TradeMind Future Privacy Policy

Effective from 28 October 2026

This policy explains how TradeMind Future Ltd uses personal data. It covers the TradeMind Future web app at future.trademindapp.com and the TradeMind Future iOS app. Each section is short, so you can read it on a phone.

The short version

• TradeMind Future uses virtual money only. We do not ask for bank, card or brokerage details.
• We hold your email address, a username, how you sign in, your Community profile and content, your Minds and virtual trading history, and your notification settings.
• Other people can see your display name, character, bio, what you publish and some counts. If you have a Live Paper account, they can also see your return on the Traders board. Your email address, password, private Minds and virtual accounts stay private unless you choose to share a result.
• We use no advertising, no analytics service and no tracking cookies. We do not sell personal data.
• You can delete your account in Settings. We erase most of your data straight away. Backups, a small deletion record and some older copies are kept after that (see "Deleting your account").
• To ask about your data, write to [email protected].

Who we are

TradeMind Future Ltd runs TradeMind Future. We are a private limited company registered in England and Wales, number 17528736. Our registered office is 66 Paul Street, London EC2A 4NA, United Kingdom.

We decide why and how your personal data is used. That makes us the "controller" under UK data protection law (the UK GDPR and the Data Protection Act 2018).

You can contact us at [email protected].

This policy does not cover TradeMind Prep, which is a separate product, or other sites we link to.

What we collect and why

Your account

We need an email address to create an account. Everything else here is optional or comes from your use of the app.

• Email address. You give it when you register, or Google or Apple pass it to us if you sign in with them. We keep an address from Google or Apple only if the provider has verified it.
• Username. You choose one when you register with an email address. If you register with Google or Apple, we generate one that starts "trader_".
• Password. We store only a one-way scrambled form of it (an Argon2id hash), never the password itself. Accounts that use Google or Apple have no password with us.
• If you use Google or Apple: that provider's identifier for you and the email address it reports. Google's sign-in token can also carry your name and picture, and Apple can offer your name to the app. We do not store any of them, and we do not keep the provider's access tokens.
• Account facts: when the account was created, when you last signed in, when your email was verified and when your password last changed.
• Sign-in sessions: a random token held by your browser or iPhone (we keep only a one-way code of it), with the times the session was created, last used and ends.

We use this to create and protect your account, sign you in and send the account emails you ask for.

Your Community profile and content

• Display name (up to 64 characters), bio (up to 500) and character. A character is a pixel avatar built from choices in the app, such as the creature, colours and accessories. We do not take photos or uploaded pictures.
• Until you change it, your display name is your username. If your username was generated and you never chose a name, other people see "TradeMind member".
• Posts, articles and comments you write, and the likes you give.
• The creators you follow, the Minds you save and the people you block.
• Minds you publish: title, summary, risk note, description, rules, the pool it draws from (a custom pool as a fixed list of assets), icon and colours, and the saved result of the run you chose.
• Copies you make of other people's Minds, with a link back to the original.
• Reports you send: the reason and any details.

Drafts of posts, articles and comments, and copies of Minds with unsaved changes, are kept on your device. They reach our servers only when you publish or save them.

Take care what you write. Your display name, bio, posts, comments and Mind text appear as you wrote them. Do not put personal data in them that you do not want others to see.

We use this to run Community, show your content as you intended and keep Community safe.

Your Minds and virtual trading

• Minds you build in Studio, with their saved history.
• Custom asset pools, watchlists, chart settings and drawings, and goals.
• Backtests and Paper runs you start, with their inputs and results.
• Virtual accounts: orders, fills, positions, cash, fees, regular investments and price alerts. All of it is simulated.

If you attach a result of your own to a post, its summary figures become visible to anyone who can see the post.

We use this to run Studio, Portfolio and your alerts.

Notifications and push

• Your inbox: the title and text of each notification, what it links to and whether you have read it. The text of an order notice can include the asset, size and price of a virtual order.
• Your notification settings, including your time zone, which the app suggests from your device.
• Which public Minds you get update notices for. Copying or running a Mind adds it automatically.
• If you turn on Web Push in a browser: the address your browser's push service gives us for that device, and the keys needed to encrypt messages to it.
• If you turn on notifications in the iPhone app: the device token Apple gives your iPhone for TradeMind, the app's identifier, and whether it is a test or production build.
• Each connected device is tied to the sign-in session it was set up in.
• A log of push deliveries: which device, how many attempts and the result.
• You can have up to 8 active devices of each kind connected at once.

We use this to deliver the notifications you ask for.

