The short version
- No ads, no analytics, no tracking — in the apps, in the web app and on this website. No cookies are used for tracking.
- You can use the phone apps without an account; then your journal stays on your device.
- If you sign in (Apple, Google or an e-mail code), your journal is stored on our servers so the same data appears on every device you sign in on.
- Broker accounts are connected with read-only (investor) access. We cannot trade or move money.
- You can delete your account and everything in it at any time. We never sell your data.
1. Who is responsible for your data
The data controller is ANNMAR LIMITED (trading as AnnMar Studio), registered in England and Wales, company no. 16014219, registered office 111 Bedford Way, Scunthorpe, England, DN15 8GF. Contact: info@annmarlimited.co.uk.
2. Your FX Journal account (optional on phones)
Signing in is how one journal works on iPhone, Android, Mac and the web. You can sign in with:
- Sign in with Apple — we receive a user identifier from Apple and, if you choose to share it, your name and e-mail address (which may be an Apple private relay address).
- Google — we receive your Google account identifier, name and e-mail address (only when Google has verified it).
- E-mail code — you enter your e-mail address and we send a 6-digit code through our e-mail provider Brevo. Codes expire after 10 minutes and can be used once.
A sign-in creates a random session token. We store only a fingerprint (SHA-256 hash) of it; sessions not used for 180 days end by themselves. To protect accounts we keep short-lived counters per IP address and per e-mail address (for example how many codes were requested in the last hour).
3. What is stored and where
| Data | Not signed in | Signed in |
|---|---|---|
| Trades, notes, strategy, descriptions, tags, journal and mood entries, trading plans, growth plans, checklists, achievements, profile and app settings | Only on your device (and in your own iCloud or Google device backup, if you use one) | On your device and in your FX Journal account on our servers (Cloudflare D1 database), so every device you sign in on shows the same journal |
| Trade screenshots and profile photo | Only on your device | Also in your account's private file storage (Cloudflare R2), as WebP images |
| Web app (app.fxjournalpro.uk) | The web app always needs an account. It keeps a working copy of your journal and your session in your browser's own storage (IndexedDB) on that computer; signing out removes them. | |
On iPhone, screenshots you scan to import trades and statement files (MT5 HTML or Excel) are read on the device. Demo data never leaves the device.
4. Connected broker accounts
| Account type | What we receive | Where it is processed |
|---|---|---|
| MetaTrader 5 (including prop-firm MT5 accounts) | Account number, server, investor (read-only) password, account name, your time zone and your plan | Only AnnMar's own servers: our Cloudflare-hosted API and our own sync server. The investor password is stored encrypted on the sync server so your history can be updated every night. One download per broker account: our server writes the trades into your FX Journal account and every signed-in device reads them from there. |
| TradeLocker (including prop-firm TradeLocker accounts) | E-mail, password and server | Stored encrypted only on your phone (iPhone Keychain or Android Keystore). Sent over an encrypted connection through our API to TradeLocker when your history is refreshed; never stored on our servers. |
| MetaTrader 4 (iPhone app only) | Account number, server, investor password | Connected through MetaApi (Agilium Trade), a MetaTrader connectivity provider that reads history from your broker. |
| Manual accounts | Nothing from a broker | Your device, and your account if you sign in. |
From these accounts we import only trading history and account information: positions, prices, times, volume, profit or loss, commission, swap, balance, equity, currency and balance operations (deposits, withdrawals, bonuses, transfers). We cannot place or close trades or move funds.
MT5 desktop EA (optional). If you run our free FXJournalPro Bridge EA in MetaTrader 5 desktop, it sends your closed trades, balance operations and balance, with your account number, server and broker name, to our API, linked to your personal code. It never sends passwords.
5. Online features
- AI trade review: when you ask for one, the details of that single trade (symbol, direction, prices, stop loss, take profit, times, volume, result, strategy and notes you added) go to AnnMar's own AI gateway, which passes them to a third-party AI model provider without your name, e-mail or account login; Cloudflare Workers AI is the fallback. Please do not put personal information in trade notes.
