Privacy Policy

Chart AI (Android) | Chart AI (iOS)

Last Updated: November 5, 2026

1. Introduction

This Privacy Policy describes how Chart AI ("we," "our," or "us"), developed and operated by Viksva, MB, a company registered in Vilnius, Lithuania, collects, uses, and protects your personal information when you use our mobile application and services. Viksva, MB is the data controller for this processing (see Section 11). We are committed to protecting your privacy and handling your data transparently in accordance with applicable data protection laws.

2. Information We Collect

2.1 Information You Provide Directly

• Chart Images: Images of trading charts, stock charts, or financial graphs you submit for AI analysis
• Analysis History: Records of charts you have analyzed and saved, kept on your device
• Trade Journal (optional): Trades you choose to log, such as the symbol, direction, currency, entry and exit prices, quantity, stop-loss and take-profit levels, dates, status and your notes. This stays on your device and is not sent to us or to any AI service
• Position Calculator: The account size and risk percentage you type. They are used on your device to work out a position size, are not saved, and are not sent to us or to any AI service
• Profile and Preferences: Onboarding answers (such as experience level, trading frequency, preferred markets, risk tolerance and goal), analysis settings and display preferences, kept on your device. Analysis settings shape the instructions sent with your chart, and some onboarding answers are included in analytics if analytics is on (Section 4.3)
• Support Communications: Messages you send to our support team

2.2 Information We Collect Automatically

• Device Information: Basic device, operating system and app details sent to RevenueCat with purchase data and, if analytics is on, to Google Analytics
• Analytics Data: If analytics is on (Section 4.3), Google Analytics for Firebase receives a random app-instance identifier and in-app events such as onboarding steps and answers, paywall views, purchases and completed analyses. This data is not linked to your name or email, is not used for advertising and is not used to track you across other companies' apps or websites
• Security Identifiers: A random anonymous account ID (Firebase Authentication) and an app attestation token (Firebase App Check) that let our servers verify requests come from the genuine app and apply daily usage limits
• Technical Logs: Our backend logs each analysis request with a pseudonymised form of the anonymous ID, the app, the model used, its size and its outcome. These logs are not written to record your chart images
• Crash Reports: The app contains no crash-reporting software. Apple and Google may give us aggregated statistics and crash reports, under their own settings and terms

2.3 Information We Do Not Collect

• Brokerage Credentials: We do NOT collect or store your brokerage account login information
• Financial Account Numbers: We do NOT collect bank account, trading account, or other financial account numbers
• Brokerage Connection: The app does not connect to any broker or exchange, so we cannot see your actual trading history or portfolio. Anything in your Trade Journal is what you typed yourself, and it stays on your device
• Other Financial Data: We do not collect your account size, investments, assets or net worth on our servers

2.4 Camera and Storage Permissions

Camera Permission: We request camera access to allow you to take photos of trading charts for AI analysis. When you use the camera feature:

• Photos are captured directly within the app for chart analysis through AI image recognition
• Images are stored locally on your device for access in your analysis history
• Images are transmitted through our secure backend (Google Cloud / Firebase) to Google Gemini AI services for processing and pattern analysis; our backend passes the image on and does not keep it
• The price scale on your chart may be read with on-device text recognition (Apple Vision on iOS, Google ML Kit on Android) to place trade levels on your image; this happens on your device and nothing extra is sent
• We do not store your photos on our own servers
• Google keeps what it receives for up to 55 days (Section 4.1), and we cannot delete images once they have been sent to Google
• You can delete images stored locally on your device at any time through the app's history screen

Storage Permission: We request storage access to save chart images and analysis results locally on your device so you can view them from the history screen. These locally stored images can be deleted by you at any time.

3. How We Use Your Information

We use your information for the following purposes:

• Chart Analysis: Processing your chart images through Google Gemini AI services to provide pattern recognition and technical analysis commentary (FOR EDUCATIONAL/ENTERTAINMENT PURPOSES ONLY - NOT TRADING ADVICE)
• Analysis History and Trade Journal: Storing your analysis records, images and logged trades locally on your device for your reference
• Service Provision: Delivering core app functionality and premium features
• Usage Limits: Applying daily usage limits for free users
• App Improvement: Analyzing usage through analytics, where analytics is on (Section 4.3)
• Customer Support: Responding to your inquiries and providing assistance
• Legal Compliance: Meeting legal obligations and protecting our rights

4. Third-Party Services

We do not sell your personal data. We use the following providers:

4.1 Google Gemini AI

Chart images and the analysis instructions built from your settings are passed through our backend to Google's Gemini models, currently through the paid Gemini API, with Google Cloud Vertex AI as the backup route. The Trade Journal and Position Calculator inputs are not sent. AI can and will make mistakes, and chart analysis may contain significant errors or be completely incorrect.

• No training: Under the Gemini API terms, Google does not use prompts or responses from paid use to improve its products, and processes them under its data processing addendum
• Retention by Google: Google keeps prompts and responses for 55 days, to detect abuse and for safety, security and legal reasons (Google's usage policies)
• Deletion: Our backend does not keep the images, and we cannot delete an image from Google's systems once it has been sent

4.2 RevenueCat and Firebase Security Services

RevenueCat, Inc. manages subscription status and purchase records for us, using a random customer ID. Payments are processed by the Apple App Store or Google Play, and we do not receive your card details. Firebase Authentication, Firebase App Check, Cloud Functions and Cloud Logging (Google) run our backend. See RevenueCat's privacy policy.

