What Psyke keeps, and why.
Psyke is a record of your own trading discipline. Everything it stores is something you typed into it. This policy says what that is, why we hold it, who processes it, how long we keep it, and the rights you have over it.
Effective 9 September 2026. Last updated 21 September 2026.
Who we are
Psyke (psyke.trade) is operated by Alexander Hill, who is the data controller for the personal data described here. Contact: alexanderrhill7@gmail.com. A postal address is available on request by email.
What we collect, and why
Account data — your email address and a password, stored only as a hash by our authentication provider — to create and secure your account (legal basis: performance of a contract). Profile answers — the instruments you trade, what breaks your discipline, and your reminder settings — to run the product and send the emails you asked for (contract; reminders can be switched off at any time). What you enter in the product — your rules, session reviews, per-trade marks and notes, and any fresh-start note — to show you your own record and compute your adherence (contract). Technical data — the IP address and browser details in ordinary server logs, and one session cookie — to keep the service secure and signed in (legitimate interest in security; strictly necessary cookie). Your email address is required to have an account. Every other answer is optional; leaving one blank only means that part of the product stays empty.
What we do not collect
No broker or platform credentials, no account numbers, no positions or fills from any broker. Psyke does not connect to your trading account, and a statement you run through the audit is read in your browser and never uploaded. Card details go to Stripe and never touch our servers. We do not use your data to train models, do not build advertising profiles, and do not sell or rent personal data to anyone.
Who processes it
Supabase, Inc. (database and authentication; data hosted in the United States). Vercel, Inc. (web hosting; United States). Resend (transactional email; United States). Stripe, Inc. (payments; United States) — Stripe receives your email and card details when you start a paid plan and is an independent controller of the payment data under its own privacy policy. Each processor uses your data only to provide their service to us under a data processing agreement.
International transfers
Your data is stored and processed in the United States. If you are in the UK or the European Economic Area, transfers rely on our processors' standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.
Cookies
One strictly necessary cookie keeps you signed in. If you arrive through one of our short links (for example psyke.trade/x), a second first-party cookie remembers that word for 30 days so we can count where signups come from; it holds no identifier. There are no advertising or third-party cookies.
How long we keep it
For as long as you have an account. Delete your account and your record is deleted with it within 30 days, except where the law requires us to keep it longer. Server logs are kept by our hosting providers for at most 30 days. If you stop paying, nothing is deleted: your record stays readable and exportable.
Your rights
You can access, export, correct, or delete everything Psyke holds about you, restrict or object to how it is used, and withdraw consent where consent is the basis. Import and export are on every plan; for anything else, email alexanderrhill7@gmail.com and we will answer within 30 days. If you are in the UK or EEA you may also complain to your data protection authority (in the UK, the ICO).
California residents
Under the CCPA/CPRA you have the right to know what personal information we collect and how it is used, to delete it, to correct it, and to not be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of. Requests go to alexanderrhill7@gmail.com.
Automated processing
Psyke computes your adherence figures, names your worst habit, and reads patterns automatically from the marks you make. These are calculations shown back to you, not decisions about you: nothing here has a legal or similarly significant effect, and no profile is used for any purpose other than showing you your own record.
Security
Data is encrypted in transit (TLS) and at rest by our hosting providers. Passwords are hashed and never stored in plain text. Access to production data is limited to the people who run Psyke.
Children
Psyke is for adults trading their own money and is not directed at anyone under 18. We do not knowingly collect data from children.
Changes
If this policy changes in a way that matters, the dates above change and signed-in users are told by email before the change takes effect.
Contact
alexanderrhill7@gmail.com