannot be turned back into your IP address. Kept about 3 months.
- Your country. The site asks our server which country your connection comes from, so prices, currency and examples fit. Only the two-letter country code comes back to your browser for that visit; it is not logged. You can change it, and your choice stays on your device.
- Market prices and headlines. Our server (not your browser) fetches public prices from Yahoo Finance for the markets shown (headlines were retired on 13 November 2026). Only the market symbols are sent, never anything about you. Results are shared by all visitors for a few minutes.
- Search answers. For companies and markets our server asks Yahoo Finance, a news index, SEC EDGAR, Wikidata and Wikipedia, sending only the company name or ticker. For other questions it removes email addresses, phone and card-like numbers and links from your question, then sends the words to Brave Search to find trusted pages and to Anthropic (Claude) to write a short answer with sources. They get no name, IP address or user id from us. Answers are kept up to 7 days so repeat questions are fast. Questions we could not answer, and answers marked “Not really”, are kept anonymously for 90 days (question text, country setting and date only).
- Exchanges (Binance, OKX, Gate) send public prices straight to some tools in your browser. They see your IP address, as with any website.
- jsDelivr delivers the sign-in program (only when you open the profile sheet) and Tip Check's screenshot reader. The screenshot is read on your device and not uploaded.
- Google Workspace hosts our email inbox.
We use no other third-party scripts, advertising pixels or social-media plugins.
8. Tess and the example chat
The small chat window on the home page plays a recorded example: the conversation is scripted and the numbers in it were made by our tools when the example was built. It is not a live person and it sends nothing. When you type your own question, Tess answers from our own library inside your browser; some questions go to the search service described above.
9. Information stored or seen outside Australia
Accounts, uploads and our server are in Australia. Some providers process information in other countries, mainly the United States: Cloudflare (worldwide), our email delivery provider Resend (United States), Google (worldwide), Anthropic and Brave (United States, question text only, until 13 November 2026), Google Web Risk and URLhaus (only if switched on, web addresses only), an SMS provider if you verify your phone, and Lemon Squeezy for payments. We choose established providers whose terms require them to protect the information, and we remain responsible for it under Australian law.
10. How we protect it
- HTTPS everywhere, strict security headers, and accounts limited so each person sees only their own records.
- Only what is listed above is kept, only we can access our server, and it has a firewall, key-only access and regular updates.
- If a data breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires, and any other regulator the law of your country requires.
More about how we protect the site and your account is on our security page.
11. What we never do
- Sell, rent or trade personal information, or use it for advertising.
- Read your uploaded trades for any purpose other than making your result.
- Make automated decisions about you that have legal or similarly significant effects. Our tools calculate numbers for you to read; they decide nothing about you.
- Knowingly collect information from anyone under 18. If we learn an account belongs to someone under 18, we delete it.
12. Your rights and choices
You can ask what we hold about you, get a copy, correct it, or delete it, free, by emailing hello@tradingcheckup.com – or do most of it yourself in the profile sheet. You can switch report emails off in Settings or from any email. If you live in the European Union, the United Kingdom, India or another place with its own privacy law, you also have the rights that law gives you (for example to object, to restrict use, or to move your data), and you can use them the same way. Where those laws need a legal reason for each use: we use your account details to provide the service you asked for (contract), report emails and Tip Check samples only with your consent (which you can withdraw any time), and security logs and visit counts for our legitimate interest in running a safe, useful site.
If you are not happy with our answer, please tell us first (see complaints). You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au) or the privacy regulator where you live.
13. Cookies and browser storage
No advertising or tracking cookies. Details on our cookies and storage page.
14. Changes
When something changes what we collect (for example when payments start), we update this page before it starts and change the date at the top. Trading Checkup is for people aged 18 and over.