Legal

Privacy Policy

Last updated: 12 October 2026 · Version 2026-10-12

On this page
  1. Who we are
  2. What we collect
  3. How we use it, and the legal basis
  4. Emails we send you
  5. AI features
  6. Service providers
  7. Cookies, pixels and app tracking
  8. Sharing and "selling"
  9. International transfers
  10. How long we keep data
  11. Deleting your account
  12. Your rights
  13. Security
  14. Children
  15. Changes
  16. Contact

This Privacy Policy explains what personal data MarketPro collects when you use the MarketPro apps for iOS and Android, the web app at app.getmarketpro.app and this website (together, the "Service"), what we do with it, who we share it with and the choices you have. It describes the Service as it actually works today. If something here does not match what you see, tell us.

1. Who we are

The Service is operated by Harajuku Holdings LTD, a private company registered in the Republic of Cyprus (company number HE417205; registered office 114 Kosti Palama Street, Mesa Geitonia, 4002 Limassol, Cyprus) ("MarketPro", "we", "us"). We are the data controller for the personal data described here. Privacy questions and requests: support@getmarketpro.app.

2. What we collect

Data you give us

  • Account data: email address, name or display name, and the identifier from Google or Apple if you sign in with them. A phone number if you add one.
  • Preferences and activity you create: watchlists, favourite signals, notification and email preferences, onboarding answers (for example your experience level), your trade journal, simulator trades, lesson progress and points.
  • Broker and cashback requests: if you ask us to verify a broker account or join the cashback programme, the broker, your trading account number, the name, email and phone number you give, your country of residence, and any screenshot you upload.
  • Telegram: if you connect your own Telegram to receive notifications, your Telegram chat ID, user ID, username and first name.
  • Support and feedback: support tickets, emails and attachments you send us, poll answers, and, if you take part in a trader interview, the conversation and your answers.

Data collected automatically

  • Device and app data: device type, operating system, app version, language, time zone, push-notification tokens, and identifiers such as a Firebase installation ID and, where you allow it, your device's advertising identifier.
  • IP address and approximate country: we store the IP address your device used and the country derived from it, to localise the Service, apply regional rules (see our Eligibility Policy), and prevent abuse. We do not collect precise GPS location.
  • Usage data: screens viewed, features used, signals opened, notifications opened, purchases started and completed.
  • Session recordings on iOS: Microsoft Clarity records how screens are used (taps, scrolls, screen changes) so we can find and fix usability problems. It follows the "Share usage analytics" switch in the app.
  • Diagnostics: crash reports and error logs.
  • Marketing attribution: which ad, campaign or link brought you to us (for example UTM parameters and click identifiers such as fbclid or gclid), the page you landed on, and on the web your browser's user agent and the advertising cookies set by Google and Meta.
  • Email engagement: whether our emails are delivered, opened and clicked.

Purchase data

  • App Store and Google Play: Apple and Google process the payment. We receive your subscription status, product, dates, renewals, cancellations and refunds through RevenueCat. We never receive your card details.
  • Web: web subscriptions are processed by Stripe. Under Stripe Managed Payments a Stripe entity acts as the seller of record and handles sales tax and VAT. We receive your email, billing country, subscription status and payment status, and we attach to your Stripe customer record the campaign that brought you to us. We never receive your full card number.

3. How we use it, and the legal basis

Where the EU or UK GDPR applies, each use relies on a legal basis:

  • Providing the Service (account, signals, notifications you switched on, subscriptions, support, cashback requests you make): performance of our contract with you.
  • Security, fraud and abuse prevention, applying regional rules: legitimate interests and, where relevant, legal obligation.
  • Product analytics and fixing problems (Firebase Analytics, Clarity, crash reports): legitimate interests in the apps, where you can switch it off; on the website and web app in the EEA, UK and Switzerland, consent through the cookie banner.
  • Advertising measurement (Meta, TikTok, Kochava, Google): consent where the law requires it (the cookie banner on the web in the EEA, UK and Switzerland, and Apple's tracking prompt on iOS); otherwise legitimate interests, with an opt-out.
  • Product and marketing emails: see section 4.
  • Accounting, tax and legal claims: legal obligation and legitimate interests.

We do not use your data to make decisions about you that have legal or similarly significant effects, and signals are the same for every user: nothing in the Service is tailored to your finances.

4. Emails we send you

When you create an account we use your email address for service emails (for example account, security, billing and, if you enable them, signal emails) and for product emails about MarketPro's features, lessons and offers. We tell you this when you sign up, and every product email has a one-click unsubscribe link. You can also change email preferences in the app or the preference page linked from any email. Unsubscribing never affects your account. Where your local law requires prior opt-in consent for these emails, we rely on the customer exception for similar products and services, or we ask for your consent.

Our newsletter is sent from a mailing tool we host ourselves (Sendy), and our other emails through Amazon Simple Email Service. We record which emails are delivered, opened and clicked.

5. AI features

Some features send text to AI model providers to generate a reply. When you use them, the provider receives what you type and the context needed to answer, not your email address or payment details.

  • AI tutor, quizzes, analysis and other AI tools: processed by DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China). Do not type personal or sensitive information into these tools.
  • Trader interviews: processed by Anthropic (United States). The provider receives the conversation and a short profile (plan, whether you pay, country, experience, account age).
  • Signal review: our signal engine uses Anthropic to review trade candidates. That uses market data only, not your data.

