UntiltSign in

Privacy Policy

Last updated: 6 November 2026

This policy explains what personal information Untilt collects, why, who sees it and what your rights are. We follow South Africa's Protection of Personal Information Act (POPIA).

1. Who is responsible

The responsible party is [YOUR REGISTERED BUSINESS NAME] (registration [REGISTRATION NUMBER]), [PHYSICAL ADDRESS], South Africa. Our Information Officer is [NAME OF INFORMATION OFFICER]. Contact: [SUPPORT EMAIL].

2. What we collect

  • Account details: your name, email address and (optionally) company or trading name. Your password is handled by our sign-in provider and stored only in hashed form; we cannot read it. We also record when you accepted our terms.
  • Journal content you create: trades, trading accounts you add (name, prop firm or broker, account number, size and limits), notes and lessons, screenshots, goals, daily check-ins, backtests, settings, and your answers to our welcome questions (your main trading challenge, what you trade and your experience).
  • Billing details: your plan and subscription status, trial and payment dates, Paystack customer and subscription reference codes, and your card type, last four digits and expiry date. We never receive your full card number or security code; those go directly to Paystack.
  • Technical information: IP address, browser and device details and security logs, created automatically when you use the service.
  • Cookies and similar storage: see our Cookie Policy.

3. Why we use it

  • to create your account and provide the journal you asked for (performing our agreement with you);
  • to take payment, manage your trial and subscription, and keep financial records (agreement and legal obligation);
  • to keep the service secure, prevent fraud and abuse, and fix problems (our legitimate interests);
  • to personalise your setup and improve the product, for example using your welcome answers to suggest defaults (our legitimate interests);
  • to contact you about your account, billing and important service changes;
  • to comply with the law.

We do not sell your personal information. We do not currently send marketing emails; if we ever do, we will ask for your consent first and you can opt out at any time.

4. Who we share it with

We share information only with service providers (“operators”) who help us run Untilt, and only as needed:

  • Supabase — database, sign-in and file storage;
  • Vercel — website hosting;
  • Paystack — payment processing;
  • our email delivery provider — sign-up, password-reset and billing emails;
  • secure backup storage — encrypted-in-transit copies of the database kept for up to 30 days.

We may also disclose information where the law requires it, or to protect our rights and users' safety. If the business is sold or merged, your information may transfer to the new owner under the same protections.

6. Transfers outside South Africa

Some of our providers store or process data in other countries. Where that happens we take steps to make sure your information stays protected, as POPIA requires, for example by using providers with appropriate security and contractual safeguards.

7. How long we keep it

  • Your journal data and account details: for as long as your account exists.
  • If you ask us to delete your account we remove your data from the live service within 30 days. Backups are overwritten within 30 days after that.
  • Billing and payment records: for as long as South African tax and company law requires.

8. How we protect it

Connections are encrypted. Each user's data is separated by database access rules so one user cannot read another's, screenshots are stored privately, and access to our systems is restricted. No system is perfectly secure. If a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.

9. Your rights

You may ask us to:

  • tell you what personal information we hold about you and give you a copy (you can also export your journal yourself in Settings);
  • correct information that is wrong or out of date;
  • delete your information and account;
  • stop processing your information where you object, or withdraw consent you gave.

Email [SUPPORT EMAIL]. We may need to confirm it is really you before we act. If you are unhappy with how we handle your information you may complain to the Information Regulator of South Africa (inforegulator.org.za).

10. Children

Untilt is for people aged 18 and over. We do not knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy. If a change matters, we will tell you in the app or by email. The date at the top shows when it was last updated.

12. Contact

[NAME OF INFORMATION OFFICER], Information Officer · [YOUR REGISTERED BUSINESS NAME] · [PHYSICAL ADDRESS], South Africa · [SUPPORT EMAIL]