Privacy Policy
Last updated: October 12, 2026
This Privacy Policy describes how Nikklab Inc., the entity that operates ContinuationTrades (“Nikklab”, “we”, “us”, “our”), collects, uses, and shares information when you use our websites, iOS or Android apps, and related services (collectively, the “Service”).
1. Information We Collect
Account information. When you create an account, we collect your name, email address, a hashed password when you use password sign-in, and authentication-provider identifiers when you use Sign in with Apple or Google. We may also retain encrypted authentication tokens where needed to maintain the connection or revoke it when you delete your account.
Subscription and purchase information. Website and mobile purchases are managed through RevenueCat and processed by the applicable payment provider or store, including Stripe, the Apple App Store, or Google Play. We do not receive or store your full payment-card or bank-account details. We receive and retain limited billing records such as provider and customer identifiers, the product and plan selected, purchase and subscription status, entitlement dates, renewal or cancellation status, transaction and webhook records, and limited fraud-prevention signals such as a payment-method fingerprint where available.
Usage and security data. We record product interactions and security events needed to operate and protect the Service, including sign-ins, account and brokerage connection events, watchlist changes, order activity, timestamps, IP addresses, browser or app user-agent information, and related error information. We use these records for authentication, service operation, fraud and abuse prevention, customer support, reliability, and aggregate product analytics.
Brokerage connections and live trading. If you use the optional live-trading feature, you connect your supported brokerage account through the provider's authorization flow. The brokerage provider handles your username and password; we do not receive or store them. We store encrypted OAuth tokens or authorization references and account information such as an account identifier, account number, balances, positions, and order and execution records as needed to display the connected account and route the orders you initiate.
Watchlists, preferences, and paper trading. We store symbols you add to a watchlist; chart drawings; notification, display, and trading preferences; and paper-trading information such as simulated balances, positions, orders, and stop or target instructions. This information is linked to your account so it remains available across supported devices.
How you found us. When you arrive at our website from a link or another site, we note the campaign tags in that link (such as utm_source), any partner code, the name of the site that sent you (not the page), the first page you landed on, and when. If you create an account, we keep this with your account, together with the platform you signed up on and, if you choose to answer, how you heard about us. We use it only to understand which channels bring us customers.
Cookies and device storage. We use essential cookies, secure session storage, and device-local storage for authentication, security, app preferences, and remembering choices such as cookie consent. We also use one first-party cookie, kept for up to 90 days, to remember how you found us until you create an account. We do not use third-party advertising or cross-site tracking cookies.
2. How We Use Information
- To authenticate users and provide the Service, including alerts, charts, watchlists, paper trading, and optional brokerage connectivity and order routing.
- To process purchases, manage subscriptions, and maintain access entitlements across supported platforms.
- To communicate with you about your account, security events, billing, and product updates you opt into.
- To monitor, troubleshoot, and improve the Service, including aggregate product analytics.
- To understand which marketing channels and partners bring us customers.
- To prevent abuse, fraud, and unauthorized access.
- To comply with legal obligations.
3. Third-Party Service Providers
We share information with a small set of vendors that help us operate the Service:
- RevenueCat — subscription offerings, purchase validation, subscription management, and access entitlements across the website, Apple App Store, and Google Play.
- Stripe — payment processing for website subscriptions. Card details are entered into Stripe's secure fields and never reach our servers.
- Apple and Google — authentication when you choose their sign-in service and payment processing for purchases made through their respective app stores.
- moomoo — optional brokerage authorization, account connectivity, and routing of orders you initiate. The provider processes brokerage credentials and account data under its own terms and privacy policy; ContinuationTrades does not hold customer funds.
- Market-data providers — licensed third-party real-time market data (we send no personal data; we only receive market data).
- Cloudflare — DNS, edge proxy, DDoS protection.
- Resend — transactional and permitted service email, including account confirmation, password reset, billing, and service notices.
These providers receive only the information reasonably necessary to perform their services. We do not sell personal information or share it for cross-context behavioral advertising, and we do not display third-party advertising in the Service.
4. Data Retention
- Account information: retained while your account is active. Account deletion disables the account and anonymizes direct account identifiers; some records may remain where needed for the purposes described below.
- Billing, subscription, transaction, fraud-prevention, and accounting records: retained for as long as reasonably necessary for reconciliation, dispute handling, tax, accounting, legal, and fraud-prevention obligations, which may be up to seven years or longer where required by law.
- Brokerage authorizations: retained while the brokerage connection is active and deleted or revoked when the connection is removed, subject to provider behavior and any required transaction or security records.
- Watchlists, preferences, chart drawings, paper-trading records, and order records: retained while needed to provide the Service and maintain account, transaction, security, and audit history.
- Server logs: retained for up to 90 days.
Retention periods may be extended where reasonably necessary to comply with law, resolve disputes, enforce agreements, investigate fraud or abuse, or protect the Service and its users.
5. Your Rights
Depending on your jurisdiction, you may have the following rights with respect to your personal information:
- Access — request a copy of the data we hold about you.
- Correction — request that we correct inaccurate data.
- Deletion — request that we delete your account and associated data, subject to legal-retention exceptions.
- Portability — request an export of your data in a machine-readable format.
- Objection / Restriction — request that we limit how we use your data.
- Withdrawal of consent — withdraw any consent you previously granted.
You can delete your account from the account settings in the Service. You may also exercise these rights by contacting [email protected] from the email address associated with your account. We may need to verify your identity before completing a request.
6. Security
We use industry-standard measures to protect your information, including TLS in transit, hashed passwords at rest, role-based access control, and limited admin access. No security measure is absolute; in the event of a breach affecting your data we will notify you as required by applicable law.
7. Children
The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.
8. International Users
By using the Service, you consent to the transfer of your information to and processing of it in the jurisdiction in which we and our service providers operate. That jurisdiction may have data-protection laws that differ from those in your country.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email and/or an in-app notice.
10. Contact
Questions about this Privacy Policy? Email [email protected].