Privacy Policy

Effective date: October 6, 2026
App: PipLock AI (com.piplock.piplock_ai)
Contact: support.piplock@gmail.com

1. Data We Collect

1.1 Account Data

• Email address — used for authentication (Supabase Auth)
• User ID — anonymous identifier linked to your account

1.2 App Usage Data

• Trading rules and challenge settings — profit targets, daily loss limits, drawdown limits you configure
• AI usage counters — number of AI plan generations and chat messages used per day (for rate limiting only)
• Subscription tier — whether you are on Trial or Pro plan (managed via RevenueCat)

1.3 Device Data

• Push notification token (FCM) — used to send market alerts and challenge reminders
• Accessibility data (only if you enable Screen Reading) — PipLock detects the foreground app package to recognize supported broker apps. While one is open, visible accessibility text is processed to extract balance, equity, floating profit/loss, margin, open-position count, daily trade count, and an account number if visible. Numeric snapshots are stored in the app's private local storage and used on-device to evaluate your rules and update the dashboard. This Accessibility Service does not transmit screen text or extracted broker values to PipLock servers or third parties.

1.4 Data We Do NOT Collect

• Payment card numbers (handled by Google Play / RevenueCat)
• Broker account credentials
• Trading history or account statements
• We do not sell your data to third parties

2. How We Use Your Data

3. Third-Party Services

4. Accessibility Service

PipLock AI is not an accessibility tool for people with disabilities. If you choose Screen Reading and affirmatively consent, Android's Accessibility Service checks the foreground app package to recognize supported broker apps (for example MetaTrader 4/5 and cTrader). While a supported broker is open, it reads visible accessibility text and fields to extract balance, equity, floating profit/loss, margin, open-position count, daily trade count, and an account number if shown. It uses these values on-device to evaluate your configured risk limits, update the dashboard, and show or dismiss PipLock protection and warning overlays.

The service passes extracted values only to PipLock components on the device and stores numeric snapshots in the app's private local storage. It does not transmit screen text or extracted financial values to PipLock servers or third parties. During an active Killswitch lockdown, it intercepts Back and Recents key presses to enforce the temporary lock. It does not take screenshots, record keystrokes, or read passwords.

You can decline this permission and use other broker connection methods. You can disable Accessibility Service at any time in Android Accessibility settings; Screen Reading monitoring and its related overlays will then stop.

5. System Alert Window (Overlay Permission)

PipLock AI requires the "Display over other apps" permission to show the Killswitch overlay on top of your broker app. This overlay is displayed locally on your device and does not transmit any data.

6. Data Retention

• Account data is retained as long as your account is active
• If you delete your account, all personal data is deleted within 30 days
• AI usage counters are reset daily and permanently deleted after 90 days

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to access, correct, delete, and port your personal data. To exercise these rights, contact: support.piplock@gmail.com

8. Children

PipLock AI is not directed at children under 18. We do not knowingly collect data from minors.

9. Contact

For privacy questions or data requests: support.piplock@gmail.com