What Kara Tools knows about you

We collect what it takes to run the service and bill for it, nothing more. No data is sold, no advertising identifier is shared, and there is no tracking from one app to another.

The data controller is the publisher of Kara Tools. For any question about your data, write to support@kara-trading-tools.com.

Account and profile. Email address, username, and what you choose to add: bio, avatar, banner, social links. The email is used to identify you and to reach you.

Trading data. Balances, positions and history of the accounts you connect yourself. This is what the journal is made of: without it, the app has nothing to show. It is only used to show it back to you and to compute your statistics.

Content you publish. Bio, communities, shared chart styles, trade notes and images, and the content reports you send. It is used to display it and to moderate what is public.

Subscription. Plan, number of accounts, payment status. The payment method itself never reaches us: it is entered with Stripe on the web and the desktop app, and with Apple or Google in the mobile apps.

Exchanges with support. Your messages and the screenshots you attach, so we can answer you.

Usage and incidents. Screens viewed and actions in the app, to understand what is useful and what gets in the way. Crash reports, to fix them. These reports include the device’s IP address.

Partners’ bank details. Only for affiliates who earn commissions, and only to pay them.

• Precise location: no location permission is requested. Only an approximate location may be inferred from your IP address by usage analytics.
• Contacts, files on the device.
• Your photo library: the app does not access it. Only the images you choose to upload are stored.
• Advertising identifier, device fingerprint for targeting.
• Login credentials for your brokers beyond what connecting an account requires, and never in plain text.

The mobile apps request a single permission: network access. Exports go through the system share sheet, which requires no access to your files.

Your data is passed to processors, for specific tasks, and to no one else:

• Stripe — payment and invoicing on the website, the web app and the desktop app. Place of processing: European Union (Ireland) and United States.
• Apple — in-app purchases in the iOS app, “Continue with Apple” sign-in. Place of processing: European Union (Ireland) and United States.
• Google — in-app purchases in the Android app, “Continue with Google” sign-in. Place of processing: European Union (Ireland) and United States.
• Google Firebase — authentication. Place of processing: United States.
• Supabase — storage of the images you upload: avatar, banner, community and trade images. Place of processing: [hosting region to be confirmed].
• PostHog — usage analytics, tied to your account identifier; may infer an approximate location from your IP address. Place of processing: European Union (Germany).
• Sentry — error reports, including the IP address. Place of processing: [hosting region to be confirmed].
• Brevo — transactional emails and messages sent to support, attachments included. Place of processing: European Union.
• Anthropic — the “Kara AI” assistant of the Quant Lab, on the web app and the desktop app: your messages, the open strategy and its simulation results are sent to it to generate the answers. Place of processing: United States.
• Discord — optional linking of your Discord account. Place of processing: United States.
• OVH — hosting of the service. Place of processing: France.
• Vercel — hosting of the website. Place of processing: United States.

Each of these providers is bound by a data processing agreement (Article 28 of the GDPR) and provides data protection at least equivalent to what is described here; transfers outside the European Union are governed by the European Commission’s standard contractual clauses.

None of this data is transferred, rented or resold to a third party for commercial purposes.

Your data lives as long as your account. When you delete it, the data goes too — see the dedicated page (in French), which details what is erased and the one thing that remains: invoices, which accounting law requires to be kept and which live with Stripe.

The General Data Protection Regulation gives you a right of access, rectification, erasure, restriction, objection and portability. Deletion is done directly from the app, without writing to us or waiting; for the rest, write to support@kara-trading-tools.com. You can also lodge a complaint with the CNIL, the French data protection authority.

Usage analytics. You can withdraw your consent to usage analytics at any time. As long as there is no setting for it in the app, write to support@kara-trading-tools.com: we turn it off for your account.

Exchanges between the app and our servers are encrypted in transit. The secrets needed to connect your accounts are encrypted at rest. Access to production data is restricted and logged.

Kara Tools is intended for adults and is not meant for people under 18. We do not knowingly collect data about them.

This policy may change. The date of the last revision is at the top of the page; a substantial change will be announced in the app.

The rules of the service are in the terms of use and sale (in French).