Version 2026-10-17 · Published for review; the effective date is set at release.

FundedInk Privacy Policy

Version 2026-10-17 · Effective date: to be set at release

This policy explains what information FundedInk handles, where it is kept, who can see it and what choices you have. It is written to describe how the application actually works. If we change how FundedInk works in a way that affects your privacy, we will update this policy and tell you in the app.

FundedInk is an independent software product developed and operated from Utah, United States ("FundedInk", "we", "us"). "FundedInk" is a product and brand name, not the name of a registered company. For privacy questions and requests, write to support@fundedink.com (also shown in the application under Settings → Legal).

1. The short version

Your trading journal is stored on your own computer, in your FundedInk data folder. We do not have a copy of it.
If you use the support chat on our website, those messages are stored online with our service provider (Supabase) so that we can answer you. Your journal is never part of that.
FundedInk does not collect analytics, usage statistics, crash reports or advertising data, and it does not show ads.
Signing in with Google is how FundedInk knows which account holds your license; reading and exporting a journal works without it. When you sign in, Google and our authentication provider (Supabase) process your Google account's email address, name, profile picture and a unique account identifier.
The interactive preview on our homepage runs in your browser with invented sample data. It creates no account, sends nothing to us and reads nothing from your computer.
If you buy FundedInk, our payment provider processes your payment. We receive the order details, not your card number.
License checks read your own account's license record and keep the answer on your computer; they do not use your IP address, location or hardware details, and no automated decision is ever made about your account.
We never ask for, and the app never stores, passwords for trading platforms or prop firms.

2. Information stored on your computer only

FundedInk keeps the following in your data folder (Windows: %APPDATA%\FundedInk; macOS: ~/Library/Application Support/FundedInk) and nowhere else:

Your profile: the nickname you choose, your theme and preferences, and, if you sign in, your email address, display name, profile picture and the unique account identifier from the authentication provider.
Your accounts: names, prop firm, platform, account size, starting balance, status and settings.
Your trades: dates, instruments, profit and loss, fees, results, notes, rule-following flags and screenshots you attach.
Imports: the names of files you imported and the identifiers in them that prevent duplicates.
NinjaTrader bridge data, if you use it: executions and account snapshots the add-on sends to FundedInk over your computer's loopback interface, and the pairing key.
Studio material: background pictures you add and the recaps you export (saved where you choose, by default your Desktop).
Records of the legal documents you accepted and when.
The last verified license status of your signed-in account (entitlement.bin), encrypted with your operating system's data-protection facilities (Windows DPAPI, macOS Keychain), and, where the device-slot service is in use, the random device identifier (device.json) and the last signed license issued to this computer (license.json).
Daily backup copies of the journal database, kept in the backups folder.
A technical log (logs\fundedink.log) with timestamps, error messages and component names. Tokens, keys and passwords are never written to it.

You control this folder. Deleting it removes everything above. FundedInk reads these files only to show you your journal; it does not upload them anywhere.

3. Information processed by service providers when you choose to use a feature

When you click "Continue with Google", FundedInk opens your normal web browser and sends you to our authentication provider, Supabase, which hands you to Google. Google tells Supabase that you signed in and shares your Google account's email address, name, profile picture address and a unique identifier for your Google account. Supabase creates a FundedInk account record with that information and gives the app session tokens. FundedInk stores the tokens on your computer, encrypted with your operating system's data-protection facilities (Windows DPAPI or the macOS Keychain) so that only your own user account can read them, and copies your email, name and picture into your local profile so they show while you are offline.

Who processes it: Google LLC (your Google account) and Supabase, Inc. (our authentication provider). Our Supabase project is hosted in a single data-center region, which we publish in the application under Settings → Legal.
What they receive: the sign-in request, your IP address and browser details as part of the sign-in, and the account details above.
How long: the account record stays until you delete your account (section 9). Session records expire when you sign out or when the provider's session limits apply.

We never receive or store your Google password.

Purchases (when FundedInk goes on sale)

Payments are handled by our payment provider, Stripe, which is named at checkout and on your receipt and processes your payment details under its own privacy policy. You can start a purchase on our website or from inside the desktop application; in the second case the app asks our website to create the checkout for your signed-in account and opens it in your browser, and the app only ever learns the result by reading your account's license record afterwards. We receive and keep: the order identifier, the amount and currency, the date, the status (paid, refunded, disputed), the email address used at checkout and the FundedInk account the license belongs to. We keep purchase records for as long as tax and accounting law requires, typically up to seven years, even if you delete your account.

