HedgyTrade (“the App”) is published by Terry Dynamics, a California-based firm. In this policy, “we,” “us,” and “Terry Dynamics” refer to the publisher; “you” refers to the person installing or using the App on an iOS device.
This policy explains what data the iOS app collects, how that data is processed and stored, and the controls you have over it.
tenant-7f3a…) assigned when you first launch the App. The tenant identifier is not your name, your email, or any pre-existing account identifier; it has no meaning outside our service.HedgyTrade uses Face ID / Touch ID (Apple’s LocalAuthentication framework) to unlock the App and to authorize sensitive actions such as releasing a signal to your broker.
We never receive your raw biometric data. Face ID and Touch ID processing happens entirely on your device, inside Apple’s Secure Enclave. The App receives only a yes/no answer from iOS (“the person who set this device up is here” or “not here”). Your face geometry, fingerprint template, and any biometric vectors stay on the device and are not transmitted to Terry Dynamics or to any third party.
Once you authenticate, the App receives a short-lived cryptographic capability token (a “macaroon”) that authorizes specific actions (e.g., “send chat,” “fetch portfolio”). These tokens are stored in the iOS Keychain, protected by a device-bound key. Keychain entries are encrypted by iOS and are accessible only to this App on this device.
Macaroons are scoped (they cannot do more than they were issued to do) and expire on a short rotation. Even if a macaroon were extracted from the device, it would lapse quickly and would not grant access to your broker, your funds, or any account outside the HedgyTrade service.
Each processor receives only the minimum data necessary for its function. We do not sell personal data to any party.
| Processor | Purpose | Data shared |
|---|---|---|
| Apple Push Notification service (APNs) | Deliver push notifications to your device | APNs device token, notification payload (signal summary) |
| Stripe (planned, when subscription launches) | Process subscription payments | Stripe handles billing data directly; we receive only a transaction reference |
| Polygon, Databento | Market data ingestion | No personal data shared; queries are anonymized |
| Schwab, TastyTrade, other broker adapters (future, per-user opt-in) | Send a signal you explicitly authorize to your broker | Order specification you confirmed; broker authentication is handled by the broker’s flow, not ours |
| AI model providers (Google, Anthropic, others — your model choice) | Generate Hedgy’s responses | Your conversation content, under the provider’s data processing terms; paid-tier APIs that exclude training are preferred where available |
| Telegram (optional, if you link Telegram) | Deliver signal messages to your Telegram chat | Your Telegram user ID, message content |
| Cloudflare | DNS, CDN, tunnel | Standard request metadata (IP, user agent) |
You can delete your account at any time from the App: Settings → Account → Delete Account. This triggers full deletion of your active conversation history, your tenant data, your stored APNs token, and any optional links (Telegram, broker auth). Deletion completes within 30 days.
If you cannot access the App, email [email protected] with the tenant identifier shown in the App’s Settings screen and we will action the deletion within 30 days of verifying the request.
Depending on where you live, you may have the right to:
California residents have additional rights under the CCPA/CPRA. EU/UK residents have additional rights under the GDPR/UK GDPR. To exercise any of these, email [email protected]; we respond within 30 days.
HedgyTrade is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If we learn that we have collected data from a child under 13, we will delete it. The App’s subject matter (financial market analysis) is intended for adult users; the App Store age rating is 4+ because there is no objectionable content, not because the App is suitable for children.
No system is perfectly secure. If you suspect a security incident affecting your account, email [email protected] immediately.
Personal data may be processed in the United States and other countries where our service providers operate. Where required, we use appropriate transfer mechanisms for cross-border data flows.
We may update this Privacy Policy. Material changes will be communicated at least 30 days before they take effect, via in-app notification and on this page. The “Last Updated” date at the top of the page reflects the most recent change.
Terry Dynamics
California, USA
Email: [email protected]
For California-specific inquiries, please write “CCPA Request” in the subject line.