Privacy policy

Friendly Trader is run by Nala Financial LLC, doing business as Stocks With Josh, SWJ and The Friendly Trader ("we" or "us"). On the App Store, our seller name appears as NALA LLC.

This policy covers the Friendly Trader app, the web app at app.thefriendlytrader.com, thefriendlytrader.com, and the tool services those apps use at stockswithjosh.com addresses, such as MACD, Patterns, Stop Finder, Earnings and Economy. It also covers stockswithjosh.com.

It is part of our Member Agreement. Services we link to, such as Whop, TradingView, Zoom and YouTube, have their own policies.

What we collect depends on what you use. The app asks everyone to read and sign the Member Agreement first, and the web app asks when you sign in.

Your Member Agreement signature

You sign by typing your full legal name. The signing screen in the app also asks for an email address, which you can leave blank (see "Optional emails"). We save your name with the Agreement version and a fingerprint of its exact text, the date and time, how long you had it open, that you scrolled to the end, your install ID or Whop user ID, your chat account ID if you have one, your app version, platform, device model, system version, language and region, time zone, IP address and browser or app identifier.

We use this record to show that you accepted the Agreement (section 1.4). If you dispute a charge you authorized, we may give it to the payment processor with your account activity (section 10.5). We may also use it in any other dispute with you. This record cannot be edited, and it stays after you delete your account.

Your account, membership and payments

In the app, you do not need an account for Stop Finder, Earnings and Economy, and the rest is for members. Some of the web app also works with no account. Whop runs our memberships, and your plan decides what opens.

Signing in with an email code. In the app, members type the email address on their membership and a six-digit code we email them. The address goes through our server to Google, which sends the code from our no-reply mailbox, and a copy of that email stays in the mailbox. In our own records we keep a scrambled form of the address and the code for 10 minutes, and scrambled counters that limit how often an address or a network can ask. We look the address up in our copy of Whop's member records, and we do not say whether an address is a member until the code is right.

Signing in through Whop. The web app signs in through Whop. In the app, you can connect your Whop account if no membership is on your email or a code email cannot be sent. That happens on Whop's own page, so we never see your Whop password.

From Whop we receive your Whop user ID, email address, username and display name, and your plan and membership status. We keep the email address for your coaching and giveaway emails, starting when you first use coaching. If you linked Discord on Whop, we also receive your Discord ID and username, and we may show public role badges from our Discord server on your chat profile. We keep a copy of Whop's member, payment and support records in a company database, refreshed from Whop, to check membership, help with support and run the business. If you use our Discord server, its messages are kept there too. Chat accounts link to Whop through a scrambled form of your Whop ID.

If you buy a membership in the app, we record which install started the checkout and which plan, so the payment can be matched to you without a second sign-in. If you buy under another email while signed in, we link that second Whop account to yours so its plan applies. Settings, Membership shows which email your membership is on.

Whop takes payment and holds your card details. We receive what we need to run memberships and bookings: the plan or booking, the amount, whether a payment succeeded or was refunded, and a payment reference.

An email address you gave us may also be checked against Whop's records to show your plan.

Your device and install

When the app first runs, our server gives that install its own ID and signed token. Our tool services use them to confirm access. Our server records your IP address each time it issues or renews that token, and keeps the latest one on the install's record. We also receive your device model, system version, app version, language and region, and time zone.

The app asks for the camera to take a profile photo, the microphone to record voice notes, and permission to add photos when you save one from chat. It uses Apple's photo picker, so it sees only the photos you choose. Your browser asks the same way in the web app.

Chat and your profile

To join chat you choose a username and add a photo with a face. The app checks on your device that the photo contains a face. That check does not identify you, and we keep no face data from it. The photo itself is uploaded as your profile picture.

We store what you add to your profile: name, bio, trading style, experience, interests, goals, cover and pinned post. We store what you do in chat and course discussions: messages, photos, video, voice notes, GIFs, polls, reactions, wins with their entry and exit prices, reports, blocks, mutes, follows, friends, saved posts and what you have read. We store voice notes as audio and do not transcribe them today.

Other members can read what you post in rooms and see your profile, subject to your settings in Profile privacy. Chat is for members. Every member who can open a room can read what is posted there, so do not post anything you want kept private.

Software screens the text you post for spam, scams, off-list links and banned words. It does not screen photos, video or voice notes, but moderators can see them. If it blocks a post, we keep up to 300 characters of it in our moderation records. Moderators can review reports, see a member's history and remove posts.

