Privacy Policy

Effective 23 July 2026 · Last updated 18 October 2026

This policy explains how Cayman Pty Ltd (we, us, our) handles personal information collected through the Chart Reps mobile app and website. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Chart Reps is an educational chart-reading trainer. It uses historical market data for practice only and is not financial, investment, or trading advice. It does not collect financial account details, payment card numbers, or trading positions, because it never handles real money or real trades.

1Who we are

The entity responsible for your personal information is:

Entity: Cayman Pty Ltd (ACN 622 061 429 · ABN 69 622 061 429)
Registered address: 193 Yambil St, Griffith NSW 2680
Privacy contact: [email protected]

2What we collect and why

We only collect what we need to run the app, save your record, and fix problems when the app breaks.

Account credentials — email address, and a password or your Apple ID: Collected when you create an account, so you can sign in and we can authenticate you. Your password is handled by our authentication provider (see section 4) and is stored only in hashed form; we never see or store it in plain text. If you sign in with Apple instead, Apple gives us the email address on your Apple ID, or a private relay address that forwards to it if you chose Hide My Email. We do not ask Apple for your name and never see your Apple ID password. When you delete an account that signs in with Apple, we also ask Apple to revoke Chart Reps' access to your Apple ID.
Product emails: Reminders, progress notes and offers about Chart Reps and Chart Reps Pro, sent to your account email address — for example, a nudge before a daily streak lapses. We send at most one a week. They are on if you signed up from the SIGN UP tab of a version of the app that shows the notice under CREATE ACCOUNT, and off for every other account until you turn them on. Turn them off in the app under Account, EMAILS, switch “Reminders and offers by email”, or with the unsubscribe link at the bottom of any of these emails. Unsubscribing stops product emails only. Account mail (confirming your address, resetting your password) and billing mail about your subscription still arrive.
Rep and performance history: The records of your practice sessions — the charts you read, the plans you committed, and the deterministic verdicts — so we can save your record and sync it across your devices once you have an account. We also use it to choose which product emails you get, such as a reminder that you have not played yet, and to count how many people who got an email then played or subscribed.
Account identifier: An account ID assigned to your account, used to associate your synced records with you.
Subscription status: Whether you have an active Chart Reps Pro subscription, which plan it is, and when it renews or lapses — so the app knows which features to switch on. Apple charges you and tells our subscription service what happened; we record the result against your account ID. We never receive your payment card details.
What you choose to make public: Nothing you do in Chart Reps is public unless you take one of these steps. A call sign is the only name anyone else ever sees; it is optional, and you set it under Account. Tapping CARD or CLIP on a verdict publishes a card image and a link: anyone with the link sees that chart, the call you made on it and how it turned out, but not your email or call sign. A clip's video itself stays on your device until you send it somewhere. Sending a duel shows the person you send it to your call on that chart, and your call sign if you have one; the same goes the other way when you answer one. Playing the daily tape while signed in adds your call to that tape's public crowd figures, which are counts only and never name anyone.
Suggestion box: What you type into the suggestion box, which kind of note it is, the screen you sent it from, the app version and platform, and your account ID if you are signed in. Never your email address. It goes to the service we use to read and answer suggestions.
Microphone and notifications: The app asks for the microphone only when you record a voice take over a replay clip. The recording is made on your device and stays there; we never receive it. The daily tape reminder is a notification scheduled on your device; the only thing we learn is that you switched it on or off, as one of the app usage events below.
Crash reports and app usage events: Technical data about how the app runs on your device — crash and error reports, and events like "practice session started" or "app store data loaded" — so we can fix bugs and see whether the app's basic paths are working. Every event carries a random id generated on your device, not your name or email. If you create an account, that id is linked to your account id so we can tell, for example, whether syncing is working for signed-in users, along with one yes/no that says whether the account is one of our own test accounts, so we can leave those out of our numbers. That yes/no is worked out on your device; your email is never sent. The events themselves stay technical: what happened and when, not what you typed or looked at. Now and then the app may ask a one-question survey about how you would feel without Chart Reps; if you answer, the answer is stored with the same id. The App Store rating prompt is Apple's own; we learn only that the app asked for it, not whether or how you rated. If you arrive through a link that is labelled with the campaign it belongs to, such as one of our ads or a link a creator shared, events also carry that label, so we can tell which links bring people in. The label names the link, not you.
Our Reddit ads, on the website: We buy ads on Reddit and count which of them lead to sign-ups. If you reach chartreps.app by tapping one of those ads, the site loads Reddit's pixel, a small script from Reddit. It tells Reddit that you visited and, if you create an account, that you signed up. Reddit receives the click id it added to the ad's link, your IP address, your browser details and Reddit's own cookie. When you sign up, our server sends Reddit the same sign-up with your IP address, browser details and a scrambled (hashed) copy of your account ID, so Reddit counts it once. Reddit never receives your email address. The site keeps the click id on your device for 7 days, so signing up on a later visit that week still counts. If you did not come from one of our Reddit ads, the site never loads the pixel.
Our ads, in the iPhone app: The app uses Singular, a measurement service, to count which ads lead to installs, free trials and subscriptions, and to tell Reddit about the ones its ads brought in. From every install Singular receives your device model, iOS version, IP address and an id that belongs to Chart Reps on your device, and our subscription service tells it when a trial or subscription starts or renews. After your first finished rep, iOS asks whether Chart Reps may track you. If you allow it, Singular also receives your device's advertising identifier and matches your install to the ad you tapped, one person at a time. If you say no, it still counts installs, trials and subscriptions through Apple's SKAdNetwork, which reports totals per campaign without saying who you are. The app works the same whichever you choose, and you can change the answer later in iOS Settings, under Privacy & Security, Tracking.

