Privacy policy

1. Who we are

NexGenFX Journal ("the journal", "we", "us") is a trading journal run by NexGenFX in Singapore, at nexgenfxjournal.com. For anything about your data, email nexgenfxx@gmail.com or message @NexGenFXadmin on Telegram. We follow Singapore's Personal Data Protection Act 2012 (PDPA).

2. What stays on your device

Everything you enter in the journal is saved in your browser's storage on that device first: trades, notes, strategies, setups, screenshots, settings, goals and your balance. Without an account, it never leaves your device unless you export it, save a backup file, or back it up to Google Drive yourself.

Reading trades from an MT5 screenshot, importing an ATAS or statement file, and making PDF reports and share images all happen on your device. Those files are not uploaded to us.

3. What we collect when you sign in

An account is optional. If you create one, we store:

• Account details: your email address and how you sign in (email and password, or Google). Passwords are stored as a secure hash by our database provider, and we can't read them. With Google sign-in we receive your name, email address and profile picture from Google, and we only use them to create and show your account.
• Your plan: your plan (Free, Pro or Ultimate), any invite code you used, a free trial if you started one, and when each ends.
• Payments, if you buy a plan: your Stripe customer ID, which plan and billing period you chose, its status and renewal date. Stripe keeps your card and billing details, and we never see your full card number.
• Your synced journal (Pro and Ultimate): a copy of your journal records, so the same journal shows on every device you sign in on.
• Cloud screenshots (Pro and Ultimate): a smaller copy of each trade screenshot, up to 250 MB per account. The full-size image stays on the device you added it on.
• Coaching, if you use it: who you share your journal with, comments on trades and when you've read them. For coaching materials, we also record that you accepted the materials agreement and which files you opened and when. This protects the coach's materials.

4. Sharing your journal with a coach

You decide whether to share your journal with a coach. If you do, that coach can read your journal (trades, setups seen, screenshots, balance and P&L) and leave comments on your trades. They can't change anything. You can stop sharing at any time from the journal. Nobody else can see your journal.

5. Google sign-in and Google Drive

Google sign-in is only used to sign you in. Google Drive backup is optional. It uses Google's app data folder permission (drive.appdata), which lets the journal save and read only its own backup file in a hidden folder of your Drive. The journal can't see, open or change any of your other Drive files. The backup goes straight from your device to your Drive, and we don't keep a copy of it.

NexGenFX Journal's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for ads, we don't sell it, and we don't use it to train AI models. People can't read it unless you ask us for help, it's needed for security, or the law requires it.

You can remove the journal's access at any time in your Google account permissions.

6. How we use your data

• To run the journal: sign you in, sync your journal, store your screenshots and show your plan.
• To run coaching between you and your coach, when you choose to share.
• To send account emails, such as confirming your email and resetting your password.
• To keep the service safe and fix problems.

We don't use your trades for advertising and we don't sell or rent your data. We don't look through your journal unless you ask us for help with it.

7. Services we use

We use a few trusted providers to run the journal. Each one only gets what it needs:

• Supabase (database, sign-in and screenshot storage, hosted in Singapore): your account, plan, synced journal and cloud screenshots.
• Netlify (hosts the website): standard server logs such as your IP address and browser, used to deliver and protect the site.
• Stripe (payments): your email, the plan you buy and your payment details, to take payments and send receipts. See Stripe's privacy policy.
• Google: Google sign-in, your own Google Drive backup if you turn it on, our account emails, and the website fonts.
• TradingView: the live charts, ticker, news and economic calendar on the Markets and Calendar pages are TradingView widgets. They load from TradingView and follow TradingView's privacy policy, which may include their own cookies.
• Frankfurter: exchange rates for the currency converter. Only the currencies are requested, not your data.
• Your browser's voice recognition: if you log a trade by voice, your browser turns speech into text. Chrome and Android send the audio to Google, and Safari and iOS use Apple. The journal only receives the text.

Some of these providers may process data outside Singapore. Where they do, we rely on their protections to keep it to a standard comparable to the PDPA.

8. Cookies and tracking

We don't use analytics, advertising or tracking cookies. The journal uses your browser's storage to save your journal and keep you signed in. The TradingView widgets described above may set their own cookies when you open those pages.

9. How long we keep it

We keep your account and synced data while your account is open. If you delete synced data in the journal, it is removed from your account too. If you ask us to delete your account, we delete your account, synced journal, cloud screenshots and coaching records within 30 days. Data on your own device stays there until you reset the journal or clear your browser data.

10. Your choices and rights

• Use it without an account. Everything stays on your device.
• Get a copy. Export your trades to CSV from the Trade Journal, or save a full backup file from Account Settings → Backup & Restore, at any time.
• Correct it. Edit or delete any trade or note in the journal.
• Delete your account. Email nexgenfxx@gmail.com from your account's email address and we'll delete it.
• Ask or complain. Contact us first. You can also contact Singapore's Personal Data Protection Commission.

11. Security

Connections are encrypted (HTTPS). Your synced data is protected by database rules, so only you (and a coach you share with) can read it. Cloud screenshots sit in private storage. No system is perfectly secure, so keep your password private and keep a backup of your journal.

12. Children

The journal is for adults trading their own accounts. It's not meant for anyone under 18.

13. Payments

Paid plans are handled by Stripe on Stripe's own secure pages. The journal never receives your card details. We keep a record of your subscription (plan, status, renewal date) so the right features switch on, and Stripe keeps invoices and payment records as the law requires.

14. Changes to this policy

If we change this policy, we'll update the date at the top. For important changes we'll also tell you in the journal.