Live sessions, coaching sessions and chat may be recorded, transcribed and stored, including your voice, image, name and messages (Member Agreement section 8.2). To stay off a recording, keep your camera and microphone off or do not join.

The Member Agreement (section 12.1) lets us use your posts, wins, profile name and photo to run and promote the service, including in the app, on our websites, in emails and in advertising. Wins can appear beyond chat, such as on the app's locked screens and in marketing. You can ask us to stop using your content in new marketing by writing to support.

Pip

Pip is our AI assistant. Some screens call it Friendly. When you ask Pip something, our server gathers your question, a text copy of the page you are looking at (up to 8,000 characters), an earlier copy of that page if you asked to be caught up, and your recent questions and answers. In a chat room, it also gathers recent messages from that room with their authors' names, leaving out people you have blocked or muted.

That text goes to an AI model that runs on computers we operate, reached through Cloudflare's network. It does not go to an outside AI company such as OpenAI, Anthropic or Google. Pip's answers are produced automatically, a person does not review them before you see them, and they can be wrong.

We keep your questions and Pip's answers so it can follow a conversation. They are deleted automatically after 30 days. You can clear them sooner with Clear on Pip's screen in the app or in Settings on the web. We also keep a usage log for each request with its time, size, room and any thumbs up or down, without the question or the answer. Moderators can see this log, and they can use the same model to help sort reports. A summary Pip writes of a room can be reused for other members who ask within 24 hours. We do not use your questions to train AI models.

Notifications

If you turn on notifications, we store a push token from Apple or a subscription from your browser, along with your notification choices. Apple or your browser's push service delivers each notification, so its text passes through them. You can turn notifications off at any time in your device or browser settings.

Optional emails

The signing screen asks for an email address. You can leave it blank, and nothing depends on it. The line beside the field says what it is for: "Get emails from Friendly Trader. Unsubscribe anytime." If you type an address, we store it with that wording and when you agreed, which screen you were on and any ticker it showed, your quiz result, your app version, and the country your connection came from. We do not store your IP address with it. An address you use only to sign in as a member does not go on this list.

We keep your address with that record. We are not sending marketing email now. You can ask us to remove your address at any time by writing to support. Account and legal notices are not optional while you have an account (Member Agreement section 20.2).

Learning, tools and searches

We store your quiz answers and result, course and practice progress, lesson records, achievements, watchlists and alerts. Some of this stays only on your device or in your browser, such as saved stop plans and display settings.

Tickers you look up go to our tool services to fetch the data. Chat searches go to our chat service. GIF searches go through our server to Tenor, a Google service, which receives the search words but not your account. GIF previews load directly from Tenor, so it can see your IP address. A GIF you send is copied to our own storage.

How you use the app

The app records events such as opening the app, opening a tab or tool, looking up a ticker, answering the quiz and tapping a plan, along with your quiz result, tied to your install ID. Our tool services also count actions per tool under a scrambled account key. The web app records when you are active so it can show who is online. This data helps us run the service, fix problems and see what is working.

Coaching and giveaways

If you book coaching, we store the coach, session, times, status, price, payment status and reference, and the time zone used in your emails. Your coach sees your display name and the session details, not your email address. We send booking confirmations and reminders to the email address on your account. If you win a prize session and have no membership, we ask for your name when you book it. Your coach sees that name. If you later join the community, that name is removed and you choose a display name. Ratings shown on coach pages come from Whop. Sessions may be recorded (Member Agreement section 8.2), and your coach may send you a replay link.

To spin in a giveaway you need an email address on file: the one Whop gives us when you sign in, or one you type. We email winners at that address, and also use it for your coaching emails. Your coach does not see it. It is not how you sign in, and we do not use it for marketing unless you asked for those emails separately. If you enter a giveaway, we also store your entries and results, what you confirmed when entering, such as your age and that no purchase was needed, the country and state you gave, and any prize and prize code. To limit spins per day, we store a scrambled, salted form of your network address for that day, not the address itself. Each giveaway also has its own official rules.

The web app and this website

The web app uses two cookies, and only to keep you signed in: one for your session, which lasts up to 24 hours, and one for a sign-in in progress, which lasts 10 minutes. It uses no advertising or analytics cookies. Your browser's local storage keeps your appearance settings, watchlists, drafts and tool settings. During sign-in we use a scrambled form of your network address to limit repeated attempts. Our tool sites at stockswithjosh.com addresses use similar sign-in cookies.