Guest play stays on your device. If you use Chart Reps without creating an account, your practice records are stored only locally on your device and are not sent to us, except a card, clip link or duel you choose to send (see above). Crash reports and app usage events are the exception — those are collected from every install, signed in or not, because that is how we find and fix bugs for guest users too. Opening the subscription screen also contacts our subscription service to fetch current prices, under a random id generated on your device; buying a subscription requires an account.

3What we do not do

We do not show ads inside Chart Reps.
We do not load Reddit's pixel for website visitors who did not come from one of our Reddit ads.
We do not read your device's advertising identifier unless you allow tracking when iOS asks.
We do not send Reddit or Singular your email address, your name, your rep history or anything you type.
We do not share crash reports or app usage events with anyone for advertising.
We do not use data brokers, and we do not sell or rent your personal information to anyone.

4Third parties and processors

We use a small number of service providers to run the app. They act as our processors under our instructions, not as independent recipients of your data, with one exception: Reddit also uses what its pixel and our server send it under its own privacy policy.

Supabase: Hosts our authentication and the syncing of your rep history. Your email, hashed password, account ID, and synced records are stored on Supabase infrastructure on our behalf.
Sentry: Receives crash and error reports so we can find and fix bugs. Reports carry the device id described in section 2, plus technical details about the failure — what code ran, what error occurred. They do not carry your email or your password.
PostHog: Receives the app usage events described in section 2 — which screens and actions were used, not their content — so we can see which parts of the app are actually working and used.
Resend: Sends our email: account mail, subscription mail and product emails. It receives your email address and the message. It also keeps its own list of addresses that have bounced or reported our mail as spam.
RevenueCat: Runs our subscriptions: it fetches the current prices for your territory, completes a purchase or restore against Apple, and tells us whether your subscription is active. It receives your account ID (or, before you sign in, a random id generated on your device) and the subscription record Apple returns. In the iPhone app it also receives Singular's id for your device, so it can tell Singular when a trial or subscription starts. If you installed Chart Reps after tapping one of our ads in the App Store, Apple's own ad attribution tells RevenueCat which of our campaigns it was. Apple provides this without an advertising identifier and without tracking you across other apps. It does not receive your payment card details, and neither do we.
Reddit: Shows the ads we buy on Reddit. For website visitors who came from one of those ads, it receives what section 2 describes: the click id, the visit and the sign-up, IP address, browser details and a hashed account ID. Singular also tells it about iPhone installs, trials and subscriptions its ads brought in.
Singular: Measures which of our ads bring people to the iPhone app, as section 2 describes. It receives device details, your advertising identifier only if you allow tracking, and trial and subscription events from RevenueCat, and it passes the results to the ad network that showed the ad.
Apple: Provides the App Store account and, once subscriptions are available, handles billing. Apple processes any payment directly — we do not receive or store your payment card details.

5Overseas disclosure

Your account data — email, hashed password, account ID, and rep history — is hosted by Supabase in its Sydney region (ap-southeast-2), within Australia. Crash reports and app usage events go to Sentry and PostHog, and subscription records go to RevenueCat, and your email address and the emails we send you go to Resend — all four run on United States infrastructure. Reddit and Singular, which measure our ads, are also based in the United States. Apple processes any subscription billing under its own terms and may handle that data outside Australia. Where personal information is handled overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

6Storage, retention, and security

We keep your account information and rep history for as long as your account is active. We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access — including encryption in transit and access controls on our hosting. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any suspected breach.

When you delete your account (section 7), your synced records are permanently removed. One exception: if an email address bounced or its owner reported our mail as spam, we keep that address on a do-not-email list so we do not write to it again. The list holds the address, the reason and the date, and nothing else.

7Your rights

Under the Australian Privacy Principles you can:

Access the personal information we hold about you.
Correct information that is inaccurate, out of date, or incomplete.
Delete your account and data. You can delete your account from within the app, which permanently removes your synced rep history. You can also request deletion by contacting us. See the Support page for step-by-step instructions.
Complain if you believe we have mishandled your personal information. Contact us first at [email protected]. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8Children

Chart Reps is not directed at children under the applicable minimum age, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above and, where the change is material, take reasonable steps to notify you.

10Contact us

Questions about this policy or your personal information? Email [email protected].