How the app is used

We keep a few simple records of use. They are our own. We do not use an analytics service.

• Active days: the dates (not the times) on which you opened the app or visited Community.
• Notifications opened: the type of each notification and the time it was first opened. The record does not hold your account number. It points to the notification, which is erased with your account.
• Minds opened: which public Minds by other people you have opened. Achievements use this.
• Where you came from: if you open a link that someone shared, the app keeps a note on your device of the first one, with who shared it, what kind of item it led to and when you opened it. After you sign in, it sends the note to us. We store it once.
• Posts feed: when the Posts view shows you posts, in Discover or Latest order, the app tells us which post it showed, how long the post was on screen, how much of it you read and whether you opened or liked it. If you comment on a post or follow its author from the feed, we record that too. We delete these records after 30 days. We use them in the totals that rank each post. We also keep your feed preferences and the posts you hide.
• Learn from my activity: this switch is on by default. While it is on, we also use your own records to shape your feed, for example so that a post you have just read does not come straight back. If you switch it off, we stop using your own history to shape your feed and we clear the markers it used. Switching it off does not stop the recording. The app still tells us what it showed you and how you read it, we keep those records for the same 30 days, and they still count in the totals for each post.
• Traders board: if you have a Live Paper account, about every 5 minutes we record the total value of your main Live Paper account and its Mind accounts, their starting capital and how many trades they have made, to work out returns. We delete these samples after 100 days. We keep that you are a member of the board, and each finished period's result.
• Shared links: when someone opens a shared link, we record the date, the kind of item, who shared it and a rough device type (phone, desktop, link preview or other). We do not record who opened it.

We use these records to run Discover, Rank and achievements, to understand how the app is used and to improve it.

Security and technical data

• IP address. Your IP address reaches our servers whenever you use the app. We use it to slow down repeated sign-in, sign-up and similar attempts. For that we keep a coded form of the address (a hash), with a counter, for up to 24 hours. We do the same with the email address or username typed at sign-in, your account number and the sign-in provider's identifier for you. A hash of an IP address can in principle be reversed by trying every address, so we treat it as personal data. We do not store your IP address in your account. Our web server is set up not to keep access logs for the app.
• Activity records: a log of important actions on your account, such as signing in and out, failed sign-ins, creating or changing a Mind, running a backtest, publishing, editing or deleting a post, and sending a report. Each record holds your account number, the kind of action, the exact time and, for some actions, a short detail such as the item concerned. It does not hold your IP address.
• Safety flags on your account: whether your Community access is paused, and whether the account is marked as a test account, as abusive or as excluded from counts.
• Error logs: our servers write logs so we can fix faults. They are meant to record the kind of error, not your content.
• Moderation records: a case keeps a copy of the reported or held text (up to 24,000 characters), the reasons given, the moderators' decisions and any message a moderator sends.
• Account emails: a short-lived record of each email we queue (address, purpose and status).

We use this to keep the service secure, stop abuse, fix faults and meet our legal duties.

When you contact us

If you write to us, we keep your email address, what you tell us and our reply, so we can deal with your request.

What we do not collect

We do not use your location, contacts, photos, camera or microphone, and we do not collect advertising identifiers, payment details or your date of birth. We do not ask for your real name. Your time zone is saved with your notification settings, and your IP address is used as described above.

What other people can see

Visible to other people, and in some cases to anyone without signing in:

• Your display name, character and bio, and the badge on admin, official or automated accounts.
• Your public counts: Sparks, Minds, posts, followers and following. Anyone who can open your profile can also open your lists of followers and following. Those lists show each person's display name, character, bio and counts.
• What you publish: posts, articles and public Minds. Anyone can read a published Mind with its rules, its pool and its saved result. That result includes the figures, the return curve and the simulated trades and holdings of the run. Visitors who are not signed in can read the newest few posts in full as a preview. Signed-in members can read all posts and comments.
• A preview of anything you share by link. Anyone who opens the link, or a service that previews it, sees the title and a short excerpt. A visitor who is not signed in also gets the author's display name and, for a Mind, a headline result (growth, the benchmark's growth and largest fall). The link itself carries a public reference to the person who shared it.
• A result you attach to a post: its summary figures and return curve, and for a virtual account the number of trades. The post also carries an internal reference number for the run or account. It does not show balances, holdings or orders from your virtual accounts.
• If you have a Live Paper account: your return after costs, largest fall and number of trades on the Traders board, next to your display name. Not your balances or holdings. The Rank boards are public. The app shows visitors the top five places and members the full lists, and our servers give up to the top 100 places to anyone who asks. There is no setting to leave the Traders board. You can object to being on it by writing to us.
• Your username. It is public in some places: a Mind you publish shows the username you had when you published it, on the Mind, on posts that attach it and in Mind search. Your display name starts as your username, and most screens show your display name instead.

