Privacy Policy
1. Who we are
Quantum AI is operated by John Mary, of 25a Bell Street, Henley-on-Thames, Oxfordshire, RG9 2BA, United Kingdom ("we", "us", "our"). We are the data controller for the personal data described in this policy.
Privacy and data protection enquiries: trustedbrokerz@gmail.com. General support: trustedbrokerz@gmail.com.
2. What we collect
- Details you give us at sign-up: first name, last name, email address, and phone number with its country dial code.
- Your password: stored only as a cryptographic hash. We never see it, store it, or transmit it in readable form, and we cannot tell you what it is.
- What you create in the app: the coins on your watchlist, the holdings you enter yourself, and the price alerts you set.
- Technical data collected automatically: IP address, browser or device user-agent, the country your IP or device region resolves to, the page you submitted from, and the website that referred you.
- Campaign identifiers: a sub-campaign id and click id carried by the link you arrived through.
- Anti-fraud signals: whether a hidden form field was filled in, and how long you spent on the form before submitting.
- Device push token if you enable price alerts, so a notification can reach your device.
We do not fingerprint your device, we do not track you across other companies' apps or websites, and we do not read balances from any exchange or wallet. Holdings shown in the app are only the ones you typed in yourself.
3. Why we use it, and our lawful basis
Under Article 6 of the UK GDPR our lawful bases are:
| Purpose | Lawful basis |
|---|---|
| Creating and running your Quantum AI account | Contract — Art. 6(1)(b) |
| Storing and syncing your watchlist, portfolio and alerts across your devices | Contract — Art. 6(1)(b) |
| Sending the price alerts you set up, by push notification or SMS | Contract — Art. 6(1)(b) |
| Contacting you by email, SMS or telephone about Quantum AI — new features, tips and offers | Consent — Art. 6(1)(a), given by ticking the box at sign-up |
| Blocking automated and fraudulent sign-ups | Legitimate interests — Art. 6(1)(f): protecting the service |
| Attributing a sign-up to the marketing campaign that produced it | Legitimate interests — Art. 6(1)(f): running the business |
| Keeping records needed to answer complaints or meet a legal obligation | Legal obligation — Art. 6(1)(c) / legitimate interests |
Where we rely on legitimate interests we have considered the impact on you and concluded that our interest does not override your rights. You can ask us for that assessment, and you can object — see section 8.
4. Who processes your data for us
We do not sell your personal data and we do not share it with other companies for their own purposes. The following service providers process it on our instructions, as our processors, under contract:
- Trackbox (SoftTrack) — the customer relationship platform where our own team manages sign-ups and follow-up.
- Supabase Inc. — hosts your account, watchlist, portfolio and alerts.
- Cloudflare, Inc. — hosting and edge delivery of this website.
- CoinGecko — supplies market prices. It receives no personal data; requests reach it from our servers and never identify who is asking.
- Apple Push Notification service, via Expo — delivers push notifications. Receives a device token, not your identity.
- Twilio — sends SMS, and only if you enable SMS alerts and verify your number.
We may also disclose data where the law requires it, or to establish or defend legal claims.
5. Transfers outside the UK
Several of the processors above are located outside the United Kingdom, principally in the United States and the European Economic Area. Where personal data leaves the UK we rely on one of the safeguards permitted by Chapter V of the UK GDPR: the UK Government's adequacy regulations (including for the EEA), the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses. You can ask us which mechanism applies to a particular processor by emailing trustedbrokerz@gmail.com.
6. How long we keep it
- Account data (profile, watchlist, holdings, alerts) — for as long as your account is open.
- Sign-up records — 24 months from sign-up.
- Anti-fraud logs (IP address and outcome of sign-up attempts) — 7 days.
- Records we must keep by law — for the period the relevant law requires.
7. Deleting your account
You can delete your account from inside the app at any time: Settings → Delete account. This permanently removes your profile, watchlist, holdings, price alerts, push tokens and sign-up record from our systems. It cannot be undone and we cannot restore it afterwards.
If you cannot reach the app, email trustedbrokerz@gmail.com from the address you signed up with and we will delete your data within one month.
8. Your rights
Under the UK GDPR you have the right to:
- be told what personal data we hold about you and get a copy of it (access);
- have inaccurate or incomplete data corrected (rectification);
- have your data deleted (erasure);
- restrict how we use it while a concern is investigated;
- receive it in a portable, machine-readable form;
- object to processing based on our legitimate interests;
- object to direct marketing at any time — this right is absolute and we must stop;
- withdraw any consent you have given, at any time.
Withdrawing consent does not affect processing that already took place lawfully before you withdrew it.
To exercise any of these, email trustedbrokerz@gmail.com. We reply within one month, and will tell you if we need longer because the request is complex. There is normally no charge. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office — ico.org.uk/make-a-complaint, helpline 0303 123 1113. We would appreciate the chance to put it right first.
9. Marketing and how to stop it
Marketing consent is optional and is never a condition of using Quantum AI — the checkbox at sign-up starts unticked, and refusing it changes nothing about what the app does for you. All marketing comes from us, about Quantum AI.
Every marketing email contains an unsubscribe link, you can reply STOP to any marketing SMS, and you can email us to be removed from all lists. You can also register your number with the Telephone Preference Service to reduce unsolicited sales calls generally.
Turning marketing off does not stop the price alerts you created yourself. Those are a feature you asked for and you control each one in the app.
10. Security
Data is transmitted over TLS. Passwords are hashed. Your account data is isolated by database row-level security so one account cannot read another's. Session tokens are held in the iOS Keychain on your device. No system is perfectly secure and we cannot guarantee absolute security, but we will tell you and the ICO about a personal data breach where the law requires it.
11. Cookies and similar technologies
This website stores the referring URL in your browser's session storage so a sign-up can be credited to the right campaign. That is strictly necessary for the service you requested, so under PECR no consent banner is required. We set no advertising or analytics cookies. The app stores your session token and, before you sign in, your local watchlist on the device itself.
12. Children
Quantum AI is not intended for anyone under 18 and we do not knowingly collect their personal data. If you believe a child has given us their details, email trustedbrokerz@gmail.com and we will delete them.
13. Changes to this policy
If we change this policy we will update the date at the top. If the change is significant — for example a new processor — we will tell you directly and, where the law requires it, ask for your consent again.