Privacy Policy · ChartAgent AI

The iOS and Android policies below apply to their respective platforms. Measurement changes described here apply to app versions that include the Google Firebase integration.

1. iOS

Last updated and effective: October 20, 2026

This Privacy Policy explains how Minsik Chae, doing business as ChartAgent (“ChartAgent,” “we,” “us,” or “our”), collects, uses, stores, transfers, and deletes information when you use the ChartAgent mobile application and related services (the “Service”). It applies to users worldwide. The Service and this Policy are provided in English.

2. Data Controller

The data controller and service operator is:

Minsik Chae, doing business as ChartAgent

Business registration number: 418-11-83101

Address: 32-4, Banryong-ro 18beon-gil, Republic of Korea

Privacy contact: kicoa24@gmail.com

3. Information We Process

Information stored on your device

Onboarding profile information, such as the name or nickname you enter, trading experience, market focus, trading style, and selected challenge.
App preferences, including language, selected agents, agent customizations, onboarding status, and subscription-preview settings.
Up to 30 recent analysis records and associated chart images.
Up to 40 saved follow-up turns for each analysis.

This locally stored information remains in the app’s private storage until you delete it through available controls, it is removed by the app’s automatic limits, or you uninstall the app.

Information submitted for analysis

A chart image that you deliberately select using Apple’s system photo picker.
Analysis settings, including selected agents, language, whether news context is requested, detected or selected symbol and timeframe, and agent-profile settings.
Follow-up questions, prior follow-up context, and the generated analysis needed to answer the question.
AI-generated analysis results and responses.

Subscription information

Our subscription-management provider may process an anonymous app user identifier, Apple receipt or transaction token, product and entitlement identifiers, purchase and renewal history, subscription status, country or storefront information, and technical device information needed to validate and manage purchases. We do not receive or store your full payment-card number or bank-account details.

Optional product usage analytics

When app usage analytics is enabled, PostHog receives a random installation identifier, session and analysis-attempt identifiers, screen and feature event names, app version and language, subscription state, timing, counts, and categorized success or error outcomes. This helps us understand onboarding, waiting time, result access, news and annotation reliability, and purchase flows. SDK technical properties include device model, operating system, and app information.

Chart images, chart analysis text, questions, conversation text, profile names, and news article text are excluded from product analytics. Session replay, automatic interaction capture, and location enrichment are disabled. When usage analytics is enabled, selected onboarding, analysis completion, paywall and purchase-start events are also sent to Google Analytics for product and advertising measurement.

Google Firebase and purchase measurement

When usage analytics is enabled, Google Firebase / Google Analytics receives an app-instance identifier, app opens, basic device and app information, and the limited events described above. RevenueCat receives that app-instance identifier to associate verified purchase and renewal events (product, transaction identifier, value and currency) with the ChartAgent Google Analytics property. That property is linked to Google Ads to measure installs and purchases from ChartAgent campaigns. Chart images, article bodies and conversations are not included. Personalized advertising is disabled. Advertising storage and advertising user data are permitted only when usage analytics is enabled and Apple's tracking authorization is granted. Turning off usage analytics disables new Firebase collection and removes the RevenueCat Firebase identifier; previously transmitted records may remain under the providers' retention policies.

Google may process this information internationally, including in the United States, under its privacy policy: https://policies.google.com/privacy.

Technical and support information

Internet Protocol address, request date and time, request path, response status, user-agent or device/network information, and security or error logs generated when you communicate with our servers.
Your email address, message, attachments, and related correspondence if you contact customer support or submit a privacy request.

4. How We Collect Information

We collect information directly when you select an image, enter a question, configure the app, make or restore a purchase, or contact us. We also receive limited transaction and technical information from Apple and our subscription provider, and server logs are generated automatically when the Service is accessed.

The app uses Apple’s system photo picker and receives only the image you choose for analysis; it does not request unrestricted access to your entire photo library.

