MarketEd · a Flaronix app

Privacy Policy

Last updated: October 24, 2026

MarketEd is an app made by MarketEd LLC ("we" or "us"). This policy explains what information MarketEd collects, why, and what you can do about it. It also covers the MarketEd pages on our website, flaronix.com.

The short version

We collect only what MarketEd needs to run your account and the game. We don't sell your information, we don't show ads, and no outside company tracks or analyzes how you play. If the app crashes, a crash-reporting company (Sentry) may get a report with no personal details. You can delete your account and its data at any time, in the app or by email. "Feature by feature" below shows, for each part of the app, what it uses, who sees it and how long we keep it.

What we collect

Account details you give us: your username, your email address, and your password (stored only in a scrambled form that we can't read).
When you sign up, the month and year you were born, only to check your age. We never save them. If you're under 18, we keep one thing worked out from them: the month your under-18 limits end (the month after you turn 18). On that day the limits end, and we keep that date with your account only so that what you played before it stays out of our totals (see "How we use it"). If sign-up can't go ahead, the phone keeps only a note of that for a day.
Where a law requires it, or where the phone can't tell, the app asks Apple or Google for your age range (see "Children"). The answer stays on your phone and never reaches us.
Your language choice, and when you agreed to the Terms of Use and this policy.
Your activity in the game: your mock-money balance, your plan (Apple or Google tells us which plan you have, its dates, whether it will renew, the price and currency you paid, and a purchase reference number; we never see your card details or your Apple or Google account), your trades and holdings, your Portfolio's total at the end of each day (with its cash and any top-up that day, for your value chart and, on Pro and Elite, Your results), the leagues you join or create (including the league names you choose and, as a private league's host, its pennant, trophy name and pinned note), your draft picks, the assets you star as game favorites, your Weekly Pick'em picks, your Bottom Call guesses (each one you save, with its time), the Cups you enter, the ten picks you make in them and any bracket you fill out, your Clout, the Look you pick for your own player card (Elite), and your results.
Chat messages you send in your leagues and Trading Cups, the reactions you add to messages, and any reports you make (about a message, a league's pinned note or a player) and blocks you make. For public leagues and Cups, we also store whether you turned chat off there, any temporary mute, and a history of past mutes (used to make a repeat mute longer).
Technical information created when the app connects to our servers, such as your IP address and the type of device, kept in our hosting provider's logs. Each login (each phone or browser you're logged in on) is also recorded with an IP address and the type of device or browser it used: our login provider keeps this as part of the login, and we don't use it for anything else.
Update checks: once each time the app is opened, after an adult has signed in, it asks Expo whether a fix is waiting (see "Who we share it with"). It never asks while no one is signed in, or for a player we know is under 18. This sends a random number made for this copy of the app (never your account, username or email address), the type of phone system, the app's version and, if the app couldn't start last time, the error message.
Phone notifications: if you're 18 or older and allow notifications when your phone asks (on iPhone, for now), the app sends us your phone's notification address (a code that lets a notice reach MarketEd on that phone, not your phone number), the time zone your phone is set to (not your location) and, each time you open the app, that you did. We also keep a record of each notice we queue or send you (which kind, your league's name and your result) and which kinds you turned off in Profile.
If a screen hits a fault, the app sends one line to our database: which screen, the kind of fault, the app's version and the type of phone system. Nothing in it says who you are, and we keep only daily totals, for 90 days.
Crash reports: if the app crashes or hits an error while you're signed in, and you're 18 or older (or 13 to 17 with "Send crash reports" turned on in Profile), the app sends a report to Sentry (see "Who we share it with"). It holds the kind of error and a short text about it, which part of our code it came from, the app's version and build, your phone's model and system version, and the screen's name. For errors in the app's screens, we first remove anything that looks like an email address, an IP address or the details after a question mark in a web address from that text. It holds no username, email address, account number, game activity or chat. If the whole app closes, the report also carries the phone's basic settings, such as its language, time zone and screen size. Sentry's servers see your IP address when a report arrives, as any server would; we've set Sentry not to keep it, or the rough place worked out from it. Sentry may add a random number made for this copy of the app; it isn't linked to your account. Reports are deleted after 30 days. Nothing is sent before you sign in, and turning "Send crash reports" off stops it at once.
If you send feedback from the app: your message, the app version and the type of device. We keep it, with a note of which account sent it, for 30 days.
For our daily totals: the last day you opened the app (one date, nothing more). If you're under 18, we keep nothing for this unless you turn on "Count my play in totals" in Profile.
If you email us: your message and your email address, so we can answer you.
If you test an early version of MarketEd through Apple's TestFlight: Apple shares with us the feedback and screenshots you send, crash reports, your type of device and how often you opened the test version, and, if we invited you by email, your name and email address. We use them only to fix and improve MarketEd.
If you sign up on our website (flaronix.com/test) to test MarketEd before it is in the App Store: your first name, your email address, your ticks (you have an iPhone, you're 18 or older, you've read the form's privacy note, and you agree to our Tester Terms) and when you sent the form. Google Forms runs the form for us and keeps the answers in a private Google Sheet that only we can open. We use them only to invite you and to email you about the test, and we give your email address to Apple's TestFlight to send the invite. We delete the sign-up list within 90 days of the test ending, or sooner if you email support@flaronix.com.
When you sign up, log in, ask for the confirmation email again, reset your password, change your email, or enter your password again in Profile (to change it or delete your account), the app may ask you to pass Cloudflare's bot check, a small box that checks you're a person. Cloudflare sees your IP address and basic browser details (see "Who we share it with"); our login provider gets only a one-time pass, which it checks with Cloudflare.
If you visit our website, flaronix.com: it uses no cookies, ads, or tracking, but Cloudflare, which hosts it, keeps basic visit records such as your IP address. Apart from Cloudflare's bot check (in the app, and on our website's sign-up page; see "Who we share it with"), no other company collects information about what you do across other websites through MarketEd or our website.

