Legal

Privacy Policy

How the Vestriq mobile application collects, uses, and protects your personal data.

Last updated 4 October 2026

Adease LTD ("we", "our", "us"), a company registered in England and Wales (company number 14743980), registered office 124 City Road, London, EC1V 2NX, United Kingdom, is the data controller for personal data processed through the Vestriq app.

Contact for privacy matters: support@adease.io

1. Summary

2. Data we collect

Account data. When you first open the App we create an anonymous account identifier so your progress can be saved. If you register, we also hold your email address, display name, and the identifier returned by Sign in with Apple or Google Sign-In. We never receive your Apple or Google password.

Learning and simulation data. Your onboarding answers (such as your goals and experience level), lessons and quizzes completed, XP, coins, streaks, league scores, and your simulated portfolio, trades, and AI trading agent sessions. None of this involves real money.

AI content. The questions you send to the AI coach and its replies, and the chart images you upload for analysis together with the analysis produced.

Subscription data. Subscription status, entitlements, and transaction identifiers received from Apple, Google, and RevenueCat. We never receive or store payment card details.

Advertising identifier. Your device's advertising ID (IDFA on iOS, advertising ID on Android), only if you allow tracking when the App asks. See section 4.

Device and usage data. Device model, operating system version, app version, language, region and time zone, screen size, crash diagnostics, feature usage events, and IP address, collected through Firebase.

Push notification tokens. A Firebase Cloud Messaging token, if you enable notifications, used to send learning and streak reminders.

Support correspondence. Anything you send us by email.

3. Why we process it, and our lawful basis (UK/EU GDPR)

4. Advertising measurement — detail

What we do. We advertise Vestriq on Meta's platforms (Facebook and Instagram). To understand which ads work, our servers tell Meta when someone completes registration, starts a free trial, or starts a paid subscription, together with the product and price and basic device information (platform, app version, operating system version, device model, language, and time zone).

Your choice. On iOS, the App asks for permission to track before it reads your advertising identifier. If you allow it, the identifier is included so Meta can match the event to an ad. If you decline, or have limited ad tracking on Android, the identifier is not collected or sent, and the event cannot be linked to you by that identifier.

Changing your mind. You can withdraw permission at any time in Settings → Privacy & Security → Tracking on iOS, or by resetting or deleting your advertising ID in your Android settings. There is no Meta or Facebook SDK inside the App.

5. AI features — detail

When you ask the AI coach a question or upload a chart for analysis, the message or image, together with limited context about your learning level, is sent from our servers to Anthropic, our AI provider, to generate the response. We do not send your name or email address with these requests. Anthropic processes this content on our behalf and does not use it to train its models.

Please do not include personal, confidential, or sensitive information in coach messages or uploaded images. AI output is educational only and is not financial advice.

6. What other users can see

If you take part in leagues, your display name and league score are visible to other users in your league. Nothing else in your account is shown to other users. If you choose to share your simulated portfolio, the App creates the content and you decide where to send it using your device's share sheet.

7. Who we share data with

We share personal data only with service providers acting on our instructions and with the parties below:

• Google (Firebase) — authentication, database, storage, cloud functions, messaging, analytics, crash reporting. https://firebase.google.com/support/privacy
• RevenueCat — subscription and entitlement management. https://www.revenuecat.com/privacy
• Anthropic — processing AI coach messages and chart images to generate responses. https://www.anthropic.com/legal/privacy
• Meta — advertising measurement, as described in section 4. https://www.facebook.com/privacy/policy
• Apple and Google — payment processing for subscriptions, authentication, and app distribution, as independent controllers under their own policies.

If you follow a link in the App to a third-party broker or exchange, we do not send that service your personal data. The link may carry a referral code identifying Vestriq as the source. Anything you then provide to that service is governed by its own privacy policy.

We disclose data to law enforcement or regulators where legally required, and to professional advisers or an acquirer in connection with a corporate transaction, subject to equivalent protections.

We do not sell your personal information. The only disclosure for advertising purposes is the measurement described in section 4, which happens with your advertising identifier only if you have allowed tracking.

8. International transfers

Adease LTD is established in the United Kingdom. Data is processed on Google Cloud infrastructure and by the providers listed above, which may process it in the United States and elsewhere. Where personal data leaves the UK or EEA, we rely on the UK International Data Transfer Addendum, the European Commission's Standard Contractual Clauses, or an applicable adequacy decision. Where local law in your country gives you additional rights, those rights are unaffected.

9. Retention

10. Your rights

If you are in the UK or EEA, you have the right to access your data; to have inaccurate data corrected; to erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time. You also have the right not to be subject to solely automated decisions producing legal or similarly significant effects — we do not make such decisions.

Exercise these rights in the App (Settings) or by emailing support@adease.io. We respond within one month. You may complain to the Information Commissioner's Office (https://ico.org.uk, 0303 123 1113) or to your local supervisory authority. We extend the same request process to users outside the UK and EEA.

California residents. You may request disclosure of the categories and specific pieces of personal information collected, request deletion or correction, and are entitled not to receive discriminatory treatment for exercising these rights. We do not sell personal information. Sending your advertising identifier to Meta for ad measurement may be "sharing" under the CCPA/CPRA; you can opt out at any time by turning off tracking for Vestriq in your device settings, as described in section 4.

11. Deleting your account

You can delete your account from within the App (Settings → Delete account). Deletion removes your sign-in immediately, and we then erase your profile, learning progress, simulated portfolio, AI coach conversations, and chart uploads within 30 days, except records we are required to retain by law (for example, subscription transaction records). Deleting your account does not cancel an active subscription — cancel that through the App Store or Google Play. If you cannot access the App, email support@adease.io and we will delete your account for you.

12. Children

Vestriq is not directed at children under 16, and we do not knowingly collect personal data from them. Where local law sets a different age of digital consent, that age applies. If you believe a child has provided us with personal data, email support@adease.io and we will delete it.

13. Security

We use TLS in transit and encryption at rest, Firebase Authentication for identity, database security rules restricting each account to its own data, and least-privilege access controls for staff. AI provider keys are held on our servers and never in the App. No system is perfectly secure; where a breach is likely to result in a risk to your rights, we will notify the ICO and, where required, you.

14. Permissions the App requests

Tracking (iOS) — to read the advertising identifier for ad measurement. Photos — so you can pick a chart image to analyse; the App receives only the image you choose. Notifications — so we can send learning and streak reminders. Network access — required for the App to function. Tracking, photos, and notifications are optional, and the App will ask before using them.

15. Changes to this policy

We may update this policy. The current version is always at https://adease.io/vestriq_privacy, with the date at the top. Material changes will be notified in the App or by email.

16. Contact