Privacy Policy

1. Introduction

Signum is operated by Kaizen Group BV, a company registered in Belgium ("Signum," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered trading education platform (the "Service"). Please read this policy carefully to understand our practices regarding your personal data.

This policy covers both the Signum website and web app at signum.trading and the Signum iOS app ("Signum: AI Chart Analysis"). Where a practice applies to only one of them, we say so. Section 2.5 describes the data the iOS app handles.

For privacy inquiries, data access requests, or any question about this policy, contact us at contact@kaizenprojects.be.

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Authentication data (via Google, Apple, or email magic link)
• Profile information (experience level, preferences)
• Subscription and billing status

2.2 Trading Data

As part of the educational features, we collect and store:

• Trade journal entries (instrument, entry/exit, notes, tags)
• Chart annotations and saved analyses
• Assessment responses and progression data
• Paper trading simulation results

2.3 AI Interaction Data

When you use the AI trading mentor, we collect:

• Conversation messages and history
• Session summaries generated by the AI
• Queries and topics discussed
• Feedback and ratings you provide on AI responses

2.4 Usage and Analytics Data (website only)

On the website and web app, we automatically collect:

• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Pages visited, features used, and session duration
• Referral source and navigation patterns
• Error and performance data

2.5 Signum iOS App

The iOS app handles the following data:

• Name and email address, if you sign in with Apple or Google
• A user ID that identifies your account
• A device push token, so we can deliver the alerts you set
• Purchase history (your in-app subscription status)
• Product interaction: a daily counter of how many AI requests you have used, so we can apply your daily allowance
• User content: your price alerts, your watchlist, and the questions you ask the AI assistant
• Chart photos you take or upload. These are used only to recognize the instrument on the chart and are not stored by Signum.

We use this data only to provide the app's functionality. The iOS app does not track you across apps or websites owned by other companies, contains no analytics, crash-reporting, or advertising SDKs, and we do not sell your data.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Personalized Mentoring: To tailor AI mentor responses to your experience level, learning history, and trading patterns.
• Service Delivery: To provide and maintain the platform, process transactions, and manage your account.
• Platform Improvement: To analyze usage patterns, identify bugs, and improve the educational content and user experience.
• Communication: To send service-related notifications, updates, and promotional materials (with your consent).
• Security and Compliance: To detect and prevent fraud, abuse, and unauthorized access.

In the iOS app, data is used for app functionality only. It is not used for analytics, advertising, or tracking.

We do NOT sell your personal data to third parties. We never share your trading data, AI conversation history, or personal information with advertisers or data brokers.

4. Third-Party Services

We use the following third-party services to operate the platform. Each processes data only as necessary to provide their specific function:

• Clerk: Authentication and account management, for the website and the iOS app. Clerk processes your name, email address, and sign-in details so you can log in securely. See Clerk's Privacy Policy.
• Anthropic: AI processing, for the website and the iOS app. Your messages to the AI mentor or assistant are sent to Anthropic's Claude API to generate responses. Chart photos from the iOS app are sent to Anthropic's API only to recognize the instrument on the chart, and are not stored by Signum. Anthropic does not use your data to train their models. See Anthropic's Privacy Policy.
• RevenueCat: In-app subscription management for the iOS app. RevenueCat receives your purchase status and an app user ID so we can confirm which subscription you have. Payments themselves are processed by Apple. See RevenueCat's Privacy Policy.
• Polygon.io: Market data provider. We request prices and chart data from Polygon.io. No personal data is sent to Polygon.io.
• Stripe (website only): Payment processing for website subscriptions. Stripe processes your payment information directly and is PCI DSS compliant. We do not store your card details. See Stripe's Privacy Policy.
• PostHog (website only): Product analytics. We collect anonymized usage data to understand how users interact with the website and web app. See PostHog's Privacy Policy.
• Sentry (website only): Error monitoring. We send anonymized error reports from the website and web app to Sentry to identify and resolve bugs. See Sentry's Privacy Policy.
• Neon: Database hosting (PostgreSQL). Website data is stored in the EU region; iOS app data (alerts, watchlist, push tokens, preferences and daily usage counters) is stored in a separate database in the US (East) region. Both enforce strict per-user access controls.
• Vercel: Application hosting. Serves the web application and the iOS app's server (chart reads, the AI assistant, alerts and the morning briefing).

PostHog, Sentry, and Stripe are used on the website and web app only. The iOS app contains no analytics, crash-reporting, or advertising SDKs, and does not track you.

5. Data Retention

• Active Accounts: Your data is retained for as long as your account is active and as needed to provide the Service.
• Deleted Accounts: When you delete your account, we initiate a data purge process. All personal data, trade journal entries, AI conversation history, and profile information are permanently deleted within 30 days of account deletion.
• Anonymized Analytics: Aggregated, non-identifiable usage statistics may be retained indefinitely for platform improvement purposes.
• Legal Obligations: Certain data may be retained beyond 30 days where required by law, such as billing records for tax compliance.

Deleting your account in the iOS app

In the iOS app, go to Profile, then Account, then Delete account. You can also reach Delete account from the "Account" link on the subscription screen without subscribing. Deleting your account removes your account and the data we hold on our servers for it, including your alerts, watchlist, push tokens, and preferences. Deleting your account does not cancel an App Store subscription: cancel it in your Apple ID subscription settings.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Deletion: You may request deletion of your personal data, subject to certain legal exceptions.
• Right to Export: You may request a machine-readable export of your data, including your trade journal entries and AI conversation history.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances.
• Right to Object: You may object to processing of your data for direct marketing purposes.

To exercise any of these rights, please contact us at contact@kaizenprojects.be. We will respond to your request within 30 days.

7. GDPR Compliance (European Economic Area)

If you are located in the European Economic Area (EEA), the following additional provisions apply:

• Legal Basis: We process your data based on: (a) your consent; (b) the necessity to perform our contract with you; (c) our legitimate interests in operating and improving the Service; or (d) compliance with legal obligations.
• Data Transfers: Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses, to protect your data.
• Data Protection Officer: For GDPR-related inquiries, contact us at contact@kaizenprojects.be.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority.

8. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Sale of Data: Signum does not sell personal information. We have not sold personal information in the preceding twelve months.

To submit a CCPA request, contact us at contact@kaizenprojects.be. We will verify your identity before processing your request.

9. Cookies

We use cookies and similar technologies to operate the Service and collect analytics data. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

10. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at contact@kaizenprojects.be, and we will promptly delete that information.

11. Data Security

We implement industry-standard security measures to protect your personal data, including encryption in transit (TLS) and at rest, row-level security on database queries, secure authentication via OAuth providers, and regular security audits. However, no method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes that affect how we process your data, we will provide notice via email or through the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at contact@kaizenprojects.be.