What Psyke keeps, and why.
Most of what Psyke stores is something you typed or dropped into it. We also record how you found us and where you signed up from. Here's what we keep, why, who handles it, for how long, and your rights.
Effective 9 September 2026. Last updated 16 October 2026.
Who we are
Psyke (psyke.trade) is run by Hill Capital Enterprises LLC, a Michigan limited liability company doing business as Psyke. We're the controller of your personal data: we decide what's collected and why.
Contact: hello@psyke.trade (postal address on request).
What we collect, and why
Account — your email, and a password our sign-in provider stores only as a hash. To run your account (contract).
Signup location — the approximate place you sign up from (country, region, city and rough coordinates, as our hosting provider estimates them). We don't store your IP address. To see where sign-ups come from (legitimate interest).
Signup answers — your first name and the plan you picked, including joining the Pro waitlist. To set up the plan you picked (contract), and to understand who signs up (legitimate interest).
Terms record — when you agree to the Terms: which version, when, and that you confirmed you're 18 or older. To show what you agreed to (contract and legal obligation).
What you enter — rules, session grades, per-trade marks, notes, risk limits, goals and journal reflections. To show you your record (contract).
Risk rules — your max dollar risk per trade, your max entries per day and how you manage your stop once you are in a trade, if you set them on the Rules page. Kept with your account login record and shown when you log a session (contract).
Program — when you started the 8-week program, and your answers when you set it up: what you trade, what blows your evals, how many evals you have blown, what you usually pay per eval, and your trading platform, plus the program's check before each session (that day's dollar risk, max entries, whether you were set up, and your counter-rule), the counter-rule you pick and the day you picked it, and when you first closed your #1 habit screen. Kept with your account login record. Your quick logs (each trade's result, P&L, time, whether you followed your rules, the habit and a short note) are kept with your session grades. To run the program and show what a habit costs in evals (contract).
Program purchase — if you buy the 8-week program: when you paid, the amount, the creator code you used (if any), the Stripe checkout ID, and when it was refunded, if it was. Kept with your account login record. To open the paid weeks and handle refunds (contract), and to pay the creator whose code you used (legitimate interest).
How you heard about us — your answer to the one-time question after you start the program, if you give one. We also note when you answered or closed that question, so we don't ask twice. Kept with your account login record. To see where traders find us (legitimate interest).
Text reminders — your phone number and when you agreed, only if you tick the box to get logging reminders by text, when you sign up or on the Reminders page. Kept with your account login record and used only for those reminders. Remove the number on the Reminders page, reply STOP to any text, or email us, to stop them (consent).
Corrections — when we fix how a question was graded, we may correct an old session's grade and note on it when and why, or ask you once which way it went (contract).
Pre-session checks — when you sat down, whether news falls in your trading window, and hours slept only if you switch that on. Used to show that day's session, and never used in research (contract; hours slept by your consent, see psyke.trade/health-data).
Imported files — the trade or fill exports you upload, and the trades we read from them. We keep the original file privately with your account. Platform exports often include your account number or account name. To build your journal (contract) and for the research use below (legitimate interest).
Billing — your plan, trial and renewal dates, and the ID that links your account to Stripe. To run your plan (contract). When you start a plan at checkout, we also save the first word of the name you give Stripe if we don't have your first name yet, so we can address you by name (legitimate interest).
Messages — what you write when you email us. To answer you (legitimate interest).
Reminder log — which reminders we sent you and on which day, so none goes out twice (contract).
Technical data — IP address and browser details, kept by our sign-in provider with your active sessions and in our providers' logs, plus the cookies and browser storage below. For security and sign-in (legitimate interest).
Rate limits — to stop password guessing and spam, we count attempts at signing up, signing in, resetting a password and opening short links. The counter is keyed by a scrambled, one-way form of your IP address or email (never the address itself) and is deleted within two weeks (legitimate interest).
Your email is required, and your first name on the main sign-up form. What you type or upload is optional. Your signup location, the first name from checkout and technical data are recorded automatically.