Visible only to you:

• Your email address, password and sessions.
• Your private Minds, runs, virtual accounts (apart from anything you attach to a post and the Traders board), watchlists, drawings, saved Minds, drafts, notifications, achievements, blocks, reports you sent and settings.

Visible to the people you act with:

• Authors are told when you like, comment on, follow, copy or build on their work. The notice names you, and a notice about a comment starts with the first part of your comment. Likes show only as a count to everyone else.
• When someone tries to register with an email address or username that already has an account, the app says so. For an email address it also says how that account signs in (with a password, Google or Apple). Trying to sign in with the email address or username of a Google or Apple account does the same.

Visible to TradeMind:

• Only the people who run and moderate the service can use our internal tools. Moderators see reported content, the author's display name, and each reporter under a made-up label. Administrators can reach the databases that hold your data to run and repair the service.

Profiles, lists of followers and following, published Minds and the Rank boards are public. Anyone can see them without signing in, even though the app asks visitors to sign in to see more.

Cookies and storage on your device

We use only what the app needs to work. We do not use advertising or analytics cookies.

Cookies from our own server, on the web:

• trademind_future_session keeps you signed in. It is hidden from scripts, sent only to our API and lasts 8 hours.
• __Host-trademind_future_oauth is set for 10 minutes when the sign-in or create-account form shows the Google and Apple buttons.
• trademind_studio_guest is used only if you run Studio without an account. It lasts 24 hours.

The iPhone app does not use browser cookies. It keeps the same session and sign-in check cookies in the iOS Keychain, on that device only.

The app also stores items on your device:

• Your theme and layout, chart settings and recently used assets.
• Drafts and unsaved work, such as post, article and comment drafts and copies of Minds with unsaved changes.
• Records of actions that are still in progress, such as a run or a virtual order waiting for our answer. They hold what you asked for until we confirm it.
• Your watchlist choice, market search words and the tabs you have open.
• A note of the first shared link you opened. It names the person who shared it.
• While you sign in: the page to return to and the email address or username you typed. This is kept in that browser tab for a short time (at most two hours).
• If you use Web Push: a record that links your browser to its notification connection, and a small service worker that shows the notifications.
• In the iPhone app: a record of which account turned notifications on for that iPhone, with the iPhone's device token.

On the web, when the sign-in or create-account form shows the Google and Apple buttons, their sign-in scripts load from their servers, even if you never press a button. They may set their own cookies. The iOS app uses their sign-in tools instead.

Signing out ends your session. In the iPhone app it also turns off notifications for that iPhone and removes the notification record. It does not clear the rest of what the app stored for your account on the device, such as your drafts. Deleting your account clears the items stored under your account number, such as drafts and work in progress, from that device. Appearance settings, the shared-link note and the iPhone notification record stay. The app also leaves a small marker with your old account number, so that it knows the account was deleted.

Our legal bases

UK data protection law requires a lawful basis for each use of personal data. Ours are:

• To provide the service you asked for (contract): your account, profile, content, Studio work, virtual accounts, in-app notifications and account emails.
• Our legitimate interests: keeping the service secure and free of abuse, moderating Community, fixing faults, understanding and improving how the app is used, running Discover, Rank and the Traders board, and keeping backups. We weigh these against your rights. You can object (see "Your rights").
• Your consent: push notifications (you turn them on and your device asks) and signing in with Google or Apple (you choose to). You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or share data, for example to deal with unlawful content or respond to a lawful request.
• Legal claims: to establish, exercise or defend them.

Who we share personal data with

• Other people, as set out in "What other people can see".
• OVHcloud hosts our servers in the United Kingdom. It stores and processes everything described here for us.
• Resend sends our account emails. It receives your email address and the email's content, including a one-time link.
• Google and Apple, if you sign in with them. On the web they also receive your IP address, device details and the address of our site when the sign-in form loads their scripts. In the iPhone app, their sign-in tools run on your device and contact them when you tap. When you delete an account that uses Apple, you can choose a last step that asks Apple to cut TradeMind's access to your Apple ID.
• Push services, if you turn on push. Web Push goes through the push service of your browser (Google, Mozilla or Apple). Its message is encrypted, so the service cannot read it, but it can see that a message was sent to your device and when. iPhone notifications go through Apple's push service, which receives your device token and the text of each notification. The text then appears on your device, including on a locked screen. Order notices can show the asset, size and price. The app has no setting to hide the text. You can hide previews in your iPhone's own settings.
• Twelve Data, our market data provider. Our servers ask it for prices and company data. These requests contain no personal data. Company logos are different: your browser or the app loads them straight from Elbstream and, for some companies, from an address Twelve Data gives us. Those companies then receive your IP address and device details, and can see which companies' logos you view. We ask your browser not to send them a referrer.
• Cloudflare runs the domain name records for future.trademindapp.com. It does not carry your app traffic.
• Professional advisers, regulators and law enforcement, where the law requires or allows it.
• A buyer, if our business is sold or restructured, who would have to honour this policy.

