This Privacy Policy explains what information Mr Quant collects, why we collect it, how we use it, with whom we share it, and the choices you have. Compliant with Apple’s App Store Review Guideline 5.1 (Data Collection and Storage), Google Play’s User Data policy, the EU GDPR, the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).
If you do not agree with this policy, please do not use Mr Quant.
Who we are
Mr Quant is an AI-powered trading analysis assistant available as a mobile application on iOS and Android, and through related web surfaces. The app helps users build trading strategies, analyze charts, share trade analyses in a community feed, and review trade outcomes.
The data controller for the personal data described in this policy is the operator of Mr Quant, reachable at contact@mrquant.ai.
Summary — at a glance
| Category | Examples | Purpose | Linked to you? |
|---|---|---|---|
| Account data | Name, email, hashed password, verification status | Create and secure your account | Yes |
| Authentication data | Session tokens, sign-in timestamps, device info from auth | Keep you signed in, prevent abuse | Yes |
| User content | Chart images, analyses, strategies, AI conversations, community posts | Provide the core product features | No |
| Trading data you provide | Symbols, markets, trade outcomes, reviews, notes | Run analyses and feedback loops | No |
| Photos you choose to upload | Images you select from your library or camera | Chart and trade analysis | No |
| Device and locale | OS, app version, language, time zone | Localization, compatibility, debugging | Pseudonymous |
| Product analytics | Anonymous, aggregated usage events via Aptabase | Understand usage, fix bugs | No (anonymous) |
| Diagnostics | Crash logs, error traces | Diagnose and fix issues | Pseudonymous |
We do not:
- sell your personal information,
- share your personal information with third-party advertisers,
- use your content to train third-party AI models,
- collect precise geolocation,
- access your contacts, microphone, calendar, health data, or background location.
Information we collect
3.1 Information you provide directly
Account information. When you sign up we collect your name, email address, and a password. Passwords are never stored in plain text — they are stored in a securely hashed form. You may also set an optional profile image.
Email verification and account recovery. We send transactional emails (verification, password reset, security alerts). We log the fact that a verification or reset was requested, the timestamp, and whether it was completed.
User content.
- Chart images and trade screenshots you upload for AI analysis.
- Trading strategies and strategy drafts you build, including versions, parameters, and the natural-language descriptions you author or refine through the strategy editor.
- Conversations with the AI assistant, including the messages you send, the model’s responses, and contextual information attached to the conversation.
- Trade analyses, including the symbol, market, the pinned strategy version, generated outputs, and any trade outcome and trade review you log after the fact.
- Community content — posts (trade analyses or discussions), captions, titles, bodies, attached image references, comments, reactions, and reports you submit.
Reports and moderation. If you report a community post or comment, we store your user ID as the reporter, the content reported, and any reason you provide.
3.2 Photo library and camera access
Mr Quant requests access to your photo library and/or camera only when you choose to upload an image — for example, attaching a chart screenshot to an analysis or community post.
- We only receive the specific images you select. We never silently scan your library.
- Uploaded images are stored on our servers and used to render the analysis or community post you created.
- You can delete images at any time by deleting the analysis or community post they belong to (see Section 9).
You can revoke photo or camera access at any time in your device’s system settings.
3.3 Information collected automatically
Authentication and session data. When you sign in we create a session so we can keep you signed in and detect suspicious activity. We record the sign-in time, the last time the session was active, and, where relevant, the device type and IP address. On your device, the session token is held in the operating system’s secure storage area.
Device and environment metadata. We collect non-identifying technical data such as app version, operating system, device model class, language, locale, and time zone. This is used for compatibility, localization, and debugging.
Product analytics — Aptabase. We use Aptabase (aptabase.com) for privacy-friendly product analytics. Aptabase is designed to be anonymous and GDPR-friendly: it does not use cookies, does not collect IP addresses or persistent identifiers, and does not build user profiles. We use it to count events such as “screen viewed”, “analysis created”, or “error occurred” so we can understand which features are used and where the app is breaking. Because Aptabase data is anonymous and aggregated, it is not linked to your account.
Crash and error diagnostics. When the app crashes or hits an unexpected error, we may log a stack trace and minimal context (app version, OS, route) to help us fix the bug. We never include the contents of your messages, analyses, or images in error logs.
3.4 Information we do NOT collect
- We do not collect precise geolocation.
- We do not access your microphone, contacts, calendar, health data, motion sensors, or SMS.
- We do not track you across other companies’ apps or websites.
- We do not use third-party advertising SDKs.
How we use your information
We use the information we collect to:
- Provide the service — authenticate you, run analyses on the charts you upload, generate AI responses, save your strategies and conversations, and power the community feed.
- Personalize your experience — remember your selected default strategy, language preference, and UI state.
- Communicate with you — send account, security, and transactional emails (verification, password reset, important service changes). We do not send marketing emails unless you opt in.
- Keep the service safe — detect and prevent abuse, spam, fraud, and violations of our terms; enforce rate limits; suspend or ban accounts where necessary.