- Morning briefing: the markets you follow, your briefing time and time zone are stored with your account (or a random install identifier if you are not signed in). Public news, economic calendar and price data are summarised through the same AI gateway.
- Share Studio captions: summary figures for the period you choose (for example win rate and percentage growth) go through the AI gateway to suggest a caption.
- Market data: price candles come from our own market-data feed; requests contain only the symbol and time range.
AI output is labelled “Generated by AI, check it”. It is not used to make decisions about you.
6. Purchases
Subscriptions are bought through Apple (App Store), Google Play or on the web. We use RevenueCat to manage subscriptions and check whether your account has Pro; RevenueCat receives your FX Journal account identifier (or an anonymous app identifier) and purchase receipts. On the web, RevenueCat's checkout takes your e-mail address, card and billing country, and the card payment is processed by Stripe; they also send your receipts. We see the purchase, its status and the country for tax, but never your full card details.
7. Device permissions
- Face ID or fingerprint (optional, to lock the app): handled by your phone; never available to us.
- Photos: only when you choose a profile photo, a screenshot to scan or save a share card.
- Notifications (optional): for your briefing and journaling reminders.
8. Why we process data (legal bases)
We process your account, journal, broker and online-feature data to provide the service you asked for (performance of a contract), and limited technical data such as IP-address counters to keep the service secure (legitimate interests). We do not use your data for profiling, marketing or automated decisions with legal effects.
9. Processors and international transfers
- Cloudflare — hosting of our API, this website and the web app, the D1 database, R2 file storage and Workers AI.
- AnnMar's own servers — broker sync server, market-data feed and AI gateway.
- Brevo — sends sign-in codes by e-mail.
- Apple and Google — sign-in and app-store purchases.
- RevenueCat — subscriptions, subscription status and the web checkout.
- Stripe — card payments for web purchases.
- Third-party AI model providers (Google and others), reached only through our AI gateway, without account identifiers.
- TradeLocker (for TradeLocker accounts) and MetaApi / Agilium Trade (MT4 on iPhone).
Some processors may handle data outside the United Kingdom; where they do, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Addendum to standard contractual clauses.
10. Security
All connections use HTTPS/TLS. Data in our database and file storage is encrypted at rest by Cloudflare; investor passwords are encrypted on our sync server. Session tokens are stored only as hashes. Our websites use a strict Content Security Policy and load no third-party scripts except the Apple and Google sign-in buttons in the web app. Read the Risk & Data Disclaimer for our security risk assessment and its limits.
11. How long we keep data
- Your account and journal: until you delete them, or the account.
- Broker credentials and synced history: while the broker account is connected; deleted from our sync server when you remove it.
- Sign-in codes: 10 minutes. Sessions: until you sign out, or 180 days without use. Security counters: a few hours.
- AI requests: processed to return the result; not used by us to build profiles.
- On-device data: until you delete it or the app (and in your own device backup, under your control).
12. Deleting your data
Delete your whole account in the app (Profile › Account › Delete account) or in the web app (Account › Delete account). This removes your broker connections and their stored passwords, your journal, files, codes, EA data and briefings from our servers. Step-by-step instructions, also without the app: Delete account.
13. Your rights
Under UK GDPR you can ask for access to, correction, deletion or a copy (export) of your personal data, object to or restrict processing, and complain to the Information Commissioner's Office (ico.org.uk). Please contact us first and we will be happy to help; we reply within one month.
14. Children
FX Journal Pro is for adults aged 18 and over and is not directed at children. We do not knowingly collect data from children.
15. Changes
If this policy changes we will update this page and the date at the top; important changes are also shown in the apps.
16. Contact
ANNMAR LIMITED · company no. 16014219 · info@annmarlimited.co.uk. Registered in England and Wales. AnnMar Studio is a trading name of ANNMAR LIMITED.