We do not sell personal data.

Transfers outside the UK

We store the main database in the United Kingdom.

Some of the providers above may handle data outside the UK, for example Google, Apple, Resend and the servers that host company logos. UK law lets us send personal data to another country only if it stays protected there, for example under the UK's adequacy regulations (which include the UK-US data bridge for certified US companies) or approved contract terms. You can ask us which safeguard covers a provider by writing to us.

Until 24 October 2026 our main servers were in Canada. That server no longer runs the app. It holds a fenced copy of our data as it was on that date and encrypted recovery copies of our systems, kept for recovery only. We will delete them. Deletions made since 24 October 2026 do not reach them. The server also still passes requests from devices that use the old address on to our UK servers. We also keep temporary copies made during the move on our UK server, for recovery only, and will delete them too.

How long we keep data

• Account, profile, Minds, runs, virtual accounts, notifications and settings: until you delete your account. The app has no button to delete a single notification.
• Posts, articles and comments: until you delete them or your account. When you delete a post, article or comment, it disappears from view and its text is erased from it. A technical record that stops a request being sent twice can keep the first text you sent: for a comment until you delete your account, and for a post until you delete the post. An empty placeholder can remain too, with your account number and its dates, until your account is deleted.
• Minds you delete in Studio: hidden from you at once. We keep their saved history until you delete your account.
• Published Minds: public until a moderator removes them or you delete your account. The app has no Unpublish button yet. To have a Mind withdrawn sooner, write to us. A Mind that is no longer public keeps a private record until you delete your account. Copies other people already made are not affected.
• Sign-in sessions: the cookie lasts 8 hours. We keep the session record until you delete your account.
• Activity records and active days: until you delete your account.
• Account email links: valid for 30 minutes. We keep the record of a link, including the address it went to, for up to a week after it expires. The record of a queued email is cleared about a day later, the next time we send an account email.
• Anti-abuse counters: up to 24 hours.
• Studio runs without an account: 24 hours.
• Feed records (what Posts showed you and how you read it): 30 days. The markers that stop a post you have read from coming back: 7 days. Your interests and hidden posts: until you change them or delete your account.
• Traders board samples: 100 days. Your membership of the board and finished period results: until you delete your account.
• Minds opened and the link you arrived by: until you delete your account.
• Shared-link opens: no end date. A record names the person who shared the link until that person deletes their account, and holds nothing about who opened it. Notification-open records hold no account number and have no end date.
• Push addresses and device tokens, and the log of push deliveries: until you delete your account. If you turn push off for a device, we stop sending to it, but the stored address or token stays, switched off, until then.
• Moderation records: a report you send is kept until the reported content is deleted or you delete your account. A case, with its copy of the text and the decisions, is erased when the reported content is deleted or its author's account is deleted. A case that rests only on reports is also erased when every reporter's account is deleted. We set no other time limit.
• Emails you send us: 2 years after our last reply.
• Error logs: removed automatically as newer logs replace them.
• Backups: routine database backups are kept for 14 or 30 days on our server and for 30 days on a computer and drive we control. We always keep the newest backup. On our server we also keep the five newest backups taken before software updates, so these can be older.
• The former Canadian server and the temporary copies made when we moved servers on 24 October 2026: kept for recovery only, and we will delete them.
• Deletion records: kept indefinitely (see "Deleting your account").

Deleting your account

To delete your account, open Settings, go to Delete account and choose Delete Future account. Type DELETE and prove it is you: your current password or, if you sign in with Google or Apple, a confirmation from that provider (or a recent sign-in). If you cannot do this, write to [email protected].

If your account uses Apple, the last step offers to ask Apple to cut TradeMind's access to your Apple ID. You can choose to delete without it.

At once, your account is closed and every session ends. We then erase your data in one step. If that step fails, the account stays closed and we complete the erasure as soon as we can retry it.