Before you sign up
Short links — when you open a Psyke short link, such as the one in our X profile, we record the link name, the site you came from, your approximate location (country, region, city and rough coordinates, as our hosting provider estimates them), your browser's user-agent, whether it looks like a bot, and a random browser ID kept in a cookie (see Cookies and browser storage). If you're signed in, or later create an account in that browser, these records are linked to your account. We do this to see which links bring people to Psyke and to spot fake traffic (legitimate interest).
The guide and the front page — when you open psyke.trade/guide or psyke.trade, we record the same details, without setting a browser ID. When you open any Psyke page from Instagram, TikTok, YouTube, X or Discord, we set the source cookie naming that app (and set it to Discord when you open the sign-up page from a link with no referring site), so a signup from that browser is credited to it.
We don't store your IP address for either. From the EU, the EEA, the UK or Switzerland we record only the link, the site you came from and your country, and set no cookie.
Draft rules — rules you type on the front page before signing up are saved on our server under a random code. The code stops working after 30 days, and the rules are deleted soon after. They aren't linked to you unless you sign up.
Emails we send
Account emails — confirming your email, sign-in links, password resets, codes to confirm a password change, email changes, and a notice when your password or email changes.
Welcome — one email after you confirm your address, explaining how Psyke works.
Billing emails — from us, when your trial starts and 3 days before it ends. From Stripe, a reminder 7 days before the trial ends, and emails about your payments.
Reminders — in the 8-week program or on Core, a nudge the morning after a trading day you haven't logged (also by text, if you ticked the box for texts), and a Sunday review in weeks you logged, with your numbers, your week goal, your Psyke Issue and, in the program, your weekly report. They're on when the program or Core starts. Switch them off at psyke.trade/app/cues.
Marketing — none.
Resend sends our email and handles its full content. We don't track whether you open our emails or click links in them.
Research and product use
We use your data to run and improve Psyke, for example to find where imports fail.
We also study how traders behave using trade data (the trades you import and the trade details you enter, such as time, instrument, size and P&L) with your identity removed. From it we build aggregated or de-identified datasets, and we may license those datasets to others.
Before any dataset leaves Psyke, we remove names, emails, user IDs, account numbers, original files and notes, and the recipient agrees by contract not to try to identify anyone. We keep de-identified data de-identified and never try to re-identify it.
Pre-session checks, including hours slept, are never used in research datasets.
This research use covers data entered on or after 9 September 2026, when it first appeared in this policy.
Our legal basis is our legitimate interest in understanding trading behaviour and in improving and funding Psyke. We don't sell your personal information.
Your right to object to research use
You can object to the research use above at any time, without giving a reason. Email hello@psyke.trade and we'll leave your data out of every dataset we build after that. Data already in a de-identified dataset can't be traced back to you, so it can't be pulled out.
What we don't collect
No broker or platform passwords, and no live connection to any trading account.
No card numbers or card details. They go straight to Stripe and never touch our servers. From checkout we keep only your first name (see Billing above).
No advertising, ad profiles, third-party trackers or outside analytics tools. The only visitor counting we do is the short-link, guide and front-page records described above.
We don't send your entries to outside AI services. Your Psyke Issue is calculated by our own code.
Who processes it
Supabase, Inc. — database, file storage and sign-in. United States.
Vercel, Inc. — hosting. United States.
Resend — sending email, including the content of each email. United States.
Cloudflare, Inc. — the bot check (Turnstile) on sign-up, sign-in, password reset and account deletion, when it's switched on. During the check it sees your IP address and signals from your browser and device, to tell people from bots. United States.
Namecheap, Inc. — DNS for psyke.trade, and forwarding email sent to hello@psyke.trade to our inbox.
Telnyx LLC — sending texts, used only if you opt in to text reminders. United States.
Stripe, Inc. — payments. When you start a paid plan, buy the 8-week program or redeem an access code, Stripe gets your email, your Psyke user ID, the short-link source word if there is one, and the city, region and country you signed up from, so we can see where paying customers come from (removed when you delete your account), plus your card details when you add a card. Stripe is an independent controller of payment data under its own privacy policy.