We don't collect your location, contacts, photos, or advertising ID. The app also saves your login and your settings (such as colorblind mode) on your device, and, until you sign in on that device (for at most 7 days), the email address you're waiting to confirm so you don't have to enter them again.

How we use it

We use your information to create and secure your account, run trading, leagues, and drafts, show leaderboards and results, keep prices and balances correct, send account emails such as password resets and the emails about a paid plan, prevent cheating and abuse, fix bugs, and answer your questions. We don't use it for advertising and we don't sell it. We also count, in totals only, how many people open the app and play each day, which games they play and how many come back, to learn how to make the game better. We do this ourselves: no outside analytics or tracking company is involved, and we never look at one person's play this way (our owner's AI assistant may help read these totals; see "Who we share it with"). If you're under 18, your play is left out of these totals unless you turn on "Count my play in totals" in Profile. It's optional and off until you turn it on, the game works the same either way, and you can turn it off at any time. When your under-18 limits end (the month after you turn 18), the app tells you once, the next time it starts. From that day your play counts in these totals like every adult's; what you played before that day stays out for good, whatever that switch said, and we don't ask you to add it. (The number of people who opened the app each day, which never says who they were, keeps anyone it counted while their switch was on.) We also use crash reports, only to find and fix crashes and errors; for players 13 to 17 they're sent only if "Send crash reports" is on in Profile, a separate choice that is also optional and off until you turn it on. If you allow phone notifications, we use your phone's notification address, its time zone and when you last opened the app only to send the notices you've left on, never between 10 PM and 8 AM your time (except "Draft in 10 min" for a draft your league's host set), and we stop once you haven't opened the app for 7 days.