5. Purposes and Legal Bases

We process information to:

provide chart analysis, follow-up responses, market-symbol search, and optional news context;
save and display analysis history on your device;
validate, restore, and administer ChartAgent PRO subscriptions;
secure, operate, diagnose, and improve the reliability of the Service;
prevent fraud, abuse, automated bulk access, and security incidents;
respond to support, privacy, and legal requests; and
comply with applicable law and enforce our Terms of Use.

Depending on your location, our legal bases are performance of our contract with you, your consent where required, compliance with legal obligations, and our legitimate interests in operating and securing the Service where those interests are not overridden by your rights.

6. Storage and Retention

Chart images on our application server: stored only in a temporary working directory during the analysis request and deleted when processing finishes. We do not maintain a server-side analysis-history database containing the original image.
Analysis history on your device: retained until you delete an individual record, use the in-app delete-all control, the app removes older records beyond its limits, or you uninstall the app.
On-device profile and preferences: retained until changed or until the app is uninstalled.
Server access, security, and error logs: retained for up to one year.
Server backups: retained for up to one year. Temporary chart-image files are not intentionally included as standalone retained records, but limited residual copies may persist temporarily in infrastructure backups or provider systems where technically unavoidable.
AI-processing data: retained under the AI provider’s applicable service and safety rules. Model-improvement sharing has been disabled by us where available. Under default API abuse-monitoring controls, relevant content may be retained for up to 30 days unless longer retention is required by law or applies to a specific service feature. Zero Data Retention is not enabled.
Subscription and transaction information: retained for as long as needed to administer subscriptions, resolve disputes, prevent fraud, and satisfy Apple, provider, accounting, tax, and legal requirements.
Support correspondence: retained until the request is resolved and thereafter for up to three years where reasonably necessary for dispute handling or legal compliance.

When a retention period expires, information under our control is deleted or de-identified using reasonable technical methods, unless continued retention is required by law.

7. Service Providers and International Transfers

We use service providers to operate the Service. Information may be transferred from the Republic of Korea or your country to the United States and other locations where the providers process data. Transfers occur electronically over encrypted networks when you use the relevant feature. For Korean users, transfers necessary to perform the Service are disclosed under Article 28-8(1)(3)(a) of the Personal Information Protection Act.

Amazon Web Services, Inc. — cloud hosting

Destination: United States, AWS US East region.
Information: chart-analysis requests while in transit and temporary processing, server logs, IP address, user-agent, request metadata, configuration, and backups.
Purpose and timing: hosting, delivery, security, and backup whenever the Service is accessed.
Retention: temporary chart files until processing finishes; access logs and backups for up to one year.
Privacy information: https://aws.amazon.com/privacy/

OpenAI, L.L.C. — AI processing

Destination: United States and other locations described by the provider.
Information: selected chart image, analysis instructions and settings, symbol/timeframe context, follow-up questions and history, relevant prior analysis, and generated output. The provider generally receives our server connection information rather than a direct account profile because ChartAgent has no user login system.
Purpose and timing: generating an analysis or follow-up response when you request that feature.
Retention: according to the provider’s applicable service and safety controls; relevant data may generally be retained for up to 30 days under default abuse-monitoring controls unless a longer period is legally required or applies to a specific feature. Model-improvement sharing has been disabled by us where available.
Privacy information: https://openai.com/privacy/

RevenueCat, Inc. — subscription administration

Destination: United States and other provider processing locations.
Information: anonymous app user identifier, Apple receipt or transaction token, product and entitlement identifiers, purchase and renewal history, subscription status, storefront or country, IP-derived location, and technical device information.
Purpose and timing: validating, restoring, securing, and administering subscriptions when the app checks entitlement status or a purchase event occurs.
Retention: for the period necessary to provide subscription administration, prevent fraud, and meet contractual and legal obligations.
Privacy information: https://www.revenuecat.com/privacy/

