Privacy Policy (iOS/Android)

The Service is operated by:

PT TRADE CAFE AILABS

Address: JL.Sunset Road No 105, Desa/Kelurahan Seminyak, Kec. Kuta, Kab. Badung, Provinsi Bali, Kode Pos: 80361, Indonesia

Email: info@tradecafe.ai

This Privacy Policy explains how we collect, use, disclose, store, and protect information when you use the Apps.

The Apps are designed to be used with an existing account. Account creation/registration is available only on our website.

4.1 Account Data Used for Sign-In

When you sign in to the Apps, we process:

• Your account email and/or internal user ID (or equivalent identifier).
• Authentication tokens used to keep you signed in.

If your account uses Google OAuth (created on our website) and the Apps support signing in with Google, we may receive and store: name, avatar, email, and Google ID.

4.2 Access Eligibility Status

To determine whether features are available in the Apps, we process:

• Your internal user ID (or equivalent identifier).
• An access eligibility status returned by our systems (e.g., whether your account currently has access to app features).

The Apps do not process payments and do not collect payment card or bank details.

4.3 Exchange Integration Data (e.g., Bybit), If You Use It

If you connect an exchange account in the Apps, we collect and store in our database:

• Exchange name.
• API key and API Secret (stored using industry-standard encryption).
• Integration settings.

Important: We require API keys to be created without withdrawal permissions. You may delete your API keys at any time. We do not share your API keys with third parties.

4.4 Push Notifications (WonderPush)

We use WonderPush to send operational alerts (e.g., bot activity). We process:

• Device ID / Push Token: used solely to route notifications to your device.
• Internal User ID: used to match the device with your account.

4.5 Device Storage and Security

We use the following measures:

• Authentication tokens may be stored in the device’s secure storage (e.g., Keychain/Keystore) to maintain your session.
• We use HTTPS/TLS for secure communication.
• Analytics: we do not use third-party tracking analytics at this time.

4.6 Logs and Diagnostics

We maintain service logs (authentication events, API errors) for security and debugging purposes for up to 30 days.

We use your information to:

• Provide authentication and access control.
• Determine availability of features in the Apps based on access eligibility status.
• Execute exchange integrations and trading bot commands you request (where applicable).
• Send push notifications about operational events (service functionality).
• Maintain security and prevent fraud/abuse.
• Communicate about important service and policy changes.
• Comply with legal obligations and enforce our terms.

We do not sell your personal data. We share data only with:

• Google OAuth (if used): for authentication.
• WonderPush: for delivering push notifications (device token and internal user ID).
• Cloud Infrastructure: DigitalOcean (via name.com) and/or AWS, primarily in Frankfurt, Germany, for hosting and database storage.
• Legal Authorities: if required by law to protect rights and safety.

Your data is stored and processed in the EU, primarily in Frankfurt, Germany. We do not process your data in Indonesia.

We retain data only as long as necessary for the purposes described in this policy, including security and legal compliance. Key retention points:

• Logs: up to 30 days.
• Database backups: created daily and retained for 7 days.
• Account data: generally deleted upon account deletion, subject to short backup retention and limited legal/security needs.

Account deletion is handled via support ticket request. After approved deletion, we delete or de-identify account data. Due to rolling backups, deleted data may persist in backups for up to 7 days until overwritten.

We use reasonable technical and organizational measures including HTTPS/TLS, encryption of sensitive data (such as exchange API secrets), role-based access control (RBAC), and least-privilege access.

Depending on your location, you may request access, correction, or deletion of your information. Contact us at info@tradecafe.ai.

The Service is not intended for users under 18.

We may update this policy and will notify you of material changes via email and/or within the Service.

If you purchase a subscription on iOS, subscription status and purchase validation are handled via Apple’s In-App Purchase and our subscription management provider (RevenueCat). For this purpose, we may process technical and transaction information related to your purchase (e.g., device/app technical information and Apple receipt data) and an in-app user identifier where applicable. Purchase-related processing applies only where subscriptions are offered (currently iOS).

info@tradecafe.ai