What other players see

Your username and your results can be seen by other players. In leagues you join, your roster, draft picks, and standing are visible to the other members, along with the league's name. Your email address and password are never shown to other players. In Bottom Call, once a round is settled, the best scores are listed for all players, with each player's username and final guess; nobody's guess is shown before then. In Weekly Pick'em, your picks for a week are shown to the other members of that league once that week's picks lock (never before), and your Pick'em points, and any Clout they won when the season ended, appear in that league's Pick'em standings. Chat messages are visible to the other members of that league, except anyone who has blocked you; a message the chat keeps private is seen only by you. In a private league, the host's pennant, trophy name and pinned note are seen by its members (the note isn't shown to anyone who has blocked the host or reported it). When a host starts a private league's next season ("Run it back"), the league's record book shows everyone in any of its seasons the champions, all-time standings and head-to-head records of its finished seasons, with usernames. In a Trading Cup, your chat messages are visible to the other people playing in that Cup (up to fifteen, including anyone knocked out), except anyone who has blocked you. Reactions to a message are shown only as counts (how many people added each one), never who added them. In The Trading Cup's waiting room, the people waiting see your username and whether you voted to start. In The Trading Cup, the other fifteen entrants can see your username and your ten picks from the moment picking closes, and your returns once the rounds are played; your name appears in that Cup's bracket and its list of matchups. If you fill out a bracket prediction, nobody else sees it, and once brackets lock your username and bracket points, and any Clout your bracket won when the Cup ended, appear in that Cup's bracket standings. A league's or Cup's race view shows the people in it each team's score as a line through the week or round, with the biggest moves among each team's picks: usernames, picks and percentages only. Your calls for a Cup's next round are never shown to anyone else. If you choose to share a result (a Cup win, a Bottom Call result or a league title), the message you share carries your username and your result, plus the league's name for a league title; a screenshot you take shows the same. Sharing is always your choice. So the league, Cup and chat screens work, the phones of the other members (in a Cup, the other people playing in it) also receive an ID number for your account. It is never shown on screen, isn't your name or email, and doesn't change when you change your username.

Feature by feature

Here is each part of MarketEd that uses personal information: what it's for, what it collects, what it uses and how, who else sees it, which companies handle it, and how long it's kept. Supabase, which hosts our database and logins on servers in the United States, stores everything the app keeps. Where the rules are different for players under 18, the entry says so. No part of MarketEd uses your information for ads or sells it, and we hire no analytics company. The exceptions are Expo's own overall statistics, described under "Fixes and faults", and the overall figures Sentry may keep, described under "Crash reports". So the league, Cup and chat screens work, the phones of the other members (in a Cup, the other people playing in it) also receive an ID number for your account. It is never shown on screen, isn't your name or email, and doesn't change when you change your username.

MarketEd has no recommendation feed and no system that picks or recommends things for you. Lists are in the same order for everyone (Markets in a fixed order, search results by how well they match, the Leaderboard by Clout). The only things placed around you are your own: your holdings first in the moving price strip, your own place on the Leaderboard, and your own draft queue when the draft picks for you (after it, the same ranking everyone gets). A Cup lineup the app fills for you is filled at random.

Your account

For: making your account, logging you in and keeping it secure.
Collects: your username, email address and password (stored scrambled), when you signed up, your language, when you agreed to the Terms and this policy, whether you've finished the welcome tour, when you last changed your username, a record of each login with its IP address and type of device or browser, and a count of some recent actions (such as creating or joining leagues and Cups, wrong league codes and chat reactions) for our speed limits.
Uses: your email address to log you in and send account emails, your username to show you in games, and the counts to stop too many actions too fast.
Who sees it: other players see your username, never your email address.
Companies: Supabase (stores it and runs the logins). Resend sends account emails, so it receives your email address and those emails. Cloudflare runs the bot check the app may show on its sign-up, log-in and account screens, so it sees your IP address and basic browser details.
Kept: while your account exists. A sign-up never confirmed is deleted after 7 days. A login record is deleted when you log out (a log-out made with no internet connection can't reach us, so then it stays until your next log-out). An old username is held for 30 days after you change it or delete your account. If one of our automatic steps for your account fails (setting it up, or giving invite Clout), our note of the error, with your account's number, is deleted after 30 days.

Age check

For: keeping MarketEd to people 13 and older, and giving players under 18 safer settings.
Collects: when you sign up, the month and year you were born, read on your phone only. If you're under 18, we receive one thing worked out from them: the month your under-18 limits end.
Uses: under 13, sign-up stops on the phone, which keeps only a note of that for a day. Under 18, the month switches on the limits described under "Children". When they end, the app tells you once (we keep only whether that notice is still waiting), and the date they ended is used only to keep what you played before it out of our totals. Where a law requires it, or where the phone can't tell whether one does, the app also asks Apple or Google for your age range; the answer stays on your phone and is used only for those limits. Your phone also remembers the first version of MarketEd it ran and, if a new part of the app ever needs an OK (a parent's, or your own if you're an adult), the answer.
Who sees it: nobody else.
Companies: Supabase (stores the month). Apple or Google give the age range and a parent's answer on your phone; we never receive them.
Kept: the month and, after that day, the date the limits ended, while your account exists. What's on your phone stays until you remove the app.