PostHog, Inc. — product usage analytics

Destination: United States (PostHog US Cloud).
Information: the optional product usage analytics described above; network connection information is necessarily processed to receive events.
Purpose and timing: understanding feature adoption, conversion, and reliability when analytics is enabled and relevant app or server events occur.
Retention: according to the project retention configuration and PostHog’s applicable service terms. Turning collection off does not automatically erase already received events.
Privacy information: https://posthog.com/privacy

Airbridge, Inc. — marketing attribution and measurement

Destination: United States or other provider processing locations.
Information: app-install and in-app event data, attribution-link data, subscription event data, device and advertising identifiers where permitted, IDFV, and privacy-preserving SKAdNetwork measurement data.
Purpose and timing: measuring installs, subscriptions, and marketing performance for channels such as TikTok, including when the app is first opened and when relevant in-app events occur.
Retention: according to Airbridge’s applicable operational, security, and legal requirements.
Privacy information: https://www.airbridge.io/privacy

Meta Platforms, Inc. — advertising attribution and measurement

Destination: United States and other provider processing locations.
Information: app activation and in-app event data, subscription product, price and currency, campaign attribution data, device and advertising identifiers where permitted, IP address, and privacy-preserving aggregated measurement data.
Purpose and timing: measuring which Meta ads lead to app installs, analyses, and subscriptions, and optimizing advertising performance when the app is opened or a relevant in-app event occurs.
Retention: according to Meta’s applicable operational, security, and legal requirements.
Privacy information: https://www.facebook.com/privacy/policy/

TikTok Pte. Ltd. and affiliates — advertising attribution and measurement

Destination: Singapore, United States, and other provider processing locations.
Information: app activation and in-app event data, subscription product, price and currency, campaign attribution data, device and advertising identifiers where permitted, IP address, and privacy-preserving SKAdNetwork measurement data.
Purpose and timing: measuring which TikTok ads lead to app installs, analyses, and subscriptions, and optimizing advertising performance when the app is opened or a relevant in-app event occurs.
Retention: according to TikTok’s applicable operational, security, and legal requirements.
Privacy information: https://www.tiktok.com/legal/page/row/privacy-policy/en

RapidAPI, Inc. and InsightSentry — market and news data

Destination: United States or other provider processing locations.
Information: market-symbol search terms, selected symbol, and requests for optional news context. Chart images and your local profile name are not intentionally sent to these market-data services.
Purpose and timing: validating symbols and retrieving market or news information when you search or request news context.
Retention: according to the providers’ applicable operational, security, and legal requirements.
Privacy information: https://rapidapi.com/privacy/

Apple Inc. and applicable Apple affiliates — distribution and payment

Destination: locations used by Apple for App Store and purchase processing.
Information: App Store account, purchase, subscription, transaction, device, and support information collected by Apple.
Purpose and timing: app distribution, billing, subscription management, refunds, and purchase restoration.
Retention: according to Apple’s legal and operational requirements.
Privacy information: https://www.apple.com/legal/privacy/

These providers process information under their own terms and privacy practices and are required by contract or applicable law to provide appropriate protection. You may decline an international transfer by not using the related feature; however, AI analysis cannot be provided without cloud hosting and AI processing, and paid access cannot be validated without Apple and subscription processing.

8. Sharing and Disclosure

We do not sell personal information. We use Airbridge, Meta, and TikTok to measure marketing attribution and advertising performance. On iOS, ChartAgent requests AppTrackingTransparency permission when applicable so that cross-app install and subscription measurement can use the identifiers Apple permits. If you decline, the app remains usable and privacy-preserving aggregate methods such as SKAdNetwork, aggregated measurement, and non-IDFA attribution may still provide limited measurement. You may change this permission later in iOS Settings under Privacy & Security > Tracking.

We may disclose information to the service providers listed above, to professional advisers under confidentiality obligations, or to authorities and other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or establish and defend legal claims. We will update this Policy and our App Store privacy disclosures if our measurement providers or data practices materially change.

