Legal

Privacy Policy

Effective date: Pending publication · Last updated: Pending publication

1. Scope

Costante is a behavioral trading performance system for discretionary traders. Trade journaling is one capability within the Service; its primary purpose is behavioral intervention and review around trading decisions. This policy describes what information Costante collects, how it is used, and who it is shared with. It applies to the Costante service and the website at www.costante.app (together, the "Service").

Manual input required before public launch: the legal operator, effective date, last-updated date, and direct privacy contact have not yet been published. This draft must be completed with those verified details before it can serve as a final public privacy notice.

Costante is not a broker. It does not connect to brokerage or exchange accounts, does not execute trades, and does not hold or transfer funds. The trading information described below is information you choose to record about your own activity.

2. Information we collect

Account and authentication

You can create an account with an email address and password, with Apple, or with Google. If you sign up with email, your password is managed by our authentication provider and is never visible to us in readable form. If you use Apple sign-in, we receive your email address, or Apple's private relay address if you choose to hide your email, and your name if you provide it on first sign-in. If you use Google sign-in, we receive your email address and basic profile information such as your name and profile picture. You may also set a display name.

Trading and performance

When you log a trade, you may record the instrument, direction, session, date, and holding time, along with results such as net profit or loss and R multiple, the outcome quality, and the setup type. This is information about your trading results. It is not payment information. Costante does not collect brokerage credentials, account balances, position sizes, or entry and exit prices.

Behavioral information

Costante records how you traded, not only what you traded. You may select trade-preparation and execution-readiness options, including mental-state and mindset selections, the emotions present during a trade, the mistakes or failure modes you identify, the strengths you demonstrated, your risk state, and whether you followed your plan. You may also create custom labels for these categories. This information is used to produce your own insights within the app. It is never used for advertising and is never sold.

Settings and preferences

You can configure the markets you trade, your main session, limits such as maximum trades per day and maximum loss per trade, daily loss-guard values, notification preferences, and appearance. Costante does not currently send push notifications; the notification options record your preferences for reminder features.

Support communications

If you use the in-app help and feedback option, the app opens a draft message in your own email application addressed to our support inbox. What you send is an ordinary email from your account. The app does not store the message as part of your Costante account. The message is handled through your email provider and our support inbox.

3. Information generated by Costante

Costante calculates behavioral metrics, scores, and insights from the records you enter, such as discipline-related scores and patterns across your emotions and mistakes. These calculations are derived from your own data and made available through your account. They are provided for personal insight. They are not investment advice, trade signals, or recommendations, and they are not used to make any decision that produces a legal or similarly significant effect.

4. Subscriptions and payments

The public website currently describes private-beta pricing, while public platform and billing availability have not yet been published. Before any paid access becomes available, Costante must publish the applicable payment provider, subscription terms, and the information each provider processes.

5. Device and technical information

Costante stores a limited amount of data on your device: your login session token, an in-progress trade draft so that an unfinished entry survives closing the app, and your appearance preference. The trade draft is cleared when you sign out.

When your device communicates with our service providers, those providers generate standard technical logs, such as IP addresses and request timestamps, used to operate and secure the Service.

The website is a static site with no analytics scripts and no advertising cookies. It loads fonts from Google Fonts, so your browser sends a standard request, including your IP address, to Google to retrieve the font files.

6. How we use information

We use the information described in this policy to:

  • create, authenticate, and secure your account;
  • store, display, and synchronize your trade records and settings;
  • calculate your behavioral metrics, scores, and insights;
  • determine your subscription status and provide paid features;
  • respond to support requests;
  • operate, maintain, troubleshoot, and improve the Service; and
  • comply with legal obligations and enforce our Terms of Service.

We do not use your information for third-party advertising and do not build advertising profiles.

Legal bases (EEA and UK)

Where data-protection law applies to you, we process your information on the following bases: performance of a contract, to provide accounts, storage, synchronization, insights, and subscription access; our legitimate interests, to secure, maintain, troubleshoot, and improve the Service; compliance with legal obligations, where required; and your consent, where a specific activity depends on it.

7. Service providers and disclosures

We share information with the providers that operate the Service. Supabase provides authentication and database hosting and stores your account, trade, behavioral, and settings data. Apple and Google may process sign-in information where you choose those sign-in methods. Google also processes website font requests. Any payment or subscription provider must be named here before public billing is enabled. These providers process information to perform services for Costante under their applicable terms and service agreements.

We may also disclose information if required by law or legal process, to protect the rights, safety, or security of Costante or its users, or in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to information already collected. We do not otherwise share your personal information with third parties.

8. Sale, advertising, and tracking

We do not sell your personal information. We do not use it for advertising profiling or cross-context behavioral advertising. Costante does not link your information with third-party data for advertising, does not track you across other companies' apps or websites, and does not share information with data brokers.

9. Data retention and deletion

We retain account information while an account remains active and for as long as necessary to provide the Service. You can request deletion of your account from within the app, under Settings, Account, Delete account. We process the request and remove your account and associated Costante data, including your profile, trade records, behavioral data, settings, and custom labels, from active systems. Limited information may be retained where required for legal, security, fraud-prevention, or accounting purposes. Residual copies may remain in backup systems for a limited period and are removed or overwritten through ordinary backup-retention processes.

Deleting your Costante account does not cancel any future paid subscription. The applicable cancellation process must be published with the billing provider before public billing is enabled. A direct contact channel for account-deletion requests must be published before public launch.

10. Security

We use technical and organizational measures designed to protect information from unauthorized access, loss, misuse, or alteration. Access controls restrict account data to authorized users, systems, and service providers that require access to operate the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Use a strong, unique password and keep your credentials confidential.

11. International processing

Our authentication and database infrastructure is hosted in the United States. Our other providers may process information in the United States and other countries. Where applicable law requires additional protections for international transfers, those transfers are handled under the mechanisms and terms made available by our service providers. If you use Costante from outside the United States, your information will be processed in the United States, where data-protection laws may differ from those in your location.

12. Rights and choices

You can view and edit your trade records, profile, and settings in the app at any time, and you can request deletion of your account as described above. If applicable law gives you rights over your personal information, such as the rights to access, correct, delete, port, or object to or restrict certain processing, a direct privacy contact channel must be published before public launch so requests can be made and answered as the law requires. We will not discriminate against you for exercising these rights.

13. Children

Costante is intended for adults and is not directed to children. You must be at least 18 years old to use the Service. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, use the direct privacy contact channel once it is published and we will remove it.

14. Changes and contact

We may update this policy as the Service develops. If we make material changes, we will revise the "Last updated" date and provide notice through the app or website. Changes take effect when posted.

A verified direct contact channel for questions and privacy requests must be published before public launch.