Privacy Policy

> __Risk warning.__ Trading (forex, gold, indices, crypto, commodities) involves a high level of risk and is not suitable for all investors. Leverage can magnify both gains and losses, and you may lose all or part of your capital. Never trade with money you cannot afford to lose. Simulated performance in BTHR Replay in no way guarantees future results in real trading.

1 – At a glance

---------------

The BTHR Replay simulator runs entirely on your device: your sessions, trades, drawings, indicators and settings are stored __only on your device__ (Room database + encrypted preferences). The publisher operates __no servers__ and sells __no data__.

The app shows advertising through __Google AdMob__ and its mediation partners (declared in the `app-ads.txt` file). These ad providers may collect certain technical and advertising data on your device, described in the Advertising section.

Market data is downloaded from `raw.githubusercontent.com` (GitHub/Microsoft): your IP address may be visible to GitHub during these downloads. An internet connection is therefore required to download data and to show ads; replay and analysis then work offline.

2 – Data processed by the publisher (BTHR)

------------------------------------------

The publisher does not collect, transmit or store any personal data on its servers: it has none.

Staying __only on your device__:

- Backtest sessions (name, capital, settings, trades, capital events).

- Drawings, indicators, themes/layouts, language and display preferences.

- PIN: only a salted hash (PBKDF2-HMAC-SHA256, 210,000 iterations) is kept; biometrics are handled by Android and never leave the device.

- Local ad rewards (session/layout slots, temporary Pro access, ad-free period).

- Cached market-data files.

__Deletion:__ uninstall the app to erase everything. CSV/image exports that __you__ voluntarily share leave the app through your own apps (email, messaging, gallery).

3 – Legal basis for processing

------------------------------

- __Consent__ (GDPR Article 6.1.a): personalised advertising and the advertising ID, collected through the Google UMP consent screen in the EEA and the UK.

- __Legitimate interest__ (Article 6.1.f): app security, fraud prevention and proper operation of the service.

- __Performance of the requested service__: downloading the market data you request.

4 – Advertising: Google AdMob and partners

------------------------------------------

The app shows banners, frequency-capped interstitials and rewarded videos: an extra session slot, 24h Pro tools, and __1h banner-free__ up to twice a day (interstitials keep showing).

Through the Google AdMob SDK and its mediation partners, the following may be collected and shared:

- Android advertising ID (AAID), IP address, device/OS/language info, performance and diagnostic data.

- Ad interactions (impressions, clicks, rewarded completions) for delivery, measurement, fraud prevention and, where consented, personalisation.

- Approximate location derived from IP (no GPS: the app requests no location permission).

__Your choices:__

- In the EEA and the UK, a consent screen (Google UMP) is shown on first launch. You can change your choices anytime in the app: Settings, then Ad choices.

- You can also reset or delete your AAID in Android Settings, Privacy, Ads, and manage personalisation at [myadcenter.google.com](https://myadcenter.google.com).

- Authorised sellers file: `https://ubf975c4a.app-ads-txt.com/app-ads.txt`

__Learn more:__ AdMob rules and Google privacy ([policies.google.com/privacy](https://policies.google.com/privacy) and [support.google.com/admob/answer/6128543](https://support.google.com/admob/answer/6128543)).

5 – Network downloads

---------------------

- Market data and economic calendar: `https://raw.githubusercontent.com/...` over HTTPS. Only standard download requests are issued; GitHub/Microsoft may log technical data (IP, user-agent) under their own policy.

- No other network transfer to the publisher.

6 – Android permissions explained

---------------------------------

- `INTERNET` and `ACCESS_NETWORK_STATE`: download market data and load advertising.

- `POST_NOTIFICATIONS` (Android 13+): notify export completion. Deniable without impact.

- `USE_BIOMETRIC`: fingerprint unlock (biometric data handled by Android, never collected).

- `com.google.android.gms.permission.AD_ID`: access to the advertising ID for the ad provider.

Selecting an image for a suggestion uses the __Android Photo Picker__, which requires __no storage permission__.

7 – Sharing at your initiative

------------------------------

- App sharing, feature suggestions by email (`contact.bthr@gmail.com` as recipient), CSV/image exports: you choose the destination app; content flows through your services, never through the publisher.

- Telegram: `@bthr_Replay` (external link).

8 – Children

------------

The app is an educational simulator with __no real money__, no real winnings and __no financial advice__. It is not directed to children under 13 (or the local minimum age). Ad providers may apply their own age restrictions.

9 – Security

------------

On-device encryption (EncryptedSharedPreferences), salted hashed PIN, auto-lock, HTTPS only, Android backup disabled (`allowBackup=false`). No method is foolproof: protect access to your device.

10 – Data retention

-------------------

- Local data (sessions, trades, drawings, settings): kept until you delete the session in the app or until you uninstall.

- Advertising data: retained by the ad providers under their own policies (see the links in the Advertising section).

- No data is retained by the publisher, as it operates no server.

11 – International transfers

----------------------------

Advertising partners (Google and, where applicable, their processors) may process data outside the European Economic Area, in particular in the United States. Such transfers rely on the European Commission's standard contractual clauses and/or the EU–US Data Privacy Framework.

12 – Your rights (GDPR and applicable laws)

-------------------------------------------

Access, rectification, erasure, restriction, objection and portability: since everything is local, exercise them directly in the app (delete sessions) or by uninstalling. For any request: __contact.bthr@gmail.com__ (reply within 30 days). You may complain to your national authority (for example the CNIL in France). For advertising data, also contact Google via the links above.

13 – California residents (CCPA/CPRA)

-------------------------------------

The publisher does not sell or share your personal information within the meaning of the CCPA/CPRA, since it collects no personal data. Advertising partners may nonetheless process identifiers for behavioural advertising: you can object through the app and Android settings described above.

14 – Financial and risk disclaimer

----------------------------------

BTHR Replay is an educational backtesting and replay tool. __No real trading, no real money, no investment advice.__ Simulated performance does not predict future results.

__Real trading involves major risks:__

- Volatile, unpredictable markets (forex, gold XAUUSD, indices, crypto, oil): prices can move sharply.

- Leverage: it multiplies potential gains but also losses, which may exceed the initial deposit depending on the broker.

- Risk of total loss of capital, counterparty (broker) risk and technical risk (network outage, slippage, widened spreads).

- No strategy, indicator or score (win rate, profit factor, Sharpe) guarantees future profits.

- Only trade once trained, with dedicated risk capital, and consult a licensed financial adviser if needed. If facing addiction or financial difficulty, contact a local support organisation.

15 – Changes

------------

Any update will be posted on this page with its date. For material changes (new provider, new data), the app and Play listing will be updated.

16 – Contact

------------

__BTHR__ — contact.bthr@gmail.com — App: BTHR Replay (`com.bthr.backtest`).