9. Automated Processing

ChartAgent uses automated AI processing to generate informational chart-analysis outputs. These outputs do not make decisions that produce legal or similarly significant effects about you, and they are not used to determine employment, credit, insurance, education, housing, or access to essential services.

10. Your Rights and Choices

Depending on applicable law, you may request access, correction, deletion, suspension or restriction of processing, withdrawal of consent, objection, or a portable copy of personal information under our control. You may contact kicoa24@gmail.com to make a request. We may need limited information to verify the request and locate relevant subscription or support records.

You can turn off “Share app usage analytics” in the app’s Profile settings. This stops new app analytics and future analytics-enabled requests; a running analysis receives the setting on its next status check. Already transmitted events may remain. This setting is separate from Apple’s advertising-tracking permission.

You can delete individual analyses or all saved chart images, results, and follow-up conversations from the app’s settings. Uninstalling the app deletes data held in the app’s local container, subject to device or cloud backups controlled by you or Apple. Cancelling a subscription stops future renewals but does not itself delete local app data or legally required transaction records.

Because ChartAgent does not maintain user accounts or a server-side analysis-history database, we may not possess a persistent record that can be linked back to you after a temporary request is completed. Some transaction records controlled by Apple or RevenueCat may need to be handled through the relevant provider or retained as required by law.

11. Security

We use reasonable administrative and technical safeguards designed to protect information, including encrypted network transmission, restricted server access, temporary-file deletion, access controls, and separation of private service credentials from the app. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children and Teen Users

The Service is not intended for anyone under 15. We do not knowingly collect personal information from a child under 15. If you believe such a child has submitted information, contact us at kicoa24@gmail.com so we can take appropriate action. Users under the age of legal majority must have permission from a parent or legal guardian.

13. Changes to This Policy

We may update this Policy when our data practices, service providers, legal obligations, or features change. The updated Policy will show a new effective date. We will provide additional notice when required by law or when a change materially affects your privacy rights.

14. Contact and Complaints

Privacy officer: Minsik Chae

Email: kicoa24@gmail.com

Address: 32-4, Banryong-ro 18beon-gil, Republic of Korea

Korean users may also contact the Personal Information Infringement Report Center at 118 or the Personal Information Dispute Mediation Committee at 1833-6972 for assistance.

15. Android

Last updated and effective: October 20, 2026

This policy applies to ChartAgent AI for Android, package ai.chartagent.android, operated by Minsik Chae, doing business as ChartAgent (business registration number 418-11-83101). Contact: kicoa24@gmail.com. Address: 32-4, Banryong-ro 18beon-gil, Republic of Korea.

16. Information and purposes

Profile preferences, agent customizations, analysis history, selected chart images and follow-up conversations are saved in the app's private storage on your device. The Android app does not require a ChartAgent login.

When you request analysis, your selected chart image, symbol, timeframe, language, agent settings and analysis instructions are transmitted to our server and OpenAI to generate the report and chart annotations. Follow-up questions and relevant report/conversation context are transmitted when you ask an agent a question. Avoid including unrelated personal information in screenshots or questions.

The system photo picker gives the app access to the image you select, rather than your entire library. The camera is used only when you choose to take a chart photo. A chart selected through symbol search may be displayed using TradingView technology and market-data services; they can receive the requested symbol and technical connection information.

Google Play and RevenueCat process purchases, purchase tokens, product identifiers, subscription status, renewal history, an anonymous app user ID, storefront/country and technical device information to validate, restore and administer PRO access. We do not receive or store full payment-card numbers or bank details.

Our server receives IP addresses, request timestamps, paths, status codes, device/network metadata and error/security logs to operate the service and prevent abuse. If you contact support or report AI content, we receive the information and attachments you choose to send.

