# Privacy Policy — Playbook
**Last updated: 15 July 2026**
Playbook ("the app") is developed by **Ugam Labs**. It's an encrypted trading journal. This policy
explains exactly what the app collects, why, and what you can do about it. We've kept it plain — no
legalese padding.
**The one-line version: your trades never leave your phone.** The only thing we store is the profile
you fill in when you set the app up.
---
## 1. What we collect
### a) Information you give us
When you set up the app, you provide:
| Data | Why |
|---|---|
| **Name** | To greet you in the app. |
| **Email address** | To identify your account and contact you about data requests. |
| **Date of birth** | To confirm the app is being used by an adult. |
| **How often you trade, which markets, experience level, main goal** | To tailor the app to how you actually trade. |
### b) Technical information
- An **anonymous account ID** (a random identifier — see Section 2)
- Your **platform** (Android) and the **app version**
### c) What we do *not* collect
Playbook does **not** collect any of the following:
- **Your trades.** Entries, notes, P&L figures, tags and moods stay on your phone (Section 3).
- **Your voice notes.** Audio stays on your phone (Section 3).
- **Your PIN or security answer.** Stored only as irreversible hashes, on your phone.
- **Your backups.** We never receive them and cannot open them (Section 3).
- Location, contacts, photos, camera, or files
- Payment information
- Behavioural analytics, tracking profiles, or advertising identifiers
---
## 2. Where your data is stored
Your name, email, date of birth and trading answers are stored in **Google Firebase Cloud Firestore**,
a cloud database provided by Google. Data is sent over an encrypted HTTPS connection.
Your account is created using **Firebase Anonymous Authentication**. This gives you a random account
ID — it is **not** linked to your Google account, and it cannot be used to identify you outside the
app. You never create a password and you never sign in.
Firebase is operated by Google and subject to Google's own privacy practices:
<https://firebase.google.com/support/privacy>
Google, as our service provider, may also process technical connection data such as your IP address
in order to deliver the service.
---
## 3. Your trades never leave your phone
This is the whole point of the app, so we want to be exact about it.
- **Every journal entry** — the title, your notes, the P&L, tags and moods — is **encrypted on your
device** using AES-256-GCM. The encryption key is held in the **Android Keystore** and never leaves
your phone. We never receive your entries, and we could not read them if we did.
- **Voice notes** are recorded to the app's private storage on your device. They are never uploaded.
- **Your PIN and your security question answer** are stored only as irreversible hashes. We cannot
recover your PIN — that's why the app offers a security question instead.
- **Backups are yours.** If you create one, it is encrypted with a **password only you choose**, and
saved to a location **you** pick — for example your own Google Drive, Dropbox or OneDrive. It never
passes through us. **If you lose that password, nobody — including us — can open that file.**
Uninstalling the app deletes every entry from your phone, because that's the only place they ever were.
---
## 4. Permissions
| Permission | Why |
|---|---|
| **Microphone** | Only when you choose to record a voice note. The audio stays on your device. |
| **Internet** | To save your profile, and to let you write a backup to a cloud drive you pick. |
| **Biometrics** | To unlock the app. Your fingerprint or face data never leaves your phone and is never seen by us. |
---
## 5. Advertising
**Playbook does not display advertising**, and no advertising identifier is collected.
We have no plans to add ads. If that ever changed, we would update this policy and our Google Play
"Data safety" declaration **before** any ads went live, and note it in the app's release notes.
---
## 6. Sharing
**We do not sell or rent your personal data.** We do not share your name, email or profile with any
third party. The only processor involved is **Google Firebase**, which stores that data on our behalf.
Your trades are not shared with anyone, because we never have them in the first place.
---
## 7. Your choices and rights
- **Want your data deleted?** Open **Settings → Delete my data** in the app. This permanently erases
your profile from our database *and* wipes every entry, voice note and setting from your phone.
It's immediate and it's final.
- **Prefer to ask us?** Email us (below) with the email address you used in the app and we'll delete
your record and confirm once it's done.
- **Want to see your data?** Everything we hold about you is what you typed in during setup. Email us
and we'll send you a copy.
---
## 8. Data retention
We keep your profile for as long as you use the app. If you delete it in the app, or ask us to, we
remove it from Firestore. If you simply uninstall and never return, your profile record sits idle —
email us if you want it removed.
---
## 9. Children
Playbook is intended for adults who trade. It is **not directed at children under 13**, and we do not
knowingly collect data from them. If you believe a child has provided us with personal information,
contact us and we'll delete it.
---
## 10. Security
Data sent to Firebase travels over HTTPS and is stored with encryption at rest. Access to the
database is restricted by security rules so that you can only ever read or write your own record.
On your device, your journal is encrypted with AES-256-GCM, gated behind a PIN, and can be locked
further with biometrics and auto-lock.
No system is perfectly secure — but we collect so little, and keep your trades so firmly on your own
device, that there is very little to expose.
---
## 11. Changes to this policy
If we change what we collect, we will update this page and change the "Last updated" date above
**before** the change takes effect, and update our Google Play "Data safety" declaration to match.
Material changes will also be noted in the app's release notes.
---
## 12. Contact
Questions, data deletion requests, or anything else:
**Ugam Labs**
📧 **ugamlabs@gmail.com**