Privacy policy

Last updated 28 October 2026

TradeCalmly is a personal trading journal and tracker. It only reads your MT5 account data to show your results and send alerts; it never places orders, gives no buy or sell signals and does not handle your money. This page explains what data we collect, what we use it for and what your rights are.

1. Data we collect

• Your TradeCalmly account: email and password. The password is stored only as a hash; we cannot read it. Along with it, the app version you use, the platform (Android or iOS) and when you last used it (updated at most once an hour).
• MT5 connection: account number (login), server name, broker name and the investor password (read-only password). The investor password is encrypted before it is stored. The app refuses passwords with trading rights.
• Trading data read from MT5: closed trades (up to 90 days before you connect, and everything after), open positions, deposits and withdrawals, credit, balance and equity over time, and the account's currency and leverage.
• Settings: time zone, language, capital baseline, breakeven threshold, and the alerts you turn on with their thresholds, with a history of changes to them (when, before and after) so we can explain an alert when you ask.
• Notifications: the alerts sent to you with the figures they were decided on (equity, balance, the threshold at the time), your phone's push notification token, and, if you link Telegram, your Telegram chat id and username. For each alert the system records how many phones the push notification and the Telegram message reached, or that they failed (only a short error code, such as the app being uninstalled or the bot blocked), to fix delivery problems.
• Server requests: when your MT5 server is not supported yet, we keep its name so we can add it and email you.
• Support requests: what you write to us in Settings → Help & feedback, with /support on Telegram or by email, and our replies. If you leave Attach diagnostics on in the app, the request also holds the app version and platform, your language and time zone, your MT5 server, login number and sync status, and the error codes of the last 24 hours; never passwords or trades.
• Errors and account events: when something fails, or the app gets an error answer (for example a wrong investor password), we keep the kind of error with an error code, the time, the address that was called and your user and MT5 account ids, so we can find it when you send us the code. Message values are not kept. We also keep when your MT5 account was connected, disconnected or changed status.
• Sign-in and security events: sign-ins with your password (at most one a day), when your account is locked after wrong passwords, password changes and resets, linking or unlinking Telegram, a phone starting or stopping push notifications, and the emails we send you (which kind, and whether the mail server took it). These keep no password, code, email text or IP address.
• Technical logs: our servers keep operational logs, which can include IP addresses and times of access, to prevent abuse (for example login limits) and to fix problems. This includes an access log of each request to our server: the address without its parameters, the answer's status, how long it took and your IP address.
• Usage statistics (builds from Google Play / the App Store and test builds): events such as the first app open, sign-up, sign-in, connecting MT5, the trade history finishing loading, linking Telegram and saving an alert, with the app instance id, the device's advertising id, device model, OS and country. These events contain no email, MT5 login, broker name or trading figures.
• App crash reports (builds from Google Play / the App Store and test builds): when the app hits an error or closes unexpectedly, the code running at the time (stack trace), app version, device model, OS and the app instance id. When a feature fails without a crash (push notifications cannot be set up, or our server answers with an error), a short report says where it happened, with the kind of error and the server's error code. Reports contain no email, MT5 login or trading figures.
• The testers' Telegram group (only if you join it): your Telegram id and name, when you joined and left, the invite link you used, and the messages you send in the group. These are kept under your Telegram account; if you link Telegram in the app, we match them to your TradeCalmly email to see how far you got. Deleting your TradeCalmly account does not delete them; messages are deleted after 90 days, and member details 90 days after you leave the group.
• Website statistics: for each day we only count page views, how many visits reach each section and clicks on the Telegram and language links and on the intro video. No cookies, and no IP address or other identifier is stored with these counts.
• Lists from partner brokers: a partner broker may send us the trading account numbers or emails of its clients. We do not keep them as they are: each row holds only a hash made with a secret key and a partly hidden hint (the first and last one or two digits of the account number, the first two characters and the domain of the email), to recognise users who get an offer when the MT5 account number or email you use in the app is on such a list.

We do not track your location and do not read your contacts, photos or files.

