Privacy policy

This policy covers rewire.trading and the Rewire app, run as a solo early-access project. If you are in the European Economic Area, the UK, California, or anywhere else with its own privacy law, the rights in this policy apply to you the same way.

Account information: your email address, a hashed password (we never store the plain text), and the username you choose.

Practice data: streak, XP, discipline score, which lessons and drills you have cleared, and the dashboard style and other settings you pick.

Payment information: handled entirely by Stripe. Rewire receives a payment confirmation, the plan you bought, and a transaction reference, never your card number.

Technical data: your IP address and browser user agent, kept briefly for rate limiting, abuse prevention, and a security log of account activity such as sign-ins and plan changes.

Anything you send us directly, such as a support email.

Rewire sets one required cookie to keep you signed in. It is not used for advertising or cross-site tracking. The app may also use your browser's local storage to remember on-screen preferences, such as a dashboard style, entirely on your device. We do not currently run third-party analytics or ad-tracking pixels on the site.

To run the product: authenticate you, save your progress, process payment, and answer support. To keep the service secure: detect abuse, enforce rate limits, and investigate problems. Occasionally, in aggregate and never in a way that identifies you personally, to understand which parts of Rewire are working. We do not sell your data and do not share it for advertising.

We use a small number of service providers to run Rewire, each of whom only sees what they need to do their job:

• Stripe, to process payments. See Stripe's own privacy policy for how it handles card data.
• Cloudflare, which hosts the app, the database, and the access logs used for security.
• Resend, to deliver account emails such as sign-in codes, when that feature is turned on.

We do not sell or rent your data to anyone, and we do not share it with advertisers or data brokers.

We keep your account and progress data for as long as your account is open. If you ask us to delete your account, we remove your personal data within a reasonable time, except where we need to keep a record (such as a payment record) for legal or accounting reasons.

Wherever you are, you can ask us at any time to: see the personal data we hold about you, correct it, export it, or delete your account and the data tied to it. If you are in the EEA, UK, or a similar jurisdiction, you also have the right to restrict or object to certain processing, and to complain to your local data protection authority if you are unhappy with how we handle a request.

Rewire is run from Australia. We handle personal data in line with the Australian Privacy Principles. If you are in Australia and are not satisfied with how we have handled your personal data, you can also contact the Office of the Australian Information Commissioner.

To use any of these rights, email bhallaniman289@gmail.com. We will respond as quickly as we reasonably can.

Our hosting and payment providers operate infrastructure in multiple countries, so your data may be processed outside the country you live in. Where that happens, we rely on our providers' own safeguards (Stripe and Cloudflare both publish their own data protection commitments).

Rewire is not directed at children and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email us and we will delete it.

Traffic to Rewire is encrypted in transit (HTTPS). Passwords are hashed, never stored in plain text, and session tokens are stored as hashes as well. No system is perfectly secure, and we cannot guarantee against every possible breach, but we take reasonable, standard precautions to protect your data.

If this policy changes in a meaningful way, we will update the date at the top of this page. Continuing to use Rewire after a change means you accept the updated policy.

Questions about this policy, or a request about your data: email bhallaniman289@gmail.com.