Portfolio

For: the mock-money market game.
Collects: your mock-money balance, trades and holdings, orders waiting to fill, your monthly top-ups, and your Portfolio's total at midnight New York time each day (with its cash and any top-up that day).
Uses: these and market prices, to make your trades, fill or cancel your waiting orders, show your holdings and gains, draw your value chart and, on Pro and Elite, show Your mix and Your results.
Who sees it: only you.
Companies: Supabase. The companies that supply prices receive nothing about you.
Kept: while your account exists, except a waiting order's own record: 30 days after it fills or is cancelled (a filled one's trade stays with your trades).

Plans and free tries

For: paid plans, and the free tries before them.
Collects: from Apple or Google, which plan you have, its dates, whether it will renew, the price and currency you paid, what it renews into, whether it was a test purchase or refunded, and a purchase reference number (never your card details); the random number we give Apple for your account; a note of each email we send about your plan; on Elite, the Look you pick for your player card; and a record of each league, Cup and Bottom Call round you finish (not practice), which counts your free tries.
Uses: to unlock your plan and its top-ups, count your free tries, and send the emails about a plan (a confirmation, a note after each monthly renewal, a reminder before a yearly renewal, and notice of a price rise).
Who sees it: only you.
Companies: Supabase. Apple or Google take the payment and tell us about it; the app gives Apple a random number for your account, never your email address or username. Resend sends the plan emails, so it receives your email address and those emails.
Kept: the plan and game records while your account exists; Apple's notices 90 days; each email note 2 years, or until you delete your account; Resend's copies up to 30 days.

Fantasy Leagues

For: leagues with a draft and a season.
Collects: the leagues you join or create and the names you give them, your draft picks (and whether the draft made one for you) and draft queue, and its pennant, trophy name and pinned note if you host a private league. If a private league's host removes you, we also keep a note of that (which league, who removed you and when).
Uses: to run the draft (when your time runs out it picks from your queue), score matchups and standings, give Clout, and draw the race view and, for a league run back, its record book. A removal note stops that league's code (and its next seasons') letting you back in, and shows you one short notice.
Who sees it: the league's members see your username, picks, scores and standing, and the host's pennant, trophy name and note. In a league run back, everyone in any of its seasons sees the record book, with usernames. If you leave after the draft or the host removes you, the others see your team as "Departed player". A removed player is told only that the host removed them; our note of the removal is seen only by us.
Companies: Supabase.
Kept: while the league exists, which is until its last member is gone. A removal note is kept while that league exists, or until the removed player deletes their account. If you delete your account, your picks and standings stay without your name. Practice drafts are deleted when you finish or quit them (or after 3 hours), and the race view's scores 8 days after each week.

Weekly Pick'em

For: picking the winners of your league's matchups each week.
Collects: your picks, the points you put on each, and the points you score.
Uses: to score your picks and give the season's top three Clout.
Who sees it: the league's members see your picks once the week's picks lock (never before), and the Pick'em standings. If you leave after the draft or are removed, your points stay in the standings as "Departed player", without your name.
Companies: Supabase.
Kept: while the league exists; deleted with your account.

The Trading Cup

For: 16-player knockout tournaments.
Collects: the Cups you enter, your vote to start, your ten picks, your results, any bracket you fill out, and your calls for the next round.
Uses: to start and run the Cup, score each round and your bracket, and give Clout.
Who sees it: in the waiting room, the other entrants see your username and whether you voted to start; once picking closes, your picks, then your returns. Your bracket stays hidden; once brackets lock, only its points and how many winners it got right show. Your calls are never shown.
Companies: Supabase.
Kept: while your account exists. If you delete it, your seat in a Cup that has started stays as "Departed player", without your name. Calls are deleted 7 days after the Cup ends, the race view's scores 30 hours after each round, and practice Cups within 12 hours.

