Privacy Policy

The data controller is the operator of Ladon (ladonjournal.com), based in Türkiye. You can reach us about anything on this page at hello@ladonjournal.com.

Account: your name, email address and a one-way hash of your password (we never see or store the password itself).

Your journal: plans, decisions, trades, results, reviews, lessons, strategies and rules, trading accounts and balance history, and chart images you attach.

Broker history you choose to import, either from a MetaTrader report or through the Ladon Sync expert advisor: closed positions, deposits and withdrawals, and the account number and server they belong to. Ladon Sync can only add history; it cannot place, change or close trades.

Assistant conversations: your questions and the answers.

Technical data needed to keep your account safe: session records with IP address and browser type, and short-lived counters that limit repeated sign-in attempts.

Only to provide Ladon to you: to show your journal, calculate your results and insights, answer your questions about your own records, keep your account secure, and send you account emails such as address confirmation and password reset, and — unless you turn it off in Settings — a short weekly summary of your own journal.

We do not sell your data, show ads, or use your journal to build profiles for anyone else. Ladon has no third-party analytics or tracking scripts.

Insights and statistics are calculated automatically from your own records, for you alone. They never lead to decisions about you that have legal or similar effects.

Data is collected electronically: when you create an account, write in the app, import a broker report, run Ladon Sync, or ask the assistant.

Account, journal, imports and assistant: because they are necessary to provide the service you signed up for (KVKK art. 5(2)(c); GDPR art. 6(1)(b)).

Security records such as sign-in attempts and sessions: our legitimate interest in keeping accounts safe (KVKK art. 5(2)(f); GDPR art. 6(1)(f)).

Where a law requires us to keep or disclose something, that legal obligation (KVKK art. 5(2)(ç); GDPR art. 6(1)(c)).

Ladon uses only cookies that are needed for the service to work: your sign-in session, your language and your time zone. There are no advertising or analytics cookies, so there is nothing to opt out of.

Vercel — hosts the application; it runs in Frankfurt, Germany.

Supabase — stores the database, your chart images and the daily backups, in Frankfurt, Germany.

Anthropic — when you ask the assistant a free-form question, a compact summary of the relevant records from your journal is sent to Anthropic's Claude model to write the answer. Anthropic does not use this data to train its models. Common questions are answered by Ladon itself, without sending anything.

Resend — delivers account emails, from servers in the EU (Ireland).

Cloudflare — provides our domain's DNS.

Each provider processes data only to deliver its part of the service, as our processor, under its own security and data-protection commitments.

Some of these providers are located in or process data in the European Union and the United States, so your data is transferred abroad. These transfers rely on the providers' standard contractual clauses and equivalent safeguards (KVKK art. 9; GDPR chapter V).

We disclose data to public authorities only when a law or a court order requires it.

All traffic is encrypted (HTTPS). The database is not reachable from the public internet, every table is locked to the server, chart images are private files, and sync tokens are stored only as hashes. Sign-in attempts are rate-limited.

If a breach ever affects your data, we will tell you and the competent authority as the law requires.

For as long as your account exists. Items you delete go to Recently deleted first so mistakes can be undone. When you delete your account, your account and all journal data are removed immediately; the daily backups that may still contain them are deleted automatically after 14 days.

Sign-in sessions expire after 30 days of inactivity; counters that limit sign-in attempts are kept for minutes to hours.

You can download everything Ladon holds about you at any time (Settings → Your data → Export all data), correct anything in the app, and delete your account and all its data (Settings → Your data → Delete my Ladon account).

Under KVKK article 11 you may ask whether your data is processed and request information about it; learn the purpose and whether it is used accordingly; know who it is shared with in Türkiye or abroad; ask for incomplete or wrong data to be corrected, and for data to be deleted; ask that third parties it was shared with are told of a correction or deletion; object to a result against you that comes only from automated analysis; and claim compensation for damage caused by unlawful processing.

Under the GDPR you also have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local data-protection authority. In Türkiye the authority is the Personal Data Protection Authority (KVKK).

To use any of these rights, write to hello@ladonjournal.com from your account's email address. We answer free of charge within 30 days at the latest.

Ladon is not intended for anyone under 18.

If this policy changes in a meaningful way we will tell you in the app before the change applies.

Questions or requests: hello@ladonjournal.com