Privacy Policy

Without an account

Your lesson progress, settings, simulator trades, chart drawings, duels with Shamak and chats with the assistant are stored only in your own browser or phone and never reach our servers. Clearing your browser data or deleting the app erases them too.

With an account

When you create an account, we keep the email address or mobile number you sign up with, the name you choose and your password. Your password is stored only in hashed form (bcrypt); the password itself is never kept.

So that your progress is the same on all your devices, your app data (XP, completed lessons, streaks, coins, quests, simulator trades and settings) is stored on our server. Your weekly XP is also kept for the league.

The messages and analyses you send in groups, and the duels you play with friends (rounds, scores and both players' names), are also stored on our server.

What other users can see

Your name and weekly XP in the league table; your name, ID, profile picture and the messages and analyses you send in chat groups, to the members of that group; and your name and duel scores, to the friend who plays your duel.

You can block anyone you like so that their messages aren't shown to you in groups; they won't know. Your block list is visible only to you.

Public profile: by tapping your name in chats, others can see your name, ID, profile picture, the month you joined and your learning progress (XP, streaks, league, lessons and courses, and duel wins). Your simulator trades, balance and email address or phone number are not on your profile.

Your email address and mobile number are never shown to other users. Only Chartoon admins can see an account's name, email address or phone number and group messages, and only to handle reports and violations. Their actions are recorded in the admin log.

AI assistant

Messages you send to Shamak (the assistant) are sent to an AI service to get a reply, together with a summary of your progress (such as the lessons you've completed and your simulator stats). The chat text is not stored on our server and stays only on your device; we only keep a count of your daily messages to apply the usage limit.

If you report one of Shamak's replies, only that reply, the question before it, the reason you picked and your comment are sent, together with your account, to Chartoon admins for review.

Don't share sensitive personal or financial information (such as passwords or card numbers) with the assistant.

Problem reports

When you report a lesson step, we store the lesson and step IDs, the reason you picked, the comment you wrote and the app version. If you're signed in, the report is linked to your account.

Services we use

Supabase for the database and server, and Vercel for hosting the website and the web version. The app's requests to our server and to Binance also pass through app.chartoon.net on Vercel so that they can be reached from every network; this route doesn't store anything.

Binance for live prices: when you open "Live prices" or a duel, prices are fetched from Binance's public servers, usually through that same Vercel route, so Binance doesn't see your IP address. Only if that route is unavailable does your device connect to Binance directly. No account information is ever sent to Binance.

An AI service, only when you use the assistant.

Under their own policies, these services may keep technical logs, such as IP addresses and request times, for security and troubleshooting.

Keeping and deleting your data

Account information is kept for as long as your account exists. Duels older than 90 days are deleted automatically.

You can delete your account at any time from "Profile → Account → Delete account" (full guide, even without the app: chartoon.net/delete-account). This deletes your account, the progress saved on our server, your league points, your messages in groups, the duels you created and the progress on that device. In duels you played with a friend, the result stays for them but your name is removed. Problem reports are kept without your name.

Security

The app's connection to our server is encrypted (HTTPS), passwords are stored hashed, and after several wrong password attempts, sign-in is temporarily locked. No system is 100% secure, so don't reuse a password from another service for Chartoon.

Users under 18

There's no real money in Chartoon, but if you're under 18, use it with your parents' permission and involvement. Trading with real money is for adults only.

Changes and contact

If this policy changes, the date at the top of the page will change, and we'll let you know about important changes in the app.

To delete your data, use "Delete account" in the app. For any other questions, write to us using the "Report a problem" flag at the top of any lesson page.