Privacy Policy

Last updated: April 1, 2026

This Privacy Policy explains what information YOMI collects, how it is used, and how it is protected. By using the Service, you agree to the practices described here.

1. Information We Collect

We collect only what is necessary to operate the Service:

• Account data — username and hashed password (passwords are never stored in plain text)
• Trade data — trade entries, exits, notes, tags, images, and other journal content you create
• Exchange API keys — encrypted at rest using AES-256-GCM; used only to fetch your own trade history
• Session data — a session cookie to keep you logged in

2. How We Use Your Information

Your data is used solely to provide the Service to you. Specifically:

• To authenticate your account and maintain your session
• To store and display your trading journal
• To auto-import trades from connected exchanges on your behalf

We do not use your data for advertising, profiling, or any purpose beyond operating the Service.

3. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your trade data is private to your account and is never shared with other users or external services.

The only external services used are:

• Your connected exchanges (Binance, Bybit) — accessed only with your own API keys to fetch your trades
• Anthropic API — if you use the AI Reflect feature, trade notes are sent to generate a reflection (no data is stored by Anthropic beyond standard API logging)

4. Data Storage and Security

All data is stored on a private server. Exchange API keys are encrypted at rest with AES-256-GCM. Passwords are hashed with bcrypt and never stored in plain text. We take reasonable technical measures to protect your data, but no system is 100% secure.

5. Data Retention

Your data is retained for as long as your account is active. If you wish to delete your account and all associated data, contact us at youoweme200k@gmail.com and we will process your request.

6. Cookies

We use a single session cookie to keep you logged in. No tracking cookies or third-party analytics cookies are used.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us directly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests, contact us at youoweme200k@gmail.com.