HedgyTrade Privacy Policy

Effective date: November 5, 2026 · Last updated: November 5, 2026

1. Who we are

HedgyTrade is an app made for iPhone by Terry Dynamics, a company based in California. In this policy, "we" and "us" mean Terry Dynamics. "You" means the person who uses the app.

This policy explains what data the app collects, why we collect it, who else gets it, how long we keep it, and how you can delete it.

2. Hedgy explains markets. It does not advise or trade.

Hedgy is an AI assistant that reads market data and explains what it sees. Its reads are general and educational. Terry Dynamics is not a registered investment adviser or a broker. HedgyTrade does not give personal investment advice. It never places trades. It does not connect to any brokerage account, and it never holds or moves your money.

3. What we collect and why

Your account

Account ID. A random ID our server makes when you sign up. We use it to keep your chats, credits and settings together.
Email address. From email sign-up, or from Sign in with Apple (this may be Apple's private relay address). We use it to sign you in and to send account emails. These are codes to confirm your email or reset your password, and notices about your account's safety, such as a changed password, a sign-in method added or removed, or someone trying to use your email. We do not send marketing email. Copies of these emails stay in our email account (see section 8).
Name. Only if you use Sign in with Apple and choose to share your name. Apple sends it the first time you sign in. We keep it with your account. We do not show it or use it for anything.
Password. Only if you sign up with email. We store a scrambled form (an Argon2id hash), never the password itself.
Sign-in links and passkeys. The ID that Apple gives us for you, and the public part of any passkey you add, with its ID and a counter that helps spot copies. For Sign in with Apple we may also keep an encrypted token that lets us end the link with Apple when you delete your account. If you create a passkey, Apple keeps it on your iPhone, and in your iCloud Keychain if you use it, under Apple's terms. We only store its public part.
Consent record. When you agreed to let an AI company process your chats, which version of the notice you saw, and which AI companies it named. If you turn AI chat off, we record that too.

Your chats

Messages and answers. Every message you send and every answer Hedgy gives.
What Hedgy remembers. Notes Hedgy writes about how you like to work, your settings for Hedgy, and a record of the data lookups Hedgy ran for you, such as which stock and which data. Symbols you talk about are kept inside these records and your chats.
Hedgy's action log. A tamper-evident record of the actions Hedgy takes for you, such as the data lookups it runs. Each entry holds the time, the type of action, and a fingerprint (a hash) of the details, with your account ID. It holds no message text.

We use these to answer you and to remember your context from one chat to the next. To do that, Hedgy includes recent parts of your chats and its notes about you when it asks the AI model for an answer (see section 4).

We keep your chats on our server until you delete your account, even after they leave your screen. The app does not keep your chats on your phone after you close it, and clearing the chat screen does not delete anything on our server. You cannot delete single chats today.

Our server also passes your messages and Hedgy's answers through an internal queue. Today some copies there, including copies of Hedgy's answers, are kept with no time limit. Others are deleted after 7 days. When you delete your account, we delete your copies there right away.

Ticker search

When you type in the ticker search box, the app sends what you type to our server. Our server searches its own list of symbols. Your search is not sent to any other company. Like any web address the app calls, it can appear in our logs (see "Security and server logs" below).

Purchases, gift credits and credit use

Purchase records. For each credit pack you buy: the Apple transaction ID, the product, and the credits added. If Apple refunds a purchase, we record the refund.
Apple's purchase notices. When Apple tells our server about a refund, we record what happened: the transaction ID, the product, the type of notice, and the credits removed. Other notices from Apple are only noted, by type, in our app logs. If we cannot process a notice right away, we keep Apple's full notice. We do not delete these full notices on a schedule today.
Gift credits. If we add credits to your account as a gift, we record the amount, the date, and, if we give one, the reason.
Credit use. For each AI call made for you: the time, the AI company and model, the amount of text in and out, and what it cost us. For each message: the credits we charged, or that the charge was waived. These records hold no message text.

We use these to add the credits you paid for, take them back if Apple refunds you, show your balance, charge the right number of credits, and check our own costs.