Bottom Call

For: guessing the next day's lowest price.
Collects: each guess you save, with its time, and your score.
Uses: to score your guesses by how close they were and how long they stood, rank players, and give Clout.
Who sees it: once a round is settled, its best scores are listed for all players, with each player's username, final guess and score. Nobody sees a guess before then.
Companies: Supabase.
Kept: while your account exists.

Clout and the Leaderboard

For: the score you build across games.
Collects: each amount of Clout you're given and what it was for.
Uses: to add up your Clout and place everyone on the Leaderboard; your own total also shows who is just above and below you.
Who sees it: other players can see your username, place and Clout total on the Leaderboard.
Companies: Supabase.
Kept: while your account exists.

Your record

For: looking back at your own finished games.
Collects: nothing new.
Uses: your own league, Cup and Bottom Call history, and prices, to show your results and how other picks would have done.
Who sees it: only you.
Companies: Supabase.
Kept: nothing extra is kept.

Game favorites

For: picking faster in league drafts and Trading Cups. You tap a star on an asset, and each of those lists gets a Favorites tab. It isn't a Portfolio list and changes nothing about what your plan can trade.
Collects: the assets you star and when you starred each one. We also count how many times we've shown you the tip that explains the star, so we can stop showing it after four.
Uses: only to show you your own favorites. We don't use them for totals, emails or anything else.
Who sees it: only you. No other player can see your favorites.
Companies: Supabase.
Kept: each favorite until you take its star off (or we remove that asset from the game); the count until you delete your account.
Under 18: the same, except that where your phone's app store requires a parent's OK for a new feature, favorites stay off until a parent or guardian agrees.

Phone notifications

For: telling you, if you allow them (on iPhone, for now), when your game needs you or has a result: a draft your league's host set starts in an hour and in 10 minutes, your league week's result, your Trading Cup starting and each round's result, your season starting tomorrow, a top-3 finish in Bottom Call, and someone joining a league you host. Never ads, prices or reminders to come back.
Collects: your phone's notification address, the time zone your phone is set to, when you last opened the app on it, which kinds you turned off, and a record of each notice we queue or send you (its kind, your league's name and your result).
Uses: only to send the notices you've left on: at most one an hour for each game (not counting the two draft reminders), none from 10 PM to 8 AM your time (except "Draft in 10 min" for a draft your host set), and none once you haven't opened the app for 7 days.
Who sees it: only you. A notice can show on your lock screen, so it never names another player.
Companies: Supabase; Expo, which passes each notice to Apple's notification service to deliver it.
Kept: the address and time zone until you log out on that phone or delete your account, until the notification service says the address no longer works, or 30 days after you last opened the app on that phone; each notice's record for 30 days; your on/off choices until you delete your account.
Under 18: none. MarketEd sends no notifications to anyone under 18 and keeps no notification address for them.

Chat

For: talking with the people in your leagues and Trading Cups.
Collects: your messages, your reactions, who you block, whether you turned a chat off, and any mutes (with their dates).
Uses: to show messages to the others, check every message against our word lists (a few are refused, held for our review or kept private), hide what people you blocked send, and apply mutes. In private leagues, as in public ones and Cups, everyone's messages follow the strangers' rules on contact details and other apps, and a few unsure messages are held for review.
Who sees it: the other people in that league or Cup, except anyone who blocked you. A message reported by 3 or more people is hidden from everyone. Reactions show only as counts. A message kept private is seen only by you, and a held one only by you and us.
Companies: Supabase. Resend emails us any message held for review (see "Reports and safety"), and Google hosts the mailbox it arrives in.
Kept: league chat while the league exists; Cup chat until a day after the Cup ends (longer while a report about it is open or kept for the authorities, or for up to a week while a message there is held). Your messages are deleted with your account. A mute's record is deleted a year after the mute ends; blocks and chat settings stay while your account exists.
Under 18: no chat in public leagues or Cups.