The home page and FAQ on thefriendlytrader.com set no cookies and load nothing from other companies. Some older pages load fonts from Google, which can see your IP address. The companies that host our sites log visits, including IP addresses.

stockswithjosh.com. If you use the contact form, we store your name, email address and message. If you join the newsletter, we store your email address and the portfolio size you chose. We are not sending newsletter email now. Our pages record events such as a view or a click under a random ID kept in a cookie for about 13 months, with the page, device type, screen width, the site that sent you, any campaign tag and your country. If you join the newsletter, we keep that ID with your address. Going to Whop through one of our links can set Whop's affiliate cookie.

TradingView, if you connect it

You can choose to connect your TradingView account so setups can be drawn on your charts. To do that we start a browser on a computer at our hosting provider, Vercel, and stream it to your screen. You sign in there with TradingView, or with Google or Apple through TradingView. We do not ask for your password in a Friendly Trader form, but what you type passes through that hosted browser.

We save only what is needed to keep you signed in: TradingView's cookies and the browser's encryption data, encrypted with AES-256-GCM in a separate database, plus your TradingView account name and a record of what you sent. We keep the session until you disconnect or delete your account. Cookies for other sites, saved passwords and browsing history are not saved. Our worker opens your chart and adds drawings when you press send.

You can disconnect at any time, which ends our access and clears the saved session. Our record of what you sent stays, with the account name on it. Deleting your Friendly Trader account also disconnects TradingView and clears the account name and details from that record.

The Safari extension, Friendly Patterns for TradingView, runs only on our Patterns site and on TradingView chart pages. It carries the setup you picked onto the chart.

• Brokerage logins, positions or trade history. We do not connect to your brokerage. Any entry or exit prices we hold are ones you post yourself.
• Card numbers or bank details. Whop holds those.
• Your precise location. The app does not use location services. We know your time zone, the country and state if you give them, and the country your connection came from when you give an optional email.
• Your contacts.
• Apple's advertising identifier. The app contains no advertising or third-party analytics kits and does not ask for permission to track you.

• To run the app, web app, chat, Pip, tools, courses, coaching and giveaways.
• To check your membership and open what you have paid for.
• To keep the community safe: filters, reports, moderation, suspensions and bans.
• To send notifications, account and legal notices, and booking emails.
• To see how the service is used, fix problems and plan improvements.
• To support members, run the business and understand why members join and leave, using Whop's records and our Discord server. Those reports are not built from your posts or activity in Friendly Trader.
• To prove your acceptance of the Member Agreement, enforce it, answer payment disputes and meet legal duties.
• To promote the service with member posts and wins, as the Member Agreement allows (section 12.1).

Other members can see your posts and profile. Moderators and staff can see posts, reports and member history. Your coach can see your display name, or the name you gave when you booked, and session details.

One designated administrator can view the app as a plan or as a given member, read only, for testing and support. That view shows only a member's public identity and plan, not their email, messages, bookings or progress, and each session is logged.

These companies help us run the service:

Company	What for	What they receive
Whop	Memberships, sign-in through Whop, checkout, refunds, coach ratings	What you give Whop directly, and from us, the plan or booking you are paying for
Apple	App Store, push notifications	Push tokens and notification text
Supabase	Our main database, file storage and server functions	Most of what this policy describes, including posts, media, Pip history, signature records and email addresses
Vercel	The web app, stockswithjosh.com, the MACD, Patterns and Stop Finder services, and the hosted browser for TradingView	Your requests, IP address, install or account token, watchlists and alerts, and what you do in that browser
Railway	The Earnings service	Your requests, IP address and install token
Cloudflare	Carries traffic to services we run on our own computers, such as membership checks and Pip	Your requests, IP address and install token, and for Pip, the text described above
Resend	Newsletter emails, when we send them	Your email address and name
Google (Tenor)	GIF search	Search words from our server, and your IP address when previews load
Google (Workspace)	Sign-in codes, coaching and prize emails, and email to our support and legal addresses	Your email address and name, the code, session or prize details, and what you send us by email
Google (Fonts)	Fonts on some older pages of this site	Your IP address
Browser push services	Web notifications, if you turn them on	Your browser subscription and notification text
Zoom, YouTube, Microsoft Teams	Live rooms and coaching, when you open a link	What you share with them directly
GitHub	Hosts thefriendlytrader.com	Visit details, including IP address
TradingView	Your charts, if you connect your account	What you sign in with there, and the drawings you send

We use these companies only to run the service, and we require them to protect your information at least as well as this policy does.

Market data companies receive tickers from our servers, not who asked. Some official posts are imported into the app from Discord, and the app does not send your data to Discord.

