This policy explains how Fynex Technology Pte. Ltd. (UEN 202625322Z), 60 Paya Lebar Road, #12-03, Paya Lebar Square, Singapore 409051 ("Fynex", "we", "us") collects, uses and protects personal data in the TraderPassport app and website. We comply with Singapore's Personal Data Protection Act 2012 (PDPA).
1. Data we collect
On your device
Your passport is kept on your iPhone in a file protected by iOS data protection. This includes trade history, statements you import, account details, your private trading journal (notes, setup tags, moods and screenshots) and your settings.
Your account and cloud backup
When you create an account we store your email address, or the Apple ID identifier and any email Apple shares if you use Sign in with Apple. While you are signed in, a backup of your passport is stored with your account so you can restore it on a new device. The backup includes your trades, accounts, settings and journal notes, but not identity document photos, selfies, proof of address or journal screenshots, which stay on your device.
Sent to us when you choose to
- Public passport: the fields you make public in Privacy settings (for example display name, photo, country, score, statistics and accounts), plus your handle and passport number, so that your public link works.
- Identity review: when you submit a verification step, the details for that step (such as email, phone, date of birth, nationality, address, document type and number, source of funds, PEP status) and any photos you attach (identity document, proof of address, selfie).
- Social and account reviews: the social profile you want checked, or evidence that a trading account is yours.
- Broker requests, offers and claims: the broker name, the message you send, the offers you claim and the access period you choose.
- Open to offers: if you turn it on, approved brokers, prop firms and funds can find your public passport and send you an access request.
- Leaderboards: if you opt in, your handle, Trader Score, country and markets are shown in public rankings.
- Verified Trader Panel: your application, broker reviews (ratings, written experience, recommendation), survey answers, points history, voucher requests and the voucher codes we send you.
- Invites and mentors: who invited you or whom you invited, and the mentors you add and their access period.
- Support messages: the topic, name, reply contact, handle and message you send through our contact form.
AI coach (optional)
If you turn on the AI coach and agree in the app, an anonymised summary of your recent trading habits (statistics such as win rate, trade sizes and timing, without your name, handle, account numbers or journal notes) is sent through Rork's AI service and the Vercel AI Gateway to Anthropic's Claude model to write tips. It is not used to identify you. You can turn the coach off at any time.
Live account connections
When you connect an MT4 or MT5 account live, your account number, server and read-only investor password are sent over an encrypted connection through our server to our data-connection provider, which reads balances and closed trades. We do not store the investor password; the provider keeps the connection active until you disconnect.
Technical data
Our hosting provider records standard request logs (such as IP address and time) for security and troubleshooting. We do not use advertising trackers, sell personal data, or track you across other apps or websites.
2. Why we use it
- To provide the Service: build and display your passport and your public page.
- To review the evidence you submit and issue or decline seals and stamps.
- To read your connected trading accounts.
- To pass your request to a broker when you ask us to, and to run offers, claims and Open to offers.
- To run the Verified Trader Panel: moderate reviews and surveys, publish approved reviews, keep your points balance and send vouchers.
- To run leaderboards, invites, mentor access and the AI coach when you use them.
- To keep your account and backup so you can sign in and restore your passport.
- To answer your support messages.
- To keep the Service secure, prevent fraud and meet legal obligations.
We rely on your consent, which you give when you submit data, and on our legitimate interest in running a secure service. You may withdraw consent at any time, which may mean we can no longer provide parts of the Service.
3. Who we share it with
- Cloudflare, Inc.: hosts our server and database.
- Supabase, Inc.: hosts sign-in accounts and passport backups.
- Apple: if you use Sign in with Apple.
- Rork, Vercel and Anthropic: process the anonymised AI coach summary when you use the coach.
- Our data-connection provider: a third-party service that reads live MT4/MT5 accounts on our behalf, bound by a contract to use the data only for that purpose. You can ask us for its name through Help & Support.
- Anyone with your public link: sees only the fields you made public.
- Brokers you contact or whose offers you claim: receive your request and passport access for the period you choose.
- Brokers, prop firms and funds: can see your public passport if you turn on Open to offers.
- The public: approved panel reviews (with your handle) and, if you opt in, your leaderboard entry.
- Mentors you add: read-only access to your progress until you revoke it.
- Authorities: where required by law.
Our providers process data on our instructions. Some of them process data outside Singapore. Where that happens we take steps to ensure a standard of protection comparable to the PDPA.
4. How long we keep it
- Document photos and selfies are deleted from our servers as soon as a reviewer makes a decision. We keep only the outcome (approved or declined), the date and the reviewer's note.
- Your account, backup, public passport, review outcomes, panel reviews, survey answers, points, claims, invites and mentor links are kept until you delete your account.
- Deleting your account in the app (More → Security → Delete account) erases your passport from your device, deletes your account, backup and public passport and all of the data above from our servers, and disconnects every live account.
- Support messages are kept for as long as needed to answer them and for our records.
- Server request logs are kept for a limited period for security.
5. Security
Data is sent over encrypted connections (HTTPS). Each passport is protected by a secret key generated on your device; only that device can change or delete it. Access to the review console is restricted to authorised reviewers. No system is completely secure, but we take reasonable measures to protect your data.
6. Your rights
Under the PDPA you may ask to access or correct your personal data and withdraw consent. You can view and edit most of your data directly in the app, change what is public in Privacy settings, and delete everything with Delete account. For other requests, use our contact form or write to our Data Protection Officer at the address below. We will respond within 30 days.
7. Age
The Service is for adults aged 18 or over. We do not knowingly collect data from anyone under 18.
8. Changes
We may update this policy. The effective date above will change, and we will tell you in the app about material changes.
9. Contact
Data Protection Officer
Fynex Technology Pte. Ltd.
60 Paya Lebar Road, #12-03, Paya Lebar Square, Singapore 409051
Contact form: Help & Support