Optional Google Firebase / Google Analytics measurement is disabled until you enable “Share usage analytics” during onboarding or in Profile settings. When enabled, Google receives an app-instance identifier, app opens, device/app information and purchase-start events. Advertising identifiers may be used where permitted by your device settings. RevenueCat receives the Firebase app-instance identifier to associate verified purchases and renewals (transaction identifier, product, value and currency) with ChartAgent's Google Analytics property, which is linked to Google Ads for install and purchase attribution. Chart images, article text, questions and conversations are excluded. Personalized advertising is disabled. This Android release does not integrate PostHog, Meta, TikTok or Airbridge SDKs and does not display third-party ads. Backend operational logging still applies.

17. Providers and international transfers

Data is transmitted over encrypted HTTPS connections. Information may be processed outside your country, including the United States:

Amazon Web Services: hosts our analysis service, temporary chart processing and operational logs. https://aws.amazon.com/privacy/
OpenAI: processes chart images, instructions, questions and relevant report context to generate AI output. API data is subject to OpenAI's service and abuse-monitoring retention rules, generally up to 30 days under default controls, with legal/security exceptions. https://openai.com/privacy/
RevenueCat: administers anonymous app user identifiers, purchase tokens, subscription records and technical information. https://www.revenuecat.com/privacy/
Google / Google Play: distributes the Android app and handles purchases, subscription management and refunds under Google's own terms. https://policies.google.com/privacy
Google Firebase / Google Analytics / Google Ads: optional app usage, install and purchase measurement described above. Data is sent when you enable measurement and relevant events occur; Google may process it in the United States and other countries under its retention policies. https://policies.google.com/privacy
RapidAPI and InsightSentry: receive symbol searches and market/news requests for the optional news and chart features. We do not intentionally send chart images or local profile names to these services. https://rapidapi.com/privacy/
TradingView: provides charting technology and, where external chart content is requested, receives technical connection and chart request information. https://www.tradingview.com/privacy-policy/

Transfers occur when you request the relevant feature or purchase/restore/check a subscription. They are needed to deliver those services. Providers retain information under their applicable service, security and legal requirements. We do not sell personal information.

18. Retention and deletion

Original images are processed in temporary server storage and removed when processing finishes. Temporary analysis jobs and generated annotations may be retained for recovery and delivery under the server's configured cleanup period. The app saves history and conversations locally. Server operational logs and infrastructure backups may be retained for up to one year. OpenAI and subscription providers have their own retention rules.

Delete individual reports or all history in the app, or uninstall the app to remove its local storage, subject to device backups controlled by you/Google. Deleting the app does not cancel a subscription: manage it in Google Play. Purchase records may be retained for subscription, fraud prevention, tax, accounting and legal obligations. Support messages may be kept for up to three years after resolution where necessary for disputes or legal compliance.

19. Your choices and rights

Contact kicoa24@gmail.com to request access, correction, deletion or restriction of personal information under our control, withdraw consent where applicable, or ask about international processing. We may need limited information to identify relevant records. Since there is no ChartAgent user account, we may not be able to associate completed temporary analysis requests with you. Google Play and RevenueCat may need to handle records they control.

You can decline image/camera access and optional news. Cloud AI processing is required for analysis; Google Play/RevenueCat processing is required to validate paid access. We apply reasonable security safeguards, but no system can guarantee absolute security.

You can disable “Share usage analytics” in Profile at any time. This stops new Firebase analytics collection and removes the Firebase identifier from future RevenueCat attribution updates. Previously transmitted records may remain under the providers' retention policies. Declining optional analytics does not affect PRO access.

20. Audience and AI

The Android app is intended for adults aged 18 and over. It is an informational research tool. AI output may be inaccurate and does not execute trades, hold funds, guarantee returns or make decisions about your eligibility for credit, employment or other essential services.

21. Changes and contact

We update this policy when features or data practices change. The effective date appears above. Privacy officer: Minsik Chae, kicoa24@gmail.com. Korean users may also contact the privacy complaint center at 118 or the Personal Information Dispute Mediation Committee at 1833-6972.