Privacy Protocol

Practice collects the minimum information needed to operate the service. When you sign in, we receive:

• Email address (from Apple, Google, or direct registration)
• Display name (if provided by your identity provider)

All trading data (balances, positions, orders) is simulated. No real financial information is collected, stored, or processed.

Sign-in is handled through Apple Sign-In, Google Sign-In, or email/password registration. For email registration, passwords are salted and hashed using bcrypt before storage — plaintext passwords are never stored or logged. Sessions are managed via JSON Web Tokens (JWT).

Practice uses Datadog to collect anonymous crash and performance data. This includes:

• Device model and operating system version
• Stack traces from crashes
• Performance metrics (app launch time, screen transitions)

Crash reports do not contain personal information, trading data, or account credentials. This data helps us identify and fix bugs.

Account data (email, hashed password) is stored in a PostgreSQL database hosted on Google Cloud Platform in the United States. Simulated trading state (positions, balances, order history) is managed by the Arca platform, which operates the simulated exchange infrastructure.

Practice integrates with the following third-party services:

• Apple Sign-In — identity verification
• Google Sign-In — identity verification
• Datadog — crash and performance monitoring
• Arca — simulated exchange operations
• Google Cloud Platform — backend hosting

We do not sell, rent, or share your personal data with advertisers, data brokers, or any other third parties.

You may request deletion of your account and all associated data at any time by contacting support@practice.live. Upon request, we will delete your account information and any related simulated trading data within 30 days.

We may update this privacy policy from time to time. Material changes will be reflected with a new effective date at the top of this page. Continued use of Practice after changes constitutes acceptance of the updated policy.