On this page
Information we collect
Account data: email address, display name, profile photo, password credentials (stored securely by our auth provider), and subscription status.
Community data: messages, reactions, channel activity, direct messages, and files you upload (images, voice notes).
Education data: lesson progress, quiz attempts and scores, rank or gamification status.
Trading tools: paper trading orders and positions, watchlists, trade journal entries (including optional tags and notes), and related timestamps.
Referral data: referral codes and referral status if you use that feature.
Technical data: IP address and browser user agent when you accept our Terms; device and push notification identifiers if you enable notifications; analytics events (such as page views and feature usage); and optional session replay recordings when that feature is enabled.
Payment data: payments, subscriptions, cancellations, and optional mentorship bookings are processed by Stripe. We receive billing status, customer identifiers, subscription identifiers, cancellation status, and related timestamps, but we do not receive or store full payment card numbers.
If you enter your email address before logging in, we may use it to check whether you have an active subscription, send authentication links, process password resets, or connect your account to your subscription.
How we use information
We use personal information to provide and secure the service, process subscriptions, deliver notifications you request, moderate content, prevent fraud, improve features, comply with law, and communicate important service updates. We do not sell or share your personal information for cross-context behavioral advertising.
We may review community messages, direct messages, support conversations, attachments, and related metadata where reasonably necessary to provide support, investigate abuse, enforce our Terms, maintain platform safety, comply with law, or protect users and the service.
Legal bases (EEA/UK visitors)
Where GDPR applies, we rely on: contract (providing the service you subscribed to); legitimate interests (security, analytics, product improvement, moderation); and consent where required (for example, push notifications or certain analytics in your jurisdiction). You may withdraw consent where applicable without affecting prior processing.
Third-party processors
We use service providers that process data on our behalf, including:
- Supabase for authentication, database, file storage, realtime functionality, and backend infrastructure.
- Stripe for subscriptions, billing, checkout, cancellation, and optional mentorship bookings. We do not receive or store full payment card numbers.
- Resend for transactional emails such as magic links, password resets, and welcome emails.
- OneSignal and/or browser push services for push notifications, if you enable them.
- Mixpanel for analytics, product usage measurement, diagnostics, and optional session replay.
- Vercel for hosting and delivery of the web application.
- Yahoo Finance and other market data sources for paper trading quotes and market data. We generally send ticker symbols or quote requests, not your personal profile information, to market data providers.
These providers process information according to their own privacy policies and contractual obligations. Provider privacy policies: Supabase, Stripe, Resend, OneSignal, Mixpanel.
Analytics and session replay
We use Mixpanel to understand how members use the app (for example, sign-in, dashboard views, quiz completion, learning path progress, and feature adoption). When enabled, session replay may record interactions such as clicks and navigation to help us fix usability issues. We configure session replay to mask password and payment input fields.
We may also use analytics and diagnostic tools to collect technical information such as feature usage, page views, clicks, navigation events, error messages, stack traces, device/browser information, and performance-related data to help us debug and improve the service.
There is no in-app analytics opt-out control today. To request opt-out of non-essential Mixpanel tracking where applicable, contact info@youngbullinvestors.com. Browser or device controls that limit cookies or local storage may reduce analytics but can also affect login if essential storage is blocked. In development environments, analytics and session replay may run with higher sampling than in production.
International transfers
Data may be stored or processed in Canada, the United States, or other countries where our providers operate. By using the service, you understand your information may be transferred to jurisdictions with different privacy laws. Where required, we rely on appropriate safeguards offered by our vendors.
Retention
We retain account, subscription, community, education, paper trading, trade journal, referral, notification, and support data for as long as reasonably necessary to provide the service, maintain security, comply with legal obligations, resolve disputes, enforce our Terms, and operate our business.
If you request deletion of your account or personal information, we will process the request within a reasonable period, subject to information we need to retain for legal, billing, security, fraud prevention, dispute resolution, or legitimate business purposes.
Some content may be deleted differently depending on the feature. For example, certain messages may be soft-deleted so they are hidden from normal use, while messages in auto-delete channels may be permanently deleted on a scheduled basis. Backup copies, logs, billing records, legal acceptance records, and security records may remain for a limited period where required or reasonably necessary.
Security
We use encryption in transit (HTTPS), access controls, and industry-standard practices. No method of transmission or storage is 100% secure.
Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Canadian residents may have rights under PIPEDA. California residents may have rights under the CPRA. EEA/UK residents may have GDPR rights and may lodge a complaint with a supervisory authority. To exercise rights, email info@youngbullinvestors.com. We may verify your identity before responding.
Children
The service is not directed to anyone under 18. We do not knowingly collect personal information from children. Contact us if you believe a minor has provided data.
Breach notification
If we become aware of a personal data breach that poses a significant risk, we will notify affected individuals and regulators as required by applicable law.
Automated decisions
We do not make decisions with legal or similarly significant effects based solely on automated processing. Gamification ranks and quiz scores are for engagement only.
Changes to this policy
We may update this Privacy Policy. We will post the revised version and update the “Last updated” date. Material changes may be communicated by email or in-app notice where appropriate.
Contact
Privacy inquiries: info@youngbullinvestors.com. Operator: Young Bull Investors Inc.