Kamal's Trading Journal — Privacy Policy

Depending on how you use Kamal's Trading Journal, we may collect the data categories below:

• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.

We use the information we collect for the following purposes, and no others:

• To detect and prevent fraud, abuse and policy violations.
• To send you course-related notifications — only after you opt in.
• To respond to your support requests and doubts.
• To process payments and issue invoices and receipts.
• To meet our legal, tax and accounting obligations.
• To create, secure and maintain your account.
• To deliver the courses, live classes, notes and mock tests you have access to.

Kamal's Trading Journal does not sell or rent your information. We share it only with the following parties, and only as far as needed:

• Razorpay — our payment processor, to take payments and issue refunds.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.

We share with them only what each one strictly needs, and nothing more.

Security is built in: passwords are stored only as bcrypt hashes, every connection is protected with TLS 1.2 or above, and backups are kept encrypted. We review our security posture regularly and remediate critical vulnerabilities within 72 hours.

Under the DPDP Act and Google Play’s policies, you have the right to:

• Access a copy of the personal data we hold about you.
• Delete your data, subject to legal retention requirements.
• Withdraw consent for any non-essential processing at any time.
• Correct information that is inaccurate or out of date.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.

Write to us at support@igniterapp.com to use any of these rights; we reply within the legally required period.

This app is meant for people aged 13 and above. If you are a minor (under 18), a parent or legal guardian must approve your use of the app and any payments. We never knowingly collect personal data from children under 13.

We keep your account data for as long as your account stays active. You can request deletion at any time using the in-app “Delete my account” option or by emailing support@igniterapp.com. We delete your personal data within 30 days, except records we are legally required to retain for tax, accounting or compliance reasons (typically up to 7 years).

Should we materially change our data practices, we will post an in-app notice and refresh the “Last updated” date shown above. By continuing to use Kamal's Trading Journal after the update, you agree to the new policy.

Questions or complaints about how we treat your data? Write to support@igniterapp.com. We respond to grievances as soon as we can and within the limits set by the DPDP Act.