Trust, Security & Privacy

Access to the journal requires signing in. Accounts are protected with email/password sign-in, and sessions are managed securely. Each member can only sign in with their own credentials.

Your trades, accounts, discipline checklists and profile details are private to your account by default. The database enforces row-level access rules so members can only read and write their own records.

The community leaderboard is opt-in. Performance only appears there if you explicitly enable public visibility in your profile, and only a limited summary (such as first name, country, and aggregate stats) is shared — never your full trade history or personal notes unless you choose to make it public.

The app is built on Lovable Cloud, which provides the managed database, authentication, and file storage powering this journal. Data is transmitted over encrypted connections (HTTPS). Uploaded screenshots are stored in private storage and served through short-lived, access-controlled links.

References to Lovable platform capabilities describe features we rely on and are not a Lovable-issued certification or independent verification.

We are responsible for how this app is configured, what data it collects, and how access is scoped. The underlying platform is responsible for the security of the hosting, database, and authentication infrastructure. You are responsible for keeping your login credentials private and choosing what, if anything, you make public on the leaderboard.

Your data remains available while your account is active. If you would like your account or data deleted, contact the XAURA team and we will action your request.

If you have a security or privacy concern, or believe you have found a vulnerability, please reach out to the XAURA team through your usual community channel so we can respond.