Privacy Policy

1. Who we are

Diiwaan Journal is a trading journal application operated by Hagarlaawe Academy. For any privacy-related questions or requests, contact us at support@diiwaanapp.com.

2. What we collect

We collect only what we need to run the Service.

Information you give us directly:

• Your email address (required to create an account)
• Your name and username (optional profile details)
• Your trading records — the trades, accounts, balances, notes, and tags you choose to log

Information collected automatically:

• Basic account activity such as sign-up date and last login time
• Standard technical data your browser sends (for example, to keep you securely signed in)

What we do NOT collect:

• We do not collect or store your real brokerage account credentials, passwords to third-party services, or access to your actual money. Diiwaan Journal stores the records you enter — not the funds themselves.
• We do not use third-party advertising trackers or sell your data.

3. Your trades are private

We take a strong position on the privacy of your trading data. Your individual trade records are protected at the database level so that only you can read them. Our database access rules ("row-level security") mean that even we, as the operators, cannot view the contents of your individual trades by default.

We may see account-level metadata — such as how many trading accounts you have, your subscription status, and when you last logged a trade — in order to provide support and manage your subscription. But the specific contents of your trades remain yours alone unless you explicitly choose to share them with us (for example, by sending us an export to help resolve a support issue).

4. How we use your information

We use your information to:

• Create and maintain your account
• Provide the journaling, calendar, statistics, and export features
• Calculate your performance metrics from the trades you log
• Manage your subscription and trial period
• Send you essential service emails (account verification, password resets, subscription notices)
• Respond to your support requests
• Keep the Service secure and prevent abuse

We do not use your trading data to train external models, and we do not sell your personal information to anyone.

5. Legal basis for processing

Under the Kenya Data Protection Act, 2019, we process your personal data on the following bases:

• Performance of a contract — to provide the Service you signed up for
• Consent — which you give by creating an account, and which you may withdraw at any time by deleting your account
• Legitimate interest — to keep the Service secure and to improve it

6. Service providers we use

We rely on a small number of trusted third-party providers to operate the Service. These providers process data on our behalf and are bound to protect it:

• Supabase — database, authentication, and secure storage of your account and trade records
• Lovable — hosting and deployment of the application
• PrivateEmail (Namecheap) — delivering transactional emails (verification, password reset, subscription notices)

We may also communicate with you via the official Diiwaan Telegram channel (https://t.me/diiwaanjournal) if you choose to join it. Joining the channel is voluntary and not required to use the Service.

These providers may store data on servers located outside Kenya. We take reasonable steps to ensure they provide an adequate level of protection.

7. Where your data is stored

Your data is stored on infrastructure provided by our service providers, which may be located in regions outside Kenya, including the European Union. By using the Service, you consent to this transfer and storage.

8. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete your personal data and trade records, except where we are required to retain certain records to comply with legal obligations or to resolve disputes. Backups containing your data are retained for a limited period before being overwritten.

9. Your rights

Under the Kenya Data Protection Act, 2019, and depending on your location, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated personal data
• Export your data (the Service includes an export feature for your trades)
• Object to or restrict certain processing
• Withdraw consent at any time

To exercise any of these rights, email us at support@diiwaanapp.com. We will respond within a reasonable time and in line with applicable law.

10. Security

We protect your data using industry-standard measures, including:

• Encrypted connections (HTTPS) across the entire Service
• Passwords stored only in hashed form — we never see or store your plain-text password
• Database-level access controls that isolate each user's data

No system is perfectly secure, but we work to protect your information and to respond promptly to any security issue.

11. Children

Diiwaan Journal is not intended for anyone under the age of 18. We do not knowingly collect data from children. If you believe a minor has provided us with personal data, contact us and we will delete it.

12. Cookies

We use only the minimal cookies and local storage necessary to keep you signed in and remember your preferences (such as your light/dark theme choice). We do not use advertising or cross-site tracking cookies.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date above and, where appropriate, notify you by email. Continued use of the Service after changes means you accept the updated policy.

14. Contact

For any questions about this Privacy Policy or how we handle your data, contact:

Hagarlaawe Academy
Email: support@diiwaanapp.com
Telegram: https://t.me/diiwaanjournal