License verification and account security

When you are signed in, FundedInk reads your own account's license record from our provider when you sign in, about every six hours while the app is open, after a purchase started from the app, and when you press Refresh purchase status. The request carries your account's sign-in session and nothing else: no journal data, no hardware details. The answer (license status, account state, purchase date, time of the check) is kept on your computer, encrypted, so the app keeps working offline for the periods described in the Licensing Policy.

Where the device-slot service described in the Licensing Policy is in use, FundedInk additionally asks that service for a signed license at launch, after sign-in, about once a day, and when you press "Check now" in Settings → License. That request carries:

your account identifier and session token;
a random device identifier that FundedInk creates on this installation and a label such as "Windows PC". It is not a hardware identifier or serial number, and it identifies nothing outside FundedInk;
the FundedInk version, and the previous signed license if there is one, so the service can tell whether it is genuine.

For each account the service keeps: the list of devices (identifier, label, first and last check-in, release date), the time and outcome of each check (known device, new device, or device limit reached), whether the presented license verified, and the app version. FundedInk does not record your IP address, location, hardware details, other software or anything about your journal. Our hosting provider's standard server logs may record the request's IP address for a short time for its own security purposes.

These records exist for one purpose: to keep a personal license personal. A scheduled job looks for patterns that may indicate account sharing, repeated unauthorized activations or forged license files, and raises a flag for a person to look at. No automated decision is made about you. A flag never changes your account; only an authorized person can restrict or close an account, with a recorded reason, a notice to you and a right of appeal, as described in the Licensing Policy and the Account Termination Policy. If you appeal, we keep your appeal message and our reply.

Support by email

If you contact us by email, we receive what you send. If you attach your technical log or a backup to help us diagnose a problem, we use it for that purpose only and delete it when the issue is resolved, unless you ask us to keep it.

Support chat on the website

The FundedInk website offers a support chat. Unlike your journal, support conversations are stored online, in our Supabase project, so that our support staff can read and answer them and so that your conversation is still there when you come back.

What is stored: the messages you and our staff exchange, when they were sent, when your browser showed you a reply, a random ticket reference, the status of the conversation and, for signed-in users, the account identifier, name and email address of your FundedInk account. If you chat without signing in, our authentication provider creates a temporary anonymous session identifier for your browser; it is not linked to your name or email unless you later sign in.
Who can read it: only support staff accounts that an administrator of FundedInk has approved, through a private staff area, and our service provider as our processor. Staff may add internal notes about a conversation; those notes are visible to staff only. Staff can see whether you hold a FundedInk license and when it was bought, so that they can help with it.
What is not stored: your trading journal, your trades, your screenshots or any other data from the application, unless you paste it into the chat yourself.
Why: to provide customer support (performance of our contract with you, or steps you ask for before a purchase) and to prevent abuse of the chat.
Abuse prevention: we limit how many messages a browser can send in a short time, and our provider keeps short-lived security logs of sign-in attempts, which may include your IP address, to protect the service.
How long: support conversations are kept for up to 2 years after the last message, then deleted, unless an open dispute or a legal obligation requires us to keep them longer. You can delete your conversations earlier yourself, or ask us to (section 9).

4. Cookies and website storage

Our website (fundedink.com) uses no advertising or analytics cookies and no third-party tracking scripts. It stores only what it needs to work:

Sign-in session cookies (sb-…-auth-token, set by our authentication provider's library): keep you signed in on the website. Strictly necessary; sent only to our website; removed when you sign out or when the provider's session limits apply.
Cart (fundedink.cart.v1, browser local storage): remembers that FundedInk is in your cart between pages. Contains only the product identifier; cleared when you remove the item.
Support chat guest session: if you chat without signing in, the same sign-in cookies hold the temporary anonymous session described above.
Interactive preview settings (fundedink.studio.*, local storage inside the preview frame): the Studio choices you make in the preview, kept in your own browser only; "Reset demo" clears them.
Stripe: the payment page is hosted by Stripe on its own domain, where Stripe sets its own cookies under its privacy policy. Our website itself loads no Stripe script.

Because none of this is used for tracking or advertising, the website shows no cookie banner. Where a law requires consent for non-essential storage, we will ask before adding anything of the kind.

5. What we do not do

We do not sell, rent or share your personal information for money or for advertising, and we do not "share" it for cross-context behavioral advertising.
We do not collect analytics, telemetry or tracking identifiers from the app.
We do not upload your journal, trades, screenshots or statistics to any cloud service. If we ever offer cloud synchronization, it will be a separate, optional feature with its own clear consent, and this policy will be updated first.
We do not use IP addresses, geolocation, VPN detection or hardware fingerprints to judge your license or your account.
We do not ask for trading-platform or prop-firm passwords, and FundedInk will not accept them.
We do not use your data to train artificial-intelligence models.