- Improve the product — analyze anonymous, aggregated usage via Aptabase; review crash diagnostics; reproduce and fix bugs.
- Comply with the law — respond to lawful requests, enforce our terms, and protect our rights.
We will not use your personal information for materially different purposes without notifying you and, where required, obtaining your consent.
Legal bases (GDPR / UK GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and operating your account; delivering the features you ask for | Performance of a contract (Art. 6(1)(b)) |
| Security, fraud prevention, abuse detection, transactional communications | Legitimate interests (Art. 6(1)(f)) |
| Product analytics via Aptabase | Legitimate interests — Aptabase processes only anonymous, aggregated data and does not enable identification of individuals |
| Responding to legal requests, complying with law | Legal obligation (Art. 6(1)(c)) |
| Any future processing that requires consent (e.g., marketing emails) | Consent (Art. 6(1)(a)) — you can withdraw at any time |
You have the right to object to processing based on legitimate interests by contacting us.
AI processing and model training
Mr Quant uses third-party AI providers to power chart analysis and the strategy assistant. When you submit content for AI analysis, the text and chart image you attached are sent to the AI provider to generate a response.
- Your content is not used to train the provider’s AI models. We rely on the provider’s contractual commitment to this effect.
- The provider may briefly retain submitted content for abuse monitoring, as described in their own policies.
- We do not train our own AI models on your private content. We may use anonymized, aggregated patterns to improve the product.
International data transfers
Mr Quant is operated from the European Union. Some of our service providers are located in the United States or operate globally. Where personal data is transferred outside the EEA/UK to a country that does not have an adequacy decision, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (and the UK addendum) with those providers.
Data retention and deletion
We keep your personal information for as long as your account is active or as needed to provide the service.
- Account data — retained until you delete your account.
- Strategies, analyses, conversations — retained until you delete them or delete your account. When you delete this kind of content it is removed from view immediately and purged from backups within a reasonable timeframe.
- Community posts, comments, reactions — retained until you delete them or delete your account.
- Session and auth logs — typically retained for up to 12 months for security and abuse-prevention purposes.
- Email delivery and verification logs — retained for up to 12 months.
- Diagnostics and crash logs — retained for up to 90 days.
- Aptabase analytics — anonymous; retained per Aptabase’s retention defaults; cannot be traced back to you.
- Backups — encrypted backups roll off on a routine schedule; deleted data is purged from backups within 30 days.
Account and data deletion
You can request deletion of your account and personal data at any time:
- In-app: Settings → Account → Delete account.
- By email: use our account deletion request page
We will process the request within 30 days. Some information may be retained where required by law (e.g., tax records, fraud prevention).
Your rights
Depending on where you live, you may have the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Rectification — ask us to correct inaccurate or incomplete information.
- Erasure (“right to be forgotten”) — ask us to delete your personal information.
- Restriction — ask us to restrict processing in certain circumstances.
- Portability — request your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests, including profiling.
- Withdraw consent — where we rely on consent, you can withdraw it at any time.
- Complain to a supervisory authority — EEA users can lodge a complaint with their local data protection authority; UK users with the ICO.
California residents (CCPA/CPRA): you have the right to know, delete, correct, and limit the use of sensitive personal information, and the right not to receive discriminatory treatment for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
To exercise any of these rights, email contact@mrquant.ai. We may need to verify your identity before responding. We will reply within the timeframes required by applicable law (typically 30 days).
Security
We take security seriously and use reasonable technical and organizational measures to protect your information, including:
- Encryption in transit — communication between the app and our servers is encrypted.
- Encryption at rest — your data is stored on encrypted infrastructure.
- Password protection — passwords are stored in a securely hashed form; we never see your password.
- Secure on-device storage — your sign-in token is held in the operating system’s secure storage area on your device.
- Restricted access — only authorized personnel can access production systems, and access is logged.
- Abuse prevention — we use rate limiting and other safeguards to deter brute-force attacks and abuse.
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately.
Children’s privacy
Mr Quant is not directed to children under 16 and is not intended for use by minors. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact contact@mrquant.ai and we will delete it.
Push notifications
If you enable push notifications, we will store the notification identifier your device provides so we can deliver notifications about activity relevant to you (for example, replies to your community posts, or completion of an analysis). You can disable push notifications at any time in your device’s settings or within the app.
Third-party links and content
Mr Quant may display references to third-party services or link out to external sites (e.g., a news event source). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.
Important — not financial advice
Mr Quant is a tool to help you analyze markets and develop your own trading strategies. It is not investment, financial, tax, or legal advice. Any analysis, signal, or strategy output is informational only and is not a recommendation to buy, sell, or hold any asset. Trading involves substantial risk; you are solely responsible for your decisions.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top. If the changes are material, we will notify you in-app or by email before they take effect. Continued use of Mr Quant after changes take effect constitutes acceptance of the updated policy.
Contact us
Questions, requests, or complaints about this Privacy Policy or our handling of your personal information:
Email: contact@mrquant.ai
We aim to respond within 7 business days.
© 2026 Mr Quant. All rights reserved.