Privacy Policy

Who is responsible for your data

The data controller is Finovo Sole proprietor (not a registered company), Vinohrady, Prague 2, Czech Republic, which operates Finovo. For anything about your data, email privacy@finovo.club.

What we collect

• Account details: name, email address, and your password in a scrambled (hashed) form we can't read.
• Profile: username, avatar or photo, bio, country, town or city, language, time zone and currency.
• Learning activity: lessons, answers, scores, XP, points, streaks, badges, certificates, drills and daily challenges.
• Practice account: simulated orders, positions and trades, and the notes you write on them. Those notes are private to you.
• Community: friends, friend requests, blocks, reports you make, and suggestions you send.
• Subscription and payments: plan, trial dates, payments, refunds and invoices. Card details are collected and stored by our payment provider, Stripe. We never see your full card number.
• Invites: your invite code, who joined with it, and the rewards earned.
• Emails we send you and whether they were delivered.
• Launch waitlist: if you leave your email on our coming-soon page, we store that address, when you joined, and the campaign link you arrived through (if any). You don't need an account for this.
• Technical data: IP address and browser details when you log in (for security and to show your active sessions), and error information.
• Cookies and similar technology: see the Cookie Policy. Analytics and marketing cookies are only used if you agree.

Why we use it, and our legal basis

• To provide Finovo and your subscription (performance of our contract with you): your account, lessons, progress, practice account, trade notes, friends, leaderboards, billing, and service emails such as receipts and trial reminders.
• To keep Finovo safe and working (our legitimate interests): security, preventing fraud and abuse of trials and invite rewards, fixing problems, and understanding how features are used so we can improve them. You can object at any time, and you can stop your activity being sent to analytics tools in Account, Privacy.
• With your consent: analytics and marketing cookies, and tips or product news by email. The launch email you ask for by joining the waitlist is also sent on this basis: we keep a waitlist address only until that email has been sent, then delete it, or sooner if you ask. You can withdraw consent at any time with the same ease you gave it.
• To meet legal obligations: keeping accounting and tax records, and responding to lawful requests.

Your public profile

Your username, avatar, level, points, streak, badges and course progress can be seen by other Finovo members, depending on your settings. You choose whether your profile is visible to everyone, friends only, or only you, whether your country flag is shown, and whether you appear on country and global leaderboards. Your email address, town or city, trade notes and billing details are never shown to other members.

Who we share data with

We use trusted service providers who process data on our instructions and under contract:

• Hosting: Vercel (website hosting and the database that runs behind it).
• File storage: Supabase, for profile photos people upload.
• Payments: Stripe, which also acts as an independent controller for its own legal and fraud-prevention duties.
• Email delivery: Resend.
• Product analytics: PostHog, only for people who haven't opted out, and for visitors only with analytics consent.
• Page analytics: Vercel Web Analytics, only with analytics consent. It counts page views without cookies and without any identifier that follows you between visits.
• Bot protection: Cloudflare Turnstile on sign-up and login forms.
• Market data: Twelve Data, for the prices shown in the practice account. We send it no personal data.

We may also share data with professional advisers, or with authorities where the law requires it. We don't sell your personal data.

International transfers

Some providers process data outside the European Economic Area, for example in the United States. Where that happens we rely on an adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or the European Commission's Standard Contractual Clauses, with extra safeguards where needed.

How long we keep data

• Account, profile, learning and community data: while your account is open.
• If you delete your account, we remove your personal data within 30 days, apart from what we must keep.
• Payment and invoice records: as long as accounting and tax laws require, usually between 5 and 10 years.
• Records of consent and legal acceptance: as long as needed to show we complied.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, and to receive it in a portable format. You can download a copy of your data at any time in Account, Privacy. Where we rely on consent, you can withdraw it at any time.

To use your rights, email privacy@finovo.club. We reply within one month. You also have the right to complain to a data protection authority, in particular Úfad pro ochranu osobních údajů (the Czech Office for Personal Data Protection), or the authority where you live.

Automated decisions

We don't make decisions about you that have legal or similarly significant effects based only on automated processing. Leaderboards and badges are calculated automatically from your activity.

Children

Finovo is for people aged 18 or over. If we learn that a younger person has an account, we'll close it.

Security

We protect data with encryption in transit, hashed passwords, access controls and regular reviews. No system is perfectly secure, so please use a strong, unique password.

Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it applies.

Version 2026-10-08.