Privacy Policy

Ordo Journal for iOS

The short version

Your trading journal — every trade, note, account, tag and risk rule — is stored only on your device. It is never uploaded to us. The one thing we do hold is the account you sign in with: an e-mail address, or the identifier Apple or Google gives us. That’s it.

What your account holds

Signing in creates an account record containing your e-mail address, a user ID, and the dates the account was created and last used. It exists so we can recognise you across sign-ins and, in future, sync your journal between your phone and desktop. We do not use it for advertising and we do not sell or share it. Sign in with Apple’s “Hide My Email” is fully supported — if you use it, we never see your real address.

Who processes it

Authentication and the account record are handled on our behalf by Supabase, our authentication provider, acting as a data processor under our instructions. Your journal contents are not sent to them — only the account itself.

What stays on your device

The journal is saved as a file in the app’s private storage, encrypted at rest and protected by your device passcode. Exporting a backup writes that file wherever you choose; importing one replaces the on-device journal. Those files never leave the device unless you move them yourself.

The market-news request

The Home screen fetches a public market-news feed from Yahoo Finance over HTTPS. It carries no personal data and no identifier — it is the same feed anyone can open in a browser. Tapping a headline opens that article in Safari. Offline, the news card simply doesn’t appear and the rest of the app works unchanged.

No tracking, no analytics, no ads

Ordo contains no analytics, advertising or tracking SDKs, and no third-party code that reports your behaviour. It does not use the advertising identifier and does not track you across apps or websites.

Deleting your data

“Delete account” in Settings deletes your sign-in account and the profile attached to it, and wipes the journal on the device — in one action and without contacting support. If you want to clear the device but keep the account, use “Erase local data”. Deleting the app removes the on-device journal too. None of it can be undone — export a backup first if you want to keep your records.

If you uploaded a profile picture on ordojournal.com, delete the account there instead: the website's delete button removes the file. It can fail — storage refuses now and then, and the site tells you on the spot when it could not prove the picture went. Deleting from the app leaves the file behind either way. In both cases, email us and we will remove it by hand.

One thing is deliberately kept either way: if you paid for Ordo, the record of that payment stays — what was bought, when, and the email address it was bought under. We have to be able to account for money we took. It is not attached to an account any more, and it is not used to build a profile of you.

Contact

Questions about privacy, or a request about your data: support@ordojournal.com.

This policy applies to the Ordo Journal iOS app. It is also readable inside the app under Settings → About → Privacy Policy, and both copies are updated together whenever the app’s data handling changes. For the website and the desktop app, see the main privacy policy.