We erase:

• Your account, sign-in details, profile and sessions.
• Your posts, articles, comments, likes, follows, blocks and reports, and the discussion under your posts.
• Your Minds and their history, your published Minds and the discussion on them, and your runs and results.
• Your virtual accounts, orders, fills, positions and cash records, and your watchlists, drawings and alerts.
• Your notification inbox, settings, push addresses and device tokens, and the notices you caused for other people.
• Your feed records, active days, sign-up record and Traders board records.
• Your activity records.

Records of other people opening links you shared stay as anonymous counts. Your name is removed from them. Records of notifications being opened stay as anonymous counts too.

What stays:

• Copies of your published Minds that other people made. They belong to those people, keep their rules and lose the link to you.
• Posts by other people that attached one of your Minds. The attachment is removed. Replies other people wrote to your comments on someone else's content also stay, without the link to your comment.
• A small record that your account was deleted: its internal account number, a deletion number and the request and completion times. We keep it so that a restored backup cannot bring your account back. A small marker with the same account number also stays in the browser or on the device you used.
• Short technical references to your account number inside other people's records, for example in a stored like notice or in the record of how someone arrived through a link to your creator page. The app does not show them.
• Anti-abuse counters, which expire within 24 hours.
• Backups, until they expire.
• If your account existed on 24 October 2026, a copy of its data as it was on that date stays on the former server in Canada, and on our UK server in the temporary copies made during the move, until we delete them (see "How long we keep data").
• Anything copied or shared outside the app, such as screenshots. Links you shared stop working.

Deleting your Future account does not delete your Google or Apple account.

Deleting an account cannot be undone. On your device we also clear your drafts and work in progress for that account. Appearance settings stay. On an iPhone, the record of which account turned notifications on stays until another account signs in on that iPhone.

Your choices

• Notifications and push: Settings, Notifications.
• Community activity notices and blocked creators: Profile, Notification preferences & privacy.
• Discover, Latest and "Learn from my activity": Community, Posts, Feed preferences.
• Your public profile: Profile, Edit profile.
• Your Community content: edit or delete it where it appears.
• Your account: Settings, Account (to see it), Sign out, Delete account.

The Spark & Community page lists the Community and notification settings and where to find each.

Your rights

Under UK data protection law you can ask us to:

• Tell you what personal data we hold about you, and give you a copy.
• Correct data that is wrong.
• Erase your data.
• Limit how we use it.
• Stop uses that rely on our legitimate interests (object).
• Give you the data you provided in a common format (portability).
• Stop uses that rely on your consent, by withdrawing it.

You can do some of this yourself in the app (see "Your choices"). For the rest, write to [email protected]. We may ask you to confirm who you are. We reply within one month. There is no fee unless a request is clearly unfounded or excessive.

The app has no button to download your data, to delete a single notification or to change your username or email address. Write to us for these. To reset a password, use "Forgot password?".

Automated checks and ranking:

• Automatic text checks can refuse or hold your post, comment or Mind text for a moderator. You can edit it and try again, or write to us and ask a person to look.
• Discover and Rank order content with fixed rules that we wrote, not with a learning model. Discover also uses totals of how members respond to each post.
• None of this has a legal or similarly significant effect on you.

If you are unhappy with how we use your data, please tell us first at [email protected] so that we can put it right. You can also complain to the ICO at ico.org.uk.

Children

TradeMind Future is for adults. The Terms of Service require you to be at least 18. We do not knowingly collect personal data from anyone younger. If you think a child has an account, write to us and we will look into it.

Keeping data safe

• Connections to the app use HTTPS.
• Passwords are stored as Argon2id hashes. Sign-in cookies are hidden from scripts, and requests that change data need a matching security token.
• Sign-in and sign-up attempts are rate limited. Email links work once and expire after 30 minutes.
• Web Push messages are encrypted. iPhone notifications travel through Apple's push service.
• On iPhone, the sign-in session is kept in the Keychain. It is readable only while the device is unlocked and is not copied to other devices.
• Our internal tools are reachable only through a private network and need an access key.
• Deletions are recorded outside the main database, so a restored backup cannot bring a deleted account back.

No system is perfectly secure. If you find a problem, write to [email protected]. If a breach is likely to put your rights at risk, we will tell you and the ICO as the law requires.

Changes to this policy

We may change this policy, for example when the app changes or the law does. We will put the new text here with a new effective date. For a material change, we will tell you in the app or by email in good time before it applies.

Contact and complaints

Write to [email protected], or to TradeMind Future Ltd, 66 Paul Street, London EC2A 4NA, United Kingdom.

You can also complain to the Information Commissioner's Office at ico.org.uk.