Privacy Policy

Last updated: 21 March 2026

MindEdge Pro ("we", "us", "our") is operated by Spikey Trades. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website at mindedgepro.com and our web application (together, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Who We Are

MindEdge Pro is operated by Spikey Trades as a sole trader. For any privacy-related enquiries, contact us at: spikeytrades@gmail.com

2. What Data We Collect

We collect the following categories of personal data:

• Account data: your email address and password (hashed) when you register via Firebase Authentication.
• Usage data: trade logs, psychology scores, journal entries, voice note metadata, and other data you voluntarily enter into the app. This data is stored in your browser's local storage and in our Firebase Firestore database associated with your account.
• Payment data: when you subscribe, payments are processed by Stripe. We do not store your card details. Stripe's privacy policy applies to payment processing.
• Communications: if you contact us by email or via the contact form, we retain that correspondence.
• Technical data: browser type, device type, and approximate location (country level) may be collected by our hosting provider (Cloudflare Pages) for security and performance purposes.

3. How We Use Your Data

• To provide, maintain and improve the Service
• To authenticate your account and manage your subscription
• To send service-related emails (e.g. subscription confirmation, password reset)
• To respond to your enquiries and support requests
• To comply with our legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract: processing necessary to provide you with the Service you have subscribed to
• Legitimate interests: to improve the Service, prevent fraud, and ensure security
• Legal obligation: where required by applicable law
• Consent: where you have given explicit consent (e.g. optional communications)

5. Data Storage and Security

Your trade data and journal entries are stored in Firebase Firestore (Google Cloud, EU region). We implement appropriate technical and organisational measures to protect your data, including encrypted transmission (HTTPS), hashed passwords, and access controls.

No method of transmission over the internet or electronic storage is 100% secure. While we take your security seriously, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

7. Your Rights (GDPR)

If you are in the EEA, you have the following rights:

• Access: request a copy of your personal data
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: request that we restrict processing of your data
• Portability: request a machine-readable copy of your data
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at spikeytrades@gmail.com. We will respond within 30 days.

8. Third-Party Services

We use the following third-party services which may process your data:

• Firebase / Google Cloud — authentication and database hosting
• Stripe — payment processing
• Cloudflare — website hosting, CDN and security
• Formspree — contact form submissions
• ElevenLabs / Anthropic — AI features (voice analysis, AI coach). Data submitted to these services is subject to their respective privacy policies. We do not share personally identifiable information beyond what is necessary to provide the feature.

9. Cookies

We use minimal cookies necessary for the Service to function (session authentication). We do not use advertising cookies or third-party tracking cookies. By using the Service, you consent to the use of essential cookies.

10. Children

The Service is not directed at children under 18 years of age. We do not knowingly collect personal data from anyone under 18. If we become aware that a child has provided us with personal data, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy, contact us at: spikeytrades@gmail.com