2. How we use it

• To sync and show your trading results, calendar and statistics.
• To send the alerts you turned on, in the app, as push notifications and on Telegram (if linked).
• To answer the quick questions you send to the linked Telegram bot (/today, /positions, /risk, /stats). The bot reads a command only to answer it and does not keep private messages.
• To send necessary email: password reset codes, a notice when a server you asked for is supported, and a notice when a new Telegram chat is linked to your account (with that chat's Telegram name).
• To keep the service secure and fix problems, and to answer your support requests. Our support team may use an AI assistant to read a request with its diagnostics and draft a reply; a person reads every reply before it is sent.
• To see how far testers get in the app and which version they run, and to read feedback in the testers' group to improve the app.
• To count installs and how the app is used, including installs that come from our ads.

We do not sell your data. Your account and trading data are never used for advertising.

3. Third parties that process data

• Your broker: to read your data, our servers log in to your broker's MT5 server with the investor password you give us.
• Server hosting: data is stored on rented servers, currently Microsoft Azure (Southeast Asia region).
• Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS): deliver push notifications. They receive your phone's token and the notification text.
• Google Analytics for Firebase (and Google Ads when we run app install campaigns): receive the usage statistics listed in section 1.
• Google Firebase Crashlytics: receives the app crash reports listed in section 1 and keeps them 90 days.
• Telegram: only if you link it; Telegram receives the alerts you choose to get there, the commands you send the bot, and its answers (your account's P&L, open positions, risk and statistics).
• Email delivery (currently Azure Communication Services): receives your email address and the email we send you.
• Zoho Mail: holds the emails you send to our support address and our replies to them.
• Anthropic (the Claude AI assistant): when our support team uses it, it receives what answering a request needs: the request and its diagnostics, your email, account and MT5 connection status, your activity timeline (connections, alerts sent, settings changes), error records and, when needed, the figures of one day. For our weekly report it receives totals and the text of messages in the testers' Telegram group, without sender names; inside the text, emails, Telegram usernames (@…) and long numbers (phone numbers, account numbers) are hidden.

4. How long we keep it

• Account and trading data are kept until you delete your TradeCalmly account.
• In-app notifications (with their figures) are deleted automatically after 30 days.
• Equity and balance over time are kept in full for 90 days; older ones are kept once an hour and at the opening of each trade (used for the day-start equity and a trade's risk).
• The history of settings changes is kept for 1 year.
• App crash reports are kept by Firebase Crashlytics for 90 days.
• Messages in the testers' Telegram group are kept for 90 days, and member details until 90 days after leaving the group.
• A row of a partner broker's list is deleted when the broker sends a new list without it. When you delete your account, the row is no longer linked to you.
• Daily files of the technical logs are kept about 14 days on the server, with a copy in the backup storage that is also deleted after 14 days. The running services keep their own recent log, limited by size (at most 200 MB per service) and cleared when the service is updated. The access log with IP addresses is kept 7 days in daily files and is not copied to the backup storage; the web server's own running log keeps at most its last 4 MB. Error records are deleted after 14 days; MT5 account events and sign-in and security events after 180 days.
• Support requests are kept while open and deleted 1 year after they are closed, or when you delete your account.
• When you disconnect an MT5 account, its investor password is deleted at once; the trade history stays so you can still review it. When you remove an MT5 account, its history is deleted too.
• Database backups are kept for 14 days and then deleted, so deleted data can remain in a backup for up to 14 days.

5. Security

The app talks to our servers over HTTPS. Investor passwords are encrypted at rest with keys kept apart from the database. TradeCalmly passwords are stored only as hashes. No system is perfectly secure, so we keep the data we collect to what the service needs.

6. Your rights

• View and change your settings, and disconnect or remove your MT5 account, in the app.
• Delete your whole TradeCalmly account: Settings → Delete account. See also how to delete your account.
• Turn off push notifications in your phone's settings, or unlink Telegram in the app.
• Ask for a copy of your data or ask about privacy: email support@tradecalmly.com.

7. Age

TradeCalmly is for people aged 18 and over. We do not knowingly collect data from anyone under 18.

8. Changes

When this policy changes we update the date at the top, and tell you in the app if the change is significant.

9. Contact

Email: support@tradecalmly.com