We may also share information when the law requires it, to protect people's safety or our rights, to answer a payment dispute, or as part of a merger, sale or reorganization of our business (Member Agreement section 22.5).

We do not sell your personal information or share it for targeted advertising.

• Pip questions and answers: 30 days, or until you clear them.
• Email sign-in codes: 10 minutes in our own records. A copy of the email stays in the sending mailbox at Google.
• Web app sign-in: up to 24 hours for a session and 10 minutes for a sign-in in progress.
• Your TradingView session: until you disconnect or delete your account.
• Your posts and profile: until you delete them or your account.
• Copies of deleted posts: when you or a moderator deletes a post, we keep a private copy of its text and media for moderation and safety until you delete your account.

We have not set fixed time limits for our other records, including your signature record, usage events, IP address history, reports and moderation records, booking and payment records, giveaway records, email consent records and Whop records. We keep them while your account is active, and afterward for as long as we need them to meet legal duties, resolve disputes, prevent abuse and keep accurate business records.

In the app: tap your picture on Home, open Settings, scroll to the foot of the page and choose Delete account. You do not need a chat profile to do this. On the web: open Settings and choose Delete account. If you cannot reach either, write to support.

Deleting does not cancel a Whop or Apple subscription or close your Whop account (Member Agreement section 19.1). Cancel first, or you may keep being charged.

What deletion removes

• Your profile, name and photo. Your name is replaced with a generated one.
• Your posts, including their text, photos, video and voice notes, and our private copies of posts you or a moderator deleted earlier.
• Your reactions, votes, follows, friends, blocks, mutes, saved posts, read markers and notification settings.
• The push tokens and browser subscriptions held by our chat service.
• Your Pip history, learning records, course progress and achievements.
• Your sign-ins to our chat service, the link between that install and your Whop account, and any second Whop account linked to yours.
• Your saved TradingView session, and the account name and details in the record of what you sent.
• Your pattern alerts and their push tokens, your usage counts, your membership profile, your install's IP address history and the record of which install started a checkout.
• In the app, your email sign-up from that install. An address that another install also gave stays on file for that install.
• The settings, cached photos and credentials stored on that device.

What stays

• Your Member Agreement signature record.
• An empty placeholder for each post, with its date and room and the generated name, so threads still make sense. For a post deleted earlier, we also keep when it was deleted and by whom, without its contents.
• Reports you made, reports about you and moderation records, including up to 300 characters of any post our filter blocked.
• Booking, payment, prize and giveaway records.
• Usage events tied to your install ID, and Pip usage logs.
• A small closed-account record with a scrambled ID and a deletion receipt, so that the deletion holds and can be confirmed.
• Whop's records and our copy of Whop's member and payment records, which refresh from Whop. Whop's own policy applies to what it holds.
• The record of your install connecting to Whop, which keeps those connections consistent.
• Posts already used in marketing, and anything other people copied before you deleted it.
• Copies in backups and service logs, until they age out.

• Control who sees your posts and wins in Settings, Profile privacy. You can also block and mute people there.
• Clear your Pip history at any time, and disconnect TradingView at any time.
• Turn off notifications, and refuse camera, microphone or photo access, in your device or browser settings. Features that need them will stop working.
• Ask us to remove your email sign-up.
• Block cookies in your browser, though you will not be able to stay signed in to the web app.
• Cancel your membership on Whop, and delete your account as described above.
• Ask for a copy of the Member Agreement (section 1.3).

Depending on where you live, you may have the right to ask what we hold about you, get a copy, correct it, delete it, opt out of certain uses, and appeal if we say no. To ask, email legal@thefriendlytrader.com from the address on your account or tell us that address. We may need to confirm it is you. We will not treat you differently for asking.

Our connections use encryption in transit. Database rules keep private records away from other members, and chat photos, video and voice notes are delivered only to signed-in members. No system is perfectly secure, so we cannot promise that your information will never be accessed without permission.

Friendly Trader is for adults. You must be at least 18 to use it (Member Agreement section 2.1). We do not knowingly collect information from anyone under 18. If you believe someone under 18 has given us information, email legal@thefriendlytrader.com and we will take steps to delete it.

We operate from the United States. Your information is processed there and in any other country where the companies above operate. If you use the service from outside the United States, its privacy laws may differ from those where you live.

When we change this policy we will update the date at the top. For a significant change we will also tell you in the app or by email before it takes effect.

Privacy requests and legal notices: legal@thefriendlytrader.com

Everything else: support@stockswithjosh.com