Privacy Notice

AmpliAlpha, Inc. operates NoobTrade. This notice describes information used for the NoobTrade website and iPhone/iPad app, including optional third-party sign-in when enabled. For privacy questions, contact contact@amplialpha.com. This notice does not cover a separate brokerage account or another company's website.

1. Account and sign-in information

For email-password accounts, we store a display name or username, email address, account identifier, account status, account timestamps, selected risk preference and a password hash. Passwords are hashed, not stored as readable passwords. Verification and password-reset codes are time-limited and stored in hashed form.

Where enabled, if you choose Google, Apple or Facebook sign-in, we receive the provider's identifier for your account and an email address when provided. We use the email prefix as your initial display username. Apple may supply a private relay address instead of your personal email. We do not ask for your provider password, mailbox contents, contacts, posts or friends list. Facebook sign-in requests its basic profile/email permissions; our account lookup uses only the provider identifier and email. Only provider options actually shown as available can be used.

For enabled social sign-in integrations, we validate provider responses on the server. Temporary authorization records and one-use completion receipts support sign-in security. Google and Facebook access tokens are used for verification and are not retained as ongoing account credentials by this integration. An Apple refresh token is encrypted on our server so we can revoke the authorization when a linked account is deleted. Provider passwords are never stored by NoobTrade.

2. Research, device and security information

We store saved symbols and account-related research activity, including request categories, asset market, response status and timestamps, to deliver features, apply usage limits, maintain security and understand product use. Login records may include IP address and browser/device labels. The account's location label identifies an IP address or local network, not GPS location. We do not request device location permission.

Session cookies keep you signed in, and security tokens protect account requests. Local storage may hold preferences such as stock/crypto mode and language. A browser tab temporarily stores a one-time social-login verification secret; it is not a provider password or access token. Hosting infrastructure may maintain technical access and error logs.

If you participate in an available referral or reward feature, we keep referral codes and relationships, eligibility and claim status, relevant dates, and any reward size you select. If you contact support, we receive your email address, message and any attachments you choose to send. Do not send passwords, verification codes or brokerage API keys.

3. Optional assistant and browser voice features

If you use a cloud assistant feature, messages and relevant research context, such as symbols, selected indicators and the current page, may be sent to our backend and OpenAI for processing. Submitted corrections, transcripts, language and research context may be retained as assistant feedback and used to improve command interpretation. Avoid entering sensitive financial, medical, identity-document or authentication information. The iPhone/iPad app offers a separate control for optional cloud-assistant use; manual research remains available without it. You can turn this control off in Settings to stop new optional cloud-assistant requests.

The iPhone/iPad app version covered by this notice does not request microphone, camera, contacts or photo-library access. Optional voice features on the website may request browser microphone permission, and browser-provided speech recognition may be processed by the browser's provider. You can decline or revoke that permission in your browser.

4. Why we use information and who receives it

We use information to create and authenticate accounts, restore saved preferences, provide research tools, send account/security messages, prevent abuse, support users, improve the product and meet applicable legal obligations. Service providers for hosting, email delivery, market data and optional assistant processing receive information needed for their functions. Market-data requests may disclose requested symbols and network information; we do not send a user's provider password to a data vendor.

Social sign-in connects you to the provider you choose. That provider receives your authorization request and information governed by its own privacy notice. Linked news and social-media pages are separate services. We do not integrate social advertising pixels or request cross-app advertising tracking as part of this sign-in implementation. Adding a sign-in option is not consent to unrelated advertising use.

NoobTrade does not sell users' personal information or use it for targeted advertising across other companies' apps and websites. We do not share users' personal information for that cross-app or cross-site targeted advertising. Processing by service providers to operate the features described in this notice is separate from advertising use.

5. Security and retention

We use HTTPS, password hashing, server-side token verification, expiring one-use authorization records and access controls. No system can be guaranteed completely secure. You should protect your email/provider account and enable its available security features.

Account and saved-research records remain in our active database while needed to provide the account. Where social sign-in is enabled, attempts expire after ten minutes; completed callbacks have a two-minute redemption window. Expired records are purged on subsequent sign-in starts. Apple revocation credentials remain encrypted while the identity is linked. Operational logs, delivered emails and backup copies have separate retention settings and are not erased immediately by active-database deletion. Contact us for assistance or information about those retention settings; we will assess the request under applicable requirements.

Retention decisions take into account the purpose of the record, whether you still use the account, security and abuse investigations, unresolved support matters and applicable legal obligations. This notice does not promise automatic deletion after a particular number of days. A deletion request may also require separate handling of support mail, exported assistant-feedback files and service-provider copies.

6. Your choices and deletion instructions

To delete an ordinary NoobTrade account, sign in, open Settings, choose Delete account and type DELETE. Email-password users confirm their current NoobTrade password. Social-only users sign in again with their linked provider and confirm deletion within five minutes. If you cannot sign in, email contact@amplialpha.com from your account address; we may verify ownership before acting.

Deletion removes the user's profile, saved symbols, login and usage records, referral records, associated assistant feedback and any social identity links from the active database. If an Apple identity is linked, its authorization is revoked as part of deletion; a failure to complete revocation may require a retry. Deleting NoobTrade does not delete your Google, Apple or Facebook account. You can also remove NoobTrade's access in the provider's account settings. Facebook users may use these same instructions to request deletion of data obtained through Facebook sign-in.

You can request access, correction or deletion by contacting us. The rights available to you depend on applicable law. Uninstalling the app does not itself delete server-side account data. If you want email-password sign-in in addition to social sign-in, use the password-reset flow and verify access to the email address associated with your NoobTrade account.

7. Location, age and changes

NoobTrade is operated by a U.S. company. Information may be processed in the United States and in locations used by our service providers. The service is intended for adults aged 18 and older, not children. Contact us if you believe a child's information has been supplied.

We will update this notice when practices change and provide additional notice or choices where required. Please check the date above. Questions and privacy requests: contact@amplialpha.com.