Privacy Policy for Kaptur

Effective Date: August 3, 2026 | Last Updated: August 3, 2026

1. Introduction

Kaptur ("we", "our", or "us") is committed to protecting your privacy and ensuring the absolute security of your financial data. This Privacy Policy explains our practices regarding your information when you use the Kaptur mobile application (the "App") and our official website kapturtracker.com (the "Website"). We built Kaptur with a fundamental, non-negotiable principle: Your Data, Your Phone. Kaptur operates under a strict "Offline-First" and "Zero-Knowledge" architecture. By using Kaptur, you agree to the terms outlined in this Privacy Policy.

2. The "Offline-First" Guarantee (No Data Collection)

Unlike traditional financial software or cloud-based trading journals, Kaptur does NOT collect, transmit, store, or process your personal data, financial information, trading receipts, or transaction history on any remote servers.

• No Cloud Storage: We do not own, operate, or rent servers to host your trading data.
• No Data Selling: Because we do not collect your data, it is mathematically impossible for us to sell, share, or monetize your trading history, PnL, or strategies with third parties, brokers, or advertisers.
• No Account Required: Kaptur does not require you to create an account, provide an email address, or verify your identity to use the core offline features of the App.

3. Local Processing: OCR and File Imports

Kaptur uses advanced Optical Character Recognition (OCR) technology and local parsing engines to extract financial data (such as tickers, entry prices, and PnL) from the trading receipts and files you provide.

• 100% On-Device Processing: All OCR processing and file parsing are executed entirely locally on your device's hardware.
• No Image Transmission: The images or screenshots you select for import are never uploaded to the cloud, sent to third-party APIs, or transmitted across the internet for processing.
• Broker File Imports: If you choose to import trading history using native broker files (such as XML or CSV formats from Interactive Brokers or others), the parsing and data extraction occur 100% locally on your device. We do not upload your financial documents to any external server.

4. Local Data Storage and Security

All data generated by your use of the App—including your trading journal entries, emotional tracking tags, extracted financial metrics, and attached images—is stored exclusively within your device's isolated internal storage (using secure local database structures).

• Device Security: The security of your data depends entirely on the security of your device. We strongly recommend securing your device with a strong passcode and utilizing biometric authentication.
• App Lock (Biometrics): If you enable the biometric lock feature within Kaptur, the App will use your device's native biometric APIs to restrict access. Kaptur does not access, read, or store your biometric templates; this process is securely handled by your device's operating system.
• Backups: You are solely responsible for backing up your data. If you choose to export your database, the resulting file is generated locally and placed in your device's storage.

5. Device Permissions

To provide its core functionalities, Kaptur requires certain local permissions on your device. We only request permissions that are strictly necessary:

• Photos/Media/Files (Storage): Required exclusively to allow you to select screenshots of your trading receipts for local OCR processing and to attach context charts to your journal entries.
• Camera: Required only if you choose to take live photos of your trading receipts for instant local OCR extraction. The camera feed is processed directly on your device and never transmitted over the internet.
• Notifications: Required to send local, on-device reminders (e.g., Discipline Streak alerts) generated directly by the App. These notifications are scheduled locally and do not rely on remote push notification servers.

6. Data Collected via Website

• Information Provided for Customer Support: If you contact us through the support form on our Website, we will collect your Name, Email Address, and the contents of your message. This data is used exclusively to respond to your inquiry and provide technical support. We use secure, privacy-compliant third-party services (Cloudflare and Mailtrap) to route these emails. We do not use this support data for marketing, and you may request its deletion at any time by emailing us.

7. Subscriptions and Payments (Google Play Billing)

If you choose to purchase "Kaptur PRO" (our premium subscription), the transaction is processed entirely by Google Play Billing.

• No Payment Data Collection: We do not collect, process, or have access to your credit card numbers, billing address, or bank details.
• Anonymous Tokens: We only receive an anonymous, encrypted purchase token from Google Play to verify your active subscription status locally on your device and unlock premium features.

8. Third-Party Analytics and Crash Reporting

To maintain our "Zero-Knowledge" standard, Kaptur does not include invasive third-party tracking SDKs (such as Facebook Pixel or cross-app advertising trackers). We may rely strictly on anonymized, aggregated crash reports provided natively by the Google Play Console (only if you have opted-in to share usage and diagnostics data with Google at the operating system level) to identify and fix critical bugs. This data contains no personally identifiable information or financial data.

9. Your Data Protection Rights (GDPR)

Although Kaptur is a Zero-Knowledge app and we do not possess your trading data, you maintain full rights over any communication data (like support emails) you send us. Under the General Data Protection Regulation (GDPR), you have the right to request access to, correction of, or deletion of your support communications. To exercise these rights, contact us at the email provided in the Contact section.

10. Children's Privacy

Kaptur is a financial tracking tool intended for adults. We do not knowingly market to or solicit information from children under the age of 18. Since we do not collect personal data, we do not collect personal data from minors.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or relevant laws. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy or by displaying a prominent notice within the App or Website.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our offline-first architecture, you can contact the Data Controller:

• Data Controller: Alexis Rodriguez Paret
• Location: Barcelona, Spain
• Email: [email protected]