6. Why we process information and the legal basis

Where data-protection law requires a legal basis (for example the EU and UK GDPR), ours are:

Performing our contract with you: creating and verifying your license, providing sign-in and support, and handling appeals.
Legitimate interests: keeping the service secure, preventing fraud and abuse of licenses, and keeping technical logs needed to fix problems.
Legal obligation: keeping purchase and tax records.
Consent: optional features you switch on, such as Google sign-in. You can withdraw consent by signing out and asking us to delete your account.

7. Where information is processed

We are based in the United States. Google and Supabase may process the sign-in information in the United States or other countries where they operate; our Supabase project is hosted in a single data-center region, published in the application under Settings → Legal. Where your information is transferred out of the country you live in, we rely on our providers' safeguards for international transfers, such as standard contractual clauses, where the law requires them.

8. How long we keep information

Local data: for as long as you keep it on your computer.
Authentication account: until you ask us to delete it.
Purchase records: for the period required by tax and accounting law.
License check records (time, outcome, device identifier, license validity, app version): 90 days.
Device records: while the device is active; removed when you release it or delete your account.
Moderation records (account state changes, reasons, notes, appeals and replies): for as long as the account exists and for 2 years after it is closed, so that a decision can be reviewed, reversed or explained.
Support correspondence, including website chat conversations: for up to 2 years after the last message, unless an open dispute or a legal obligation requires longer.
Technical logs on your computer: rotated automatically when they reach 1 MB.

9. Your choices and rights

You can, at any time:

Use FundedInk without signing in.
Export your trades as a CSV file from Settings, and open your data folder from Settings to copy or back up everything.
Sign out, which removes the session tokens, the cached license and the copied email, name and picture from your computer.
Release a computer from your license under Settings → License.
Delete your local journal by deleting the data folder (close FundedInk first).
Download a copy of the information we hold about your account (identity, license, purchases, accepted documents, support conversations) under Account → Privacy & data on our website.
Delete your support chat conversations yourself under Account → Privacy & data, or ask us to at support@fundedink.com. If you chatted without signing in, tell us the ticket reference shown in the chat window.
Delete your FundedInk account yourself under Account → Privacy & data: after you confirm, the authentication account, the device records, any profile record and your support conversations are deleted at once. You can also ask us to do it, from the address you signed in with; we then delete the account within 30 days. Purchase records that tax and accounting law require us to keep are retained for the statutory period, detached from the account, and a deleted account's lifetime license cannot be restored. The app and journal on your computer are unaffected and remain yours.
Appeal any restriction or closure of your account (Account Termination Policy, section 5).

Depending on where you live, you may also have the right to ask what personal information we hold about you, to correct it, to receive a copy in a portable format, to object to or restrict certain processing, and to complain to a supervisory authority. Residents of California, Utah and other US states with privacy laws may have additional rights, including the right not to be discriminated against for exercising them. We honor these requests whether or not a particular law applies to us. To make a request, write to support@fundedink.com; we may ask you to confirm the request from your sign-in email address.

10. Security

FundedInk is built so that your journal stays local, the application has no secret keys embedded in it, the user interface runs in a sandbox with no direct access to your computer's files, every request from the interface to the application core is checked, images you add are verified before they are stored, sign-in tokens and the verified license status are encrypted with your operating system's data-protection facilities (Windows DPAPI, macOS Keychain), and the app can only read, never change, your account's license record. Our website sends a Content Security Policy and related security headers, checks the origin of every request that changes something, and limits how fast an address may call it. Releases are intended to be digitally signed. Support chat conversations are stored with our provider under access rules enforced in the database itself: each customer can read only their own conversation, and staff-only notes are never sent to customers. No system is completely secure; keep your Windows account protected and your computer up to date.

11. Children

FundedInk is for adults. We do not knowingly collect information from anyone under 18, and FundedInk may not be used by anyone under 18. If you believe a child has created an account, contact us and we will delete it.

12. Changes to this policy

We will update this policy when FundedInk's handling of information changes. The version date at the top changes with each revision, the app shows the current policy under Settings → Legal, and material changes are announced in the app before they take effect.

13. Contact

Contact for privacy requests, support and legal notices: support@fundedink.com, also shown in the application under Settings → Legal.

FundedInk is an independent software product developed and operated from Utah, United States. FundedInk is a product and brand name, not a registered company or registered trademark.