Privacy policy.

1. Who we are

TradeInTune is operated from Australia. In this policy "we", "us" and "our" refer to TradeInTune. "You" means any visitor or account holder on tradeintune.com.

If you have questions about this policy or how we handle your data, email privacy@tradeintune.com.

2. What we collect

We collect only what we need to run the product:

• Account data. Email address, name, password hash, and country. If you sign in with Google, we receive your email, name, profile picture, and unique Google ID.
• Age. You must be at least 13 years old to use TradeInTune, and we do not knowingly serve users under 13. When you sign up on the web we ask your age to confirm this. If you are under 18, you need a parent or guardian's permission to use the service.
• Learning progress. Modules completed, drill answers, streaks, XP, time spent in the product.
• Payment data. Processed by Stripe. We never see or store your card number. We keep the last four digits and the transaction reference for receipts.
• Device and usage data. Browser type, IP address, pages visited, and session duration, collected through our product-analytics provider (PostHog) to understand how the product is used. We do not record your screen or replay your session, and we do not use advertising trackers.
• Support correspondence. Messages you send us through the help form or email.

3. How we use it

• Authenticate you and keep your account secure.
• Serve the curriculum, track progress, and tune the adaptive drill queue to your weak spots.
• Send transactional email (receipts, password resets, important service notices). You cannot opt out of these.
• Send product email (new modules, occasional educational content). You can opt out any time from any message footer.
• Process payments and prevent fraud.
• Diagnose bugs, improve the product, and measure what lessons work.
• Comply with legal obligations that apply to us.

We do not sell your personal data. We do not rent it. We do not share it with data brokers.

4. Who we share with

We share data only with service providers who help us run the product, and only with the minimum data they need:

• Stripe for payment processing.
• Google if you use Google sign-in.
• Email delivery provider for transactional and product email.
• Hosting and analytics providers for the website and product.

5. Profile & social features

TradeInTune includes optional social features: a public profile, friend search, a leaderboard, and a feed of milestones with comments and reactions from friends. By default, your display name, avatar, bio, streak, XP, lessons completed, and join date may be visible to other users and to anyone with your profile link, and your milestone activity may appear on the leaderboard, in friend search, and in the feed.

You can turn this off at any time in Settings → Privacy: going private removes you from the leaderboard, friend search, and the feed, while your own drills, streak, and XP keep working exactly as before. We never make your email address, phone number, or age visible to other users, private or not. Don't put anything in your bio you would not want a stranger to read.

6. Where your data lives and international transfers

Data is stored on servers inside the European Union and the United States, and our service providers may process it in other countries where they operate.

Where we transfer personal data out of the European Economic Area, the United Kingdom, or another region with data-transfer restrictions, we rely on an appropriate safeguard for that transfer — such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), or a transfer to a country that the relevant authority has decided provides an adequate level of protection. You can ask for a copy of the safeguard we rely on by emailing privacy@tradeintune.com.

7. How long we keep it

Active account data: for as long as your account exists. If you delete your account, we erase personal data within 30 days, except records we are legally required to keep (for example, tax invoices, which we retain for seven years).

8. Your rights

Under Australian Privacy Principles and, where applicable, GDPR:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion.
• Request a portable copy of your data.
• Object to processing or withdraw consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email privacy@tradeintune.com from the email address on your account. We reply within 14 days.

9. Cookies

We use first-party cookies for session management (keeping you signed in) and for privacy-respecting product analytics. We do not use advertising cookies. You can clear cookies at any time from your browser; clearing them will sign you out.

10. Security

Passwords are hashed with bcrypt. Data is encrypted in transit (TLS) and at rest on our provider infrastructure. We follow the principle of least privilege internally.

No system is unbreakable. If a security event affects your data, we will notify you and the relevant authority in line with our legal obligations.

11. Children

TradeInTune is not intended for children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child under 13 has signed up, email us and we will close the account and delete the data.

Users aged 13 to 17 need a parent or guardian's permission to use TradeInTune. Where local law requires a parent or guardian to consent to the processing of a minor's data — for example, users under 16 in parts of the EU and the UK — that consent must be given before the account is used.

If you are a parent or guardian. You can ask us to show you what data we hold about your child, correct it, delete it, or close the account entirely. Email support@tradeintune.com — either from the address on the account, or from your own address telling us who your child is — and we will act on it.

How we treat a minor's data. We collect no more from a 13-year-old than from anyone else, and we hold it to a higher standard: we never sell it, we never share it with data brokers, and we never use it to target advertising. TradeInTune carries no advertising and contains no advertising trackers, so no user — child or adult — is profiled for marketing.

For what TradeInTune is and is not, and for what we tell under-18s about trading real money, see our Disclaimer.

12. Changes to this policy

If we change this policy in a material way, we will notify you by email or by an in-product banner. Minor editorial updates are reflected in the "last updated" date at the top of this page.

13. Contact

TradeInTune. Australia.
privacy@tradeintune.com