4.3 Google Analytics for Firebase and Your Consent

The app uses Google Analytics for Firebase (provided by Google Ireland Limited / Google LLC), on both iOS and Android, to understand how the app is used, for example which onboarding steps people complete, how often the paywall is shown and how many analyses succeed.

• What is collected: a random app-instance identifier, in-app events and their parameters (including onboarding answers such as experience level and preferred markets), in-app purchase events (product, price, currency), app version, device model, operating system and language. Google may derive an approximate region (such as country) from your IP address; we never request your device's location
• What is NOT collected: your name, email, chart images, the content of analyses, your Trade Journal, your Position Calculator inputs, or the advertising identifier (IDFA). The app shows no ads, and all advertising-related consent signals (ad storage, ad user data, ad personalization) are always set to denied
• EEA, UK and Switzerland: analytics stays off until you choose. Before onboarding we show a short privacy notice, then Google's consent form (Google User Messaging Platform, IAB TCF v2.2). Analytics storage is only enabled if you consent to the relevant purposes; if you decline, no analytics data is collected
• Changing your choice: you can review or withdraw consent at any time in the app under Settings → Privacy preferences
• Other regions: analytics is enabled by default for the purposes above. You can turn it off at any time with the "Share usage analytics" switch in Settings, or ask us to stop by contacting us (section 11)
• Retention: event data is kept in Google Analytics for no longer than 14 months, then deleted automatically
• Google's processing is described in the Google Privacy Policy and Firebase privacy information

5. Data Storage and Security

• On your device: Your analysis history, chart images, Trade Journal, profile and settings are stored on your device
• Device backups: Your operating system may include app data in your own device backup (for example iCloud or Android backup), depending on your settings
• Our backend: It passes your chart to Google and returns the result. It does not save your chart images
• In transit: Data between the app, our backend and Google is sent over encrypted connections (HTTPS/TLS)

No method of transmission or storage is completely secure, but we use these measures to protect your data, and we will meet our legal duties if a data breach occurs.

6. Data Retention

• Data on your device: Until you delete it in the app or remove the app. Copies in your own device backups follow your backup settings
• Sent to Google for analysis: Up to 55 days under the Gemini API terms (Section 4.1)
• Analytics: No longer than 14 months (Section 4.3)
• Technical logs: 30 days
• Anonymous account ID: In Firebase Authentication while the app uses it. We have not set an automatic deletion date for it; you can ask us to delete it
• Subscription data: Kept by RevenueCat and the app stores under their terms for as long as needed for your purchases and for legal and accounting duties
• Support emails: As long as needed to deal with your request, and longer only if the law requires

7. Your Rights and Choices

Under the GDPR you have the right to:

• Access your personal data and get a copy
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Portability of data you provided, in a machine-readable format
• Objection to processing based on legitimate interests
• Withdraw consent to analytics at any time in Settings → Privacy preferences or with the "Share usage analytics" switch, without affecting earlier processing

Most of your data is on your device, so you can delete it yourself in the app or by removing the app. For anything else, contact us using Section 11. Because the app has no named accounts, we may need details from you to find data linked to you.

You also have the right to complain to a supervisory authority: the one where you live or work, or in Lithuania the State Data Protection Inspectorate (vdai.lrv.lt).

8. Children's Privacy

You must be at least 18 years old to use the app (see our Terms of Service), and it is not directed to anyone under 18. We do not knowingly collect personal information from children under 18. Trading and investing are adult activities requiring mature judgment. If you believe we have collected information from a minor, please contact us immediately.

9. International Data Transfers

We are in the EU, but our providers process data outside the EEA, mainly in the United States: Google Cloud (us-central1), Google's Gemini services in the locations it uses for them, Google Analytics and RevenueCat. These transfers rely on the safeguards in the providers' data-processing terms, such as the European Commission's Standard Contractual Clauses, or on the EU-US Data Privacy Framework where a provider is certified. Contact us for more information on these safeguards.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last Updated" date above.

11. Contact Information

12. Legal Basis for Processing (GDPR)

• Performance of a contract (Art. 6(1)(b)): Analyzing the charts you submit and providing subscriptions
• Consent (Art. 6(1)(a)): Analytics in the EEA, UK and Switzerland, requested through the consent form shown before onboarding. You can withdraw it at any time
• Legitimate interests (Art. 6(1)(f)): Protecting the app and our backend from abuse and fraud (anonymous ID, App Check, technical logs), keeping the service working, answering support requests, and analytics outside those regions. You can object to this processing
• Legal obligation (Art. 6(1)(c)): Keeping records and responding to authorities where the law requires it

13. Liability

Disclaimers about AI analysis, and the limits on our liability for the app, are in our Terms of Service. Nothing in this Privacy Policy limits your rights under the GDPR or any liability that cannot lawfully be limited.

14. Your Responsibility for What You Submit

Please submit only images you have the right to use, and avoid including account numbers or other personal details in them.

15. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of Lithuania. This does not affect your right to complain to a supervisory authority, your right to go to court under data protection law, or the mandatory consumer rights of your country of residence, including, for EU/EEA consumers, the right to bring proceedings in the courts of that country.

16. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and how it's used, and the right to delete personal information. We do not sell personal information.

17. Securities and Financial Regulations