6. Service providers

These providers process data on our behalf or as independent controllers for their own services:

  • Google (Firebase Authentication, Firestore database, Cloud Storage, Cloud Messaging, Crashlytics, Analytics, Remote Config; Google Cloud hosting; Google Analytics on the website; Google sign-in). Our database is stored in the United States.
  • Apple (App Store billing, Sign in with Apple, push delivery) and Google Play (billing).
  • RevenueCat (subscription management). It receives your email, phone number if given, and app identifiers.
  • Stripe (web payments, the billing portal, and seller of record under Stripe Managed Payments).
  • Meta (Facebook SDK in the apps, Meta Pixel on the web, and the Conversions API, which receives a hashed email, your IP address, browser user agent and Meta cookie identifiers when you register or buy).
  • TikTok (TikTok SDK in the apps and TikTok Pixel on the web, for ad measurement).
  • Kochava (mobile install attribution; it receives your account identifier and email as an identity link).
  • Microsoft Clarity (session recordings and product analytics on iOS).
  • Anthropic and DeepSeek (AI features, see section 5).
  • Amazon Web Services (email sending and receiving) and Sendy (our self-hosted newsletter tool).
  • Telegram (only if you connect your Telegram account).
  • Vercel (hosts this website and processes visitor IP addresses in its logs).

If you open a broker through a link in the Service, the broker collects your data under its own privacy policy. We receive the trading account number and, from the broker's partner reports, the trading volume on that account, which we use to verify the account and calculate any cashback.

7. Cookies, pixels and app tracking

The website and web app use Google Analytics, the Meta Pixel and, where enabled, the TikTok Pixel. Visitors in the EEA, the UK and Switzerland see a banner and none of these load unless they accept. Elsewhere they load by default and you can turn them off with "Cookie settings" at the bottom of every page. Details are in our Cookie Policy.

In the apps, the "Share usage analytics" switch in My Account > Preferences turns off Firebase Analytics, Meta and TikTok event logging, Kochava and Clarity on that device. On iOS we ask through Apple's App Tracking Transparency prompt before using your advertising identifier for cross-app tracking. On Android you can reset or delete your advertising ID in device settings.

Push notifications use Firebase Cloud Messaging. Turn them off in the app or in device settings.

8. Sharing and "selling"

We do not sell personal data for money. We share data with the providers in section 6, with app stores and payment providers to process purchases, with brokers only as described in section 6, with authorities where the law requires it, and with a buyer if the business is sold, under this Policy. Some laws (for example in California) treat sending data to advertising platforms for ad measurement as "sharing". You can opt out of that with Cookie settings on the web and the analytics switch in the apps.

9. International transfers

We are based in Cyprus, and our providers process data in other countries, mainly the United States. Where EU or UK data protection law applies, transfers rely on an adequacy decision (including the EU-US Data Privacy Framework for certified recipients) or on the European Commission's standard contractual clauses. Text you send to DeepSeek is processed in China, which has no EU adequacy decision; if you are in the EEA, UK or Switzerland, do not enter personal information into the AI tools.

10. How long we keep data

  • Account, preferences and activity: while your account exists.
  • Trader-interview conversations: while your account exists; erased when you delete it.
  • Push-notification delivery records: 180 days.
  • Support tickets and emails, broker and cashback requests: while your account exists, then deleted on request (section 11).
  • Billing records: as long as tax and accounting law requires. Apple, Google and Stripe keep their own records under their policies.
  • Email suppression list (addresses that unsubscribed, bounced or complained): kept so we never email them again.

11. Deleting your account

You can delete your account in the app (My Account > Delete account). That immediately deletes your login and your main profile record, and erases your trader-interview data.

Some related records are stored separately and are not removed automatically: your trade journal and simulator history, broker and cashback requests and uploaded screenshots, support tickets and emails, your Telegram link, referral records, and the copies held by our providers (for example RevenueCat, Stripe, Kochava, Meta and our email tools). To have those deleted too, email support@getmarketpro.app from your account's email address and we will delete them within one month, except records we must keep by law (such as billing records).

Deleting your account does not cancel a subscription. Cancel it first in your App Store or Google Play settings, or in the web billing portal (see our Subscription and Refund Policy).

12. Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict processing (including any processing based on legitimate interests and all direct marketing), and withdraw consent at any time without affecting earlier processing. Email support@getmarketpro.app. We answer within one month. If you are in the EU you can complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy) or to the authority where you live; in the UK, the Information Commissioner's Office.

13. Security

Data is encrypted in transit, access to production systems is restricted to the people who need it, and the database is protected by access rules so that users can read only their own records. No system is completely secure. If a breach puts your data at risk, we will notify you and the authorities as the law requires.

14. Children

The Service is for adults aged 18 and over. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, tell us and we will delete it.

15. Changes

When this Policy changes we update the date and version above. For material changes we will tell you in the app or by email before they take effect.

16. Contact

Harajuku Holdings LTD, 114 Kosti Palama Street, Mesa Geitonia, 4002 Limassol, Cyprus. Email: support@getmarketpro.app.