Your device

Push token. If you allow notifications, Apple gives the app a token that lets us send notifications to your phone. We store it with the app version, the device type ("ios"), and when we first and last saw it.
Live Activity token. If you start a live price ticker on your Lock Screen or Dynamic Island, the app sends us the stock symbol, which price measure to show, and a token for that ticker. We hold these in the server's memory while the ticker runs, and we do not save the token. Our security log records that you started a ticker, and for which symbol, for up to 120 days.

Reports you send us

If you tap "Report" under one of Hedgy's answers, we keep which answer you reported, the reason you picked, and any note you write. If the report cannot be sent right away, the app keeps it on your phone and tries again later. A report stays open until we resolve it. We clear your note 30 days after we resolve the report. We delete the report record 120 days after we resolve it.

Security and server logs

Security log. Our server logs sign-ins, sessions and requests to keep your account safe. A row can hold your account ID, a scrambled form of your IP address, your device type (user agent), the feature you used, the web address it called (which can include a stock symbol), and the result. Rows about sign-ins, sign-ups and password resets can hold a masked form of the email typed, such as a***@g***.com. Rows for plain requests and failed sign-ins do not hold your account ID. We scramble the IP address with a key that changes every day and is never saved. We keep rows that hold network details for 30 days and other rows for 120 days.
Server request logs. Our web server also logs each request: your IP address, the country our network provider reports for it, your device type, your language setting if your phone sends it, and the web address requested. That address can include a stock symbol you asked about or searched for. These logs never hold your password or sign-in token. We use these logs to keep the service running and to stop abuse. We keep them for about 5 weeks today. Our main log store is limited by size, not by date, so when traffic is light it can keep them longer.
App logs. Our server also logs each message's account ID, time, AI model and size, so we can find problems. These logs never hold your messages. When an update to a Lock Screen ticker fails, they can hold the last 6 characters of that ticker's token. We keep app logs the same way as server request logs, about 5 weeks today.

Market data holds no data about you

Hedgy reads market data, such as index levels and options data, to answer you. Any market record we keep holds market numbers only. It holds nothing about you or any other user.

What we do not collect

Your phone number, home address, or any government ID.
Your card or bank details. Apple handles all payments.
Your brokerage login or account. The app does not connect to any brokerage.
Your contacts, photos, camera, microphone, location, or data from the Health app.
What you do in other apps or on websites.

The app has no ad tools, no analytics tools, and no crash-reporting tools inside it. We do not track you across other apps or websites. We do not sell your personal information. We do not share it for ads that follow you across apps or websites.

Do Not Track. Some browsers and phones can send a "Do Not Track" signal. We do not track you across other apps or websites, and we do not let other companies do so through our app or our website. So HedgyTrade works the same whether or not you send this signal.

4. The AI company that writes Hedgy's answers, and your consent

Hedgy's answers are written by AI models from Anthropic (Claude). Before your first chat, the app shows you a notice about this and asks you to agree. Hedgy cannot answer until you agree.

The notice in the app also names Google Gemini. Hedgy used Google's Gemini models to write its answers until October 31, 2026. Since then, Hedgy does not send your messages to Google.

What Anthropic receives. Your message, recent parts of your conversation, Hedgy's notes about you, your settings for Hedgy, and the market data Hedgy looked up. We do not send the name, email address or account ID on your account. If you write personal details in a message, those details are sent too, and Hedgy's notes can include them.

What Anthropic does with it. Anthropic processes this data for us, to write Hedgy's answers for you. Our contract with Anthropic does not let it use this data to train its AI models. Anthropic deletes it within 30 days in most cases. If Anthropic's safety systems flag a message as breaking its rules, Anthropic can keep that message for up to 2 years, and its safety scores for up to 7 years. It can also keep data longer when the law requires it.

Earlier chats. Chats that Hedgy answered before October 31, 2026 were sent to Google's Gemini models. Google may still hold copies of those earlier chats under its own terms.

How to withdraw your consent. Open Settings and turn off "AI chat." Chat stops on your phone at once, and our server records it as soon as your phone is online. After that, we send none of your new messages to the AI company. A message Hedgy is already answering when you turn chat off still finishes. To turn chat back on, you go through the consent screen again. You can also withdraw by deleting your account (section 9). Withdrawing does not delete copies the AI company already holds. Those follow its own terms.