Reports and safety

For: letting players report a message, a league's pinned note or a player, and dealing with threats.
Collects: your report and its reason, a copy of the reported message or note, the reported username, and a copy of any chat message refused as a threat against a school or of mass violence, with its writer's username.
Uses: to review reports, mute or act, and meet our legal duties. An automatic mute counts only reports from different email inboxes and from accounts at least 3 days old.
Who sees it: only us. If you're muted automatically, you see up to 3 of your reported messages and the reasons, never who reported them.
Companies: Supabase. Resend emails us an alert with the message or note, the usernames involved (including the reporter's), the reason and note, the league or Cup, and whether the writer is muted (never an email address); Google hosts the mailbox it arrives in. If the law requires it, we report to the National Center for Missing & Exploited Children.
Kept: a report until a year after we deal with it, even if either person deletes their account (without the reporter's name); a refused threat 30 days. Longer only if we pass it to the police or the National Center for Missing & Exploited Children (one year for the Center, as the law requires). The alert emails are deleted from our mailbox within 90 days.

Invite friends

For: giving you and a friend Clout when they join with your code.
Collects: which account invited yours, if you typed an invite code at sign-up, and when your account counted.
Uses: to give each of you Clout once, and to check that your email inbox isn't the inviter's or that of another friend they invited (if it is, the invite doesn't count).
Who sees it: the person who invited you sees only numbers, never who.
Companies: Supabase.
Kept: while your account (the invited one) exists. If the person who invited you deletes theirs, the record stays on your account, no longer linked to anyone. Clout already given stays.

Send feedback

For: telling us about a problem or an idea.
Collects: your message, the app's version, the type of device, and which account sent it.
Uses: to read it and fix things; the account is used to limit you to 5 messages a day. It reaches us by email without your username or email address, so we can't answer it there.
Who sees it: only us.
Companies: Supabase. Resend emails it to us with its time and a reference number, and Google hosts the mailbox it arrives in.
Kept: 30 days, or until you delete your account. The email is deleted from our mailbox within 90 days.

Daily totals

For: learning how to make MarketEd better.
Collects: the last day you opened the app (one date, replaced each day) and, if you're under 18, your "Count my play in totals" choice.
Uses: that date and the records the app already keeps (sign-ups, games, trades, plans, invites, language and chat counts), counted only in totals (such as how many people open the app and play each day, which games, how many come back). We never look at one person's play this way.
Who sees it: nobody; we see only totals.
Companies: Supabase. No analytics company.
Kept: the date until you next open the app; deleted with your account.
Under 18: if your sign-up age answer shows you're under 18, the date isn't kept and your play isn't counted unless you turn on "Count my play in totals" in Profile (optional, off until you turn it on); turning it off deletes the date. What you played before your under-18 limits ended is never counted, even after you turn 18.

Fixes and faults

For: keeping the app working.
Collects: if a screen hits a fault, which screen, the kind of fault, the app's version and the type of phone system, with nothing that says who you are. Once each time the app is opened, after an adult has signed in, an update check.
Uses: fault reports are only added to daily totals. The update check asks Expo whether a fix is waiting, sending a random number made for this copy of the app (never your account), the type of phone system, the app's version and, if the app couldn't start last time, the error message.
Who sees it: nobody else.
Companies: Supabase (the fault totals). Expo (the update checks, which also show it your IP address; it also uses your IP address and any error message for its own overall usage statistics and to improve its service).
Kept: fault totals 90 days. Expo states no fixed time for keeping its update records. If we stop using Expo, we ask it to delete the records it keeps for us within 90 days; its own statistics aren't covered.
Under 18: when we know the signed-in player is under 18 (from the sign-up age answer or Apple's or Google's age answer), the phone never asks Expo for fixes and gets them only with app updates from the store. A phone where no one is signed in doesn't ask either. Expo's own statistics can still include a player under 18 whose age we don't know, and we can't switch that off.

Crash reports

For: finding and fixing crashes and errors.
Collects: if the app crashes or hits an error while you're signed in, the kind of error and a short cleaned-up text about it, which part of our code it came from, the app's version and build, your phone's model and system version and the screen's name (if the whole app closes, also the phone's basic settings, such as its language, time zone and screen size); no username, email address, account number, game activity or chat. Sentry's servers see your IP address when the report arrives; we've set Sentry not to keep it, or the rough place worked out from it. Sentry may add a random number made for this copy of the app, not linked to your account.
Uses: only to find and fix crashes and errors, never for ads, profiles or sale.
Who sees it: only we do, in Sentry.
Companies: Sentry, in the United States, handles the reports for us under its Data Processing Addendum. It may also keep overall figures that identify no one (such as how common an error is) to improve its own service.
Kept: 30 days at Sentry.
Under 18: for players 13 to 17, reports are sent only while "Send crash reports" is on in Profile (optional, off until you turn it on, and separate from the totals choice; we keep that choice with your account); turning it off stops it at once. Nothing is sent before you sign in.