Google LLC — hosts our inbox under Google's own terms and privacy policy. Your emails to us arrive there, and so do short notes about your account: when you sign up (your email, where you came from, your approximate location, your plan choice and your signup answers), when a plan starts (your email, plan and trial end date), when you buy or are refunded the 8-week program (your email, the amount and any code), and when an account is deleted (the user ID).
Supabase, Vercel, Resend, Cloudflare, Namecheap and Telnyx use your data only to provide their service to us. Stripe and Google handle it under their own privacy policies. Anyone who processes your data for us, or receives a dataset from us, must protect it at least as well as this policy does.
We don't give your personal data to anyone else unless the law requires it, or Psyke is sold or merged, in which case this policy keeps applying to it.
International transfers
Psyke is run from the United States and your data is stored there. If you use Psyke from outside the US, you send your data to us in the US directly.
Our providers process it in the US too. Where a provider offers standard contractual clauses or is certified under the EU–US Data Privacy Framework, we rely on that. Psyke itself isn't certified under the Data Privacy Framework.
How long we keep it
While you have an account, we keep your data so your record stays whole. If you stop paying, nothing is deleted.
When you delete your account, your data and imported files are removed from Psyke straight away, and from our providers' backups within 30 days.
Short-link, guide and front-page records — ones linked to your account are deleted with it. Ones never linked to an account are kept so we can keep counting where visitors come from. After 12 months their coordinates are removed; what's left is the link, the date, the country, region and city, the site you came from, the browser details and the random browser ID.
Rate-limit counters — deleted within two weeks.
A few things are kept after that:
Stripe — its payment records, under Stripe's policy and the law.
Records the law requires — such as billing records and proof of what you agreed to at checkout, for as long as the law requires.
Our inbox — account notes and emails you sent us, until you ask us to delete them.
De-identified datasets — built before you left, and not linked to you.
Logs — our providers' server and email logs, kept for at most 30 days for security.
Deleting your account
In Psyke, go to Settings > Delete account, type DELETE and confirm. It's immediate, can't be undone, and cancels your plan straight away.
Can't sign in? Email hello@psyke.trade from your account's email address and we'll delete it within 30 days.
Full steps and what's kept: psyke.trade/delete-account
Your rights
Access and export — Settings > Download my data gives you everything in your account as one file, including your signup location and the short-link records linked to your account. Original imported files aren't in it; email us for them.
Correct — edit your rules, journal P&L and notes, goals and risk limits in Psyke. Session grades, pre-session checks and imports are locked once saved, so ask us to correct or delete them.
Delete — your whole account (above), or specific data if you ask us, such as your short-link records or signup location.
Object or restrict — to research use, or to anything else we do on the basis of legitimate interest.
Email hello@psyke.trade for any of these. We check the request comes from your account's email address and answer within 30 days.
We don't treat you differently for using these rights.
Where you live
United States — we give everyone the rights above, wherever they live. We don't sell personal information or share it for cross-context behavioural advertising. Nevada residents can send a do-not-sell request to hello@psyke.trade, though we don't sell covered information.
EU and UK — you can also complain to your data protection authority (in the UK, the Information Commissioner's Office).
Automated processing
Psyke computes adherence figures, names your Psyke Issue and reads patterns from the marks you make. These are calculations shown back to you, not decisions about you, and they have no legal or similarly significant effect. Your Psyke Issue is a pattern in your trading behaviour, not a psychological or medical assessment.
Each detected pattern comes with the same pre-written note for everyone. It isn't written about you.
Security
Data is encrypted in transit (TLS) and at rest by our providers. Passwords are hashed. Imported files sit in private storage. Only the people who run Psyke can reach production data, and only to run and support it.
If a breach affects your data, we tell you by email without undue delay, and tell regulators where the law requires.
Children
Psyke is for adults 18 and over and isn't directed at anyone younger. If we learn an account belongs to someone under 18, we delete it.
Changes
If this policy changes in a way that matters, the dates above change and signed-in users are told by email first.
Contact
Hill Capital Enterprises LLC, doing business as Psyke.
Postal address on request.