5. Payments through Apple

You buy credits inside the app through Apple's In-App Purchase. Apple takes the payment and keeps your card and billing details. We never see them. The app sends our server Apple's signed record of your purchase. We check Apple's signature, then add the credits. If Apple refunds you, Apple tells us, and we remove those credits. Refund requests go to Apple. Apple's own privacy policy covers the data Apple keeps.

6. Who else receives data

We share only what each company needs to do its job for us.

Who	What they do for us	What they receive
Anthropic	Writes Hedgy's answers	See section 4
Apple	Sign in with Apple, In-App Purchase, push notifications, Live Activities and passkeys	What Apple needs to sign you in, process payments, deliver notifications and keep your passkeys
Massive (formerly Polygon.io), our main market-data vendor	Prices, options data and news	Stock symbols, dates and the data requested. Never your name, email, account ID or messages
Databento, a market-data vendor	Past prices and past options data	Stock symbols, dates and the data requested. Never your name, email, account ID or messages
The Federal Reserve Bank of St. Louis (FRED, a public data service)	Public economic data, such as interest rates	Requests for public data series. Never anything about you
Google (Google Workspace), our email provider	Sends our account emails and keeps copies of them in our mailbox	Your email address and the emails we send you
Cloudflare, our network and security provider	Carries all traffic between the app and our server	Everything the app sends and receives as it passes through, including chats, plus your IP address and device type

We may also share data when the law requires it, such as a valid court order.

7. How we protect your data

Traffic between the app and our network provider is encrypted (HTTPS).
The app keeps its sign-in tokens in the iPhone Keychain, on this device only.
We store passwords only as an Argon2id hash.
Face ID, Touch ID or your passcode, if you turn on the app lock, runs on your phone. We never receive your face data or passcode.
Each account's chats are stored in their own separate files on our server.
Each request to our server is checked against your signed sign-in token.
Our backup copies are not encrypted today (see section 8).

No system is perfectly secure. If a security breach exposes your personal data, we will tell you by email, as the law requires. If you think your account has a security problem, email [email protected] right away.

8. How long we keep data

Data	How long
Account, chats, Hedgy's notes, settings, consent record, push tokens	Until you delete your account
Hedgy's action log	No end date today. It stays after you delete your account
Messages in our internal queue	Some copies 7 days. Others, including copies of Hedgy's answers, with no time limit today. Deleted right away when you delete your account
Apple's full purchase notices	Kept only if we could not process a notice right away. No end date today
Security log rows with network details	30 days
Other security log rows	120 days
Server request logs and app logs	About 5 weeks today, set by log size, not by date
Report notes	30 days after we resolve the report
Report records	120 days after we resolve the report
Money records after you delete your account	Until the end of the fifth year after your last purchase, refund or credit use, about 5 to 6 years
Purchase link	No end date today
Deletion record (old account ID, date, reason)	No end date
Blocked-account record (scrambled sign-in ID and email)	No end date
Copies of account emails we sent you	No end date today
Backup copies (security log, push tokens, deletion records)	No end date today (see "Backups" below)
Copies held by Anthropic	Usually 30 days, longer if its safety systems flag a message (its terms)
Copies of earlier chats held by Google	Under Google's terms

Backups. We have kept backup copies of our security log, push tokens and deletion records on a second computer we own. These copies are not encrypted. We keep at most the 7 most recent copies, and an older copy is deleted only when a newer copy is made. Today the nightly copy is switched off, so the copies we already made have no end date. Your chats, Hedgy's notes and your money records are not in these backups. These backups also hold our own work files. They can include emails you send us, account details, and notes our team made while helping you. One older copy of our push-token list, from August 2026, also stays on our server. When you delete your account, we remove your entries from it.

9. Deleting your account

You can delete your account at any time in the app. Open Settings, go to the Account card, and tap Delete account. The screen shows your credit balance. Type DELETE to confirm. If you use Sign in with Apple, Apple asks you to confirm once more. No email or phone call is needed.

When you confirm, our server starts deleting your account right away. Once deletion has started, if a step fails, the server keeps retrying until it finishes. If the server cannot start, the app tells you, and you may need to sign in again before you try again. If a purchase is still being processed, the app asks you to wait a minute and try again.