Settings on your phone

For: remembering your choices on that phone.
Collects: nothing for us. Your phone keeps your login, your settings (look, colorblind mode, sound and vibration), which chat messages, result cards, tips and guided rounds you've already seen, the last start-up check from our server (such as whether an update is needed), when the chat's help card last showed (so it shows at most every 4 hours), and, for up to 7 days, the email address you're waiting to confirm.
Uses: to keep you logged in and show the app the way you left it. Only the login is sent to us, to show it's you; to light the chat's unread dot, the app also sends the newest message you've seen, which we don't keep.
Who sees it: nobody else.
Companies: none.
Kept: until you remove the app. Logging out or deleting your account removes the login.

Emails with us

For: answering your questions and requests.
Collects: your email address and what you write.
Uses: to answer you and do what you ask (such as deleting your account).
Who sees it: only us.
Companies: Google hosts the mailbox we use for support.
Kept: in our support mailbox for 2 years after the last message in the conversation, even if you delete your account, then deleted.

The launch email list on our website has its own section below. Website visits, the tester sign-up form and testing early versions through TestFlight are covered under "What we collect".

Invites

If you sign up with someone's invite code, we record which account invited yours, so we can give each of you Clout when yours counts. The person who invited you sees only numbers (how many people joined with their code, how many counted and how many earned them Clout), never who; you see the same numbers for your own code. Your invite code is your username, so sharing your invite, or telling someone your code, shares your username. Sharing is always your choice and goes through your phone's own share sheet; we don't read your contacts. We don't keep the code you typed, only the link between the two accounts. If you delete your account, that link is deleted too; if the person who invited you deletes their account, yours is simply no longer linked to anyone. Clout already given stays with the person who received it, and nothing in their record points to you by name.

The launch email list

On our website (flaronix.com/marketed) you can ask us to email you when MarketEd comes out on your phone. This list is separate from MarketEd accounts.

What we keep: your email address, the kind of phone you chose, the page's language, and when you signed up and confirmed. The page also asks the month and year you were born, only to check your age: your answer stays in your browser and is never sent to us. If the page can't sign you up, your browser keeps only a note of that for a day.
What we send: an email to check the address is yours (a new one only if you sign up again, 3 at most), then one email when MarketEd is out on your kind of phone. Nothing else.
Who helps: Supabase stores the list, and Resend sends the two emails (and keeps them for up to 30 days). The sign-up page uses Cloudflare's bot check, which looks at things like your IP address and browser to tell people from bots. Cloudflare also uses those details to improve its bot detection, under its own Turnstile privacy notice. We don't keep your IP address or device details for the list.
How long: if you don't confirm within 7 days of our email, we delete your address. Once your launch email has gone, your address is deleted from the list straight away. You can take yourself off at any time with the link in either email, or by emailing support@flaronix.com.

We never sell the list, share it, or use it for anything else.