We delete:

your chats, Hedgy's notes about you, and your settings
your messages and Hedgy's answers waiting in our internal queue
your email, name, password hash, sign-in links, passkeys and consent record
your push tokens, so we stop sending notifications
your security log entries (see "What stays" below)
your reports

Your credits. Unused credits, both paid credits and gift credits, are lost when you delete your account. We cannot refund them. To ask Apple about a refund for a purchase, visit reportaproblem.apple.com. The records of your credits stay with your money records (see below).

We also ask Apple to end the Sign in with Apple link. If you cancel Apple's confirm step, the app shows you how to end the link yourself in iPhone Settings.

What stays after you delete, and why

Money records. We keep a record of your purchases, gift credit grants, the credits each message used, refunds, and the Apple transaction IDs, for tax and refund needs. We keep them until the end of the fifth year after the year of your last purchase, refund or credit use. That is about 5 to 6 years. These records do not include your name, email or chats. They are tied only to your old random account ID. We have a tool that deletes them after that period. The first records reach that date on January 1, 2032.
Purchase link. A random token that links your Apple purchases to your account. We keep it with no end date today.
A deletion record. Your old account ID, the date, and the reason for deletion. This stops the ID from being used again. We keep it with no end date.
Security log entries. A short record that your account was deleted, with no IP address, kept up to 120 days. If an old copy of the app keeps calling our server after you delete, those calls are logged with your old account ID for up to 120 days. Rows that hold a masked form of your email but no account ID are not removed when you delete. They are deleted within 120 days. Our audit logs are append-only, which means rows are never edited. When we remove your entries, a placeholder with no account ID, IP address or details stays in their place so the log can still be checked for tampering.
Audit records of Hedgy's work. Hedgy keeps a tamper-evident record of the actions it took for your account, such as the data lookups it ran. Each entry holds the time, the type of action, and a fingerprint (a hash) of the details. It does not hold your messages or Hedgy's answers. It does still hold your old account ID. We keep these records so we can check that our records were not changed and look into security problems. We keep them with no end date today.
Blocked accounts. If we blocked your account for breaking our Terms, we keep a scrambled (hashed) copy of your sign-in ID and verified email so you cannot sign up again. We keep it with no end date.
Backups. Copies of your security log entries and push tokens can stay in our backups (see "Backups" in section 8).
Server and app logs. Request logs and app logs are deleted after about 5 weeks today (see section 3).
Copies of our emails. Copies of the account emails we sent you stay in our Google Workspace mailbox. We do not delete them on a schedule today.
AI company copies. Copies held by Anthropic follow its own terms (see section 4). So do copies of earlier chats held by Google.
Apple's records. Apple keeps its own records of your purchases and sign-ins.

If you stop using Sign in with Apple. If you stop using Sign in with Apple for HedgyTrade, or delete your Apple ID, Apple can tell us. When it does, we sign you out and end the Apple link. Your HedgyTrade account and credits stay. To delete them, use Delete account in the app. If Apple was your only way to sign in, email us (see below).

If you cannot open the app, email [email protected] from the email on your account. Today we can only delete an account from inside the app. We will reply and help you get back into the app so you can delete your account there.

10. Your choices and rights

Delete. Delete your account in the app at any time (section 9).
Turn off AI chat. Use the "AI chat" switch in Settings (section 4).
Notifications. Turn notifications off in iPhone Settings at any time.
Ask for a copy or a fix. Email us to ask for a copy of the data we hold about you, or to fix data that is wrong. The app has no export button, so we handle these requests by hand and answer by email within 45 days.

We will not treat you differently for using any of these rights.

11. Age

HedgyTrade is about trading and is for adults only. You must be at least 18 years old to use it. We do not knowingly collect data from anyone under 18. If we learn that someone under 18 has an account, we will block it from chatting right away. Today we can delete an account only from inside the app, so we will also ask that person to delete it there. If you think a child has given us personal data, email [email protected].

12. Where your data is processed

HedgyTrade is offered only in the United States. Our servers and our backup computer are in the United States. The companies in section 6 may process data in the United States or in other countries where they work.

13. Changes to this policy

We may update this policy. If a change is important, we will tell you in the app or on this page before it takes effect. The date at the top shows the latest version.

14. Contact us

Terry Dynamics
California, USA
Email: [email protected]