We share information only with companies that help us run MarketEd, and only as needed. Supabase hosts our database and login system, on servers in the United States. Resend, also in the United States, sends our account emails (such as the email that confirms your address, and password-reset emails), so it receives your email address and those emails. It also sends us an alert when a player reports a chat message or another player, or when our checks hold a message for review, so it receives that message (or the reported username), the report's reason and note, the league or Cup, the usernames involved and whether the writer is muted (never an email address). It also sends us any chat message refused as a threat against a school or of mass violence, with its writer's username and the league or Cup. It also emails us the feedback players send from the app: only the message, when it was sent, a reference number, the app version and the type of device, never a username or email address. Resend keeps the emails it sends for up to 30 days. Cloudflare hosts our website and runs our bot check (in the app's sign-up, log-in and account screens, and on our website's sign-up page), so it sees your IP address and basic browser details. Google hosts the mailbox we use to answer your emails, and runs our tester sign-up form (Google Forms) and the private Google Sheet that holds its answers. Expo, in the United States, delivers small fixes to the app's screens and wording without a new download. Once each time the app is opened, after an adult has signed in (never with no one signed in, or for a player we know is under 18), the app asks Expo's servers whether a fix is waiting, so Expo receives your IP address, the type of phone system, the app's version, a random number made for this copy of the app (never your account, username or email address) and, if the app couldn't start last time, the error message. Expo handles these checks for us. Separately, Expo also keeps your IP address and any error message to work out its own overall usage statistics and to improve its service, which aren't tied to your account, username or email address. Expo states no fixed time for keeping these records. If we stop using Expo, we ask it to delete the records it keeps for us within 90 days; its own statistics aren't covered. Expo also delivers our phone notifications: it receives your phone's notification address and each notice's words (such as your league's name and your result, never another player's name) and passes them to Apple's notification service, which shows them on your phone. Expo handles this for us under the same Data Processing Addendum. Sentry, in the United States, receives the crash reports described under "What we collect" (adults only, and players 13 to 17 only if they turn on "Send crash reports" in Profile). Sentry handles them for us under its Data Processing Addendum, stores them in the United States and keeps them for 30 days. Separately, Sentry may keep overall figures that identify no one, such as how common an error is, to improve its own service. These companies may use your information only to provide their service to us, and they must protect it at least as well as this policy promises. Three exceptions. First, Cloudflare's bot check also uses what it sees (your IP address and basic browser details) to improve its bot detection for all its customers, under Cloudflare's own Turnstile privacy notice. Second, Expo's own statistics, described above. Third, the overall figures Sentry may keep, described above.

If you buy a paid plan, Apple or Google handles the payment under its own terms and tells us which plan you have; we never see your card details. So that Apple's notices about your plan reach the right account, the app gives Apple a random number for your account when you buy (never your email address or username). Resend also sends you the emails about your plan (a confirmation, a note after each monthly renewal, a reminder before a yearly plan renews, and notice of a price rise), so it receives your email address and those emails. The companies that supply market prices don't receive any information about you. Our owner uses an AI assistant, Anthropic's Claude, to help build and run MarketEd. To do that it can reach our database, but we use it only with the app's code, our totals, our status checks and the wording of our own replies to you: never with your email address, chat messages, reports or feedback, and never to build a profile of you or to sell anything. The one exception: in October 2026 it helped us send the tester invites, so it saw the first names and email addresses on the tester sign-up list. It no longer opens that list.

We may also share information if the law requires it (for example, we report apparent child sexual exploitation to the National Center for Missing & Exploited Children), or to protect the safety and rights of players and MarketEd. If MarketEd is ever sold or merged, your information may go with it, and we'll tell you if your choices change.

How long we keep it

We keep your information while your account exists. When you delete your account (see "Delete your account" below), we permanently delete your login, email address, username, balance, trades and holdings, chat messages, and the rest of your personal history in the game. Some records that other players' games depend on, such as draft picks, league standings and Cup results, may stay, but without your name. A league you created stays if other people are still in it. Our hosting provider's security logs, which include IP addresses, are kept for up to 7 days, and backup copies for up to 7 days before they are overwritten. The record of each login, with its IP address and type of device or browser, is kept until you log out or delete your account (a log-out made with no internet connection can't reach us, so then the record stays until your next log-out or until you delete your account). Emails you exchange with us, including a request to delete your account, stay in our support mailbox for 2 years after the last message in the conversation and are then deleted, and our email sender keeps the account emails it sent you for up to 30 days. We may keep limited records if the law requires it or to deal with abuse or disputes. When someone reports a chat message, a league's pinned note or a player, we keep the report, with a copy of the message or note if it was about one and the reported player's username, so we can review it. A report stays if either person deletes their account (without the name of the person who made it), and the alert email we receive about it, about a message held for review or about a refused threat, can stay after anyone named in it deletes their account; we delete these alert emails within 90 days, unless we have passed one to the police or the National Center for Missing & Exploited Children. Once we have dealt with a report, it is deleted a year later. If we report something to the National Center for Missing & Exploited Children, we keep that report, and a private copy of what we reported and the chat around it, for one year, as the law requires. A chat message that threatens a school or mass violence is refused, and we keep a copy of it, with the sender's username, for 30 days so we can act on it (even if the account is deleted), or longer only if we have passed it to the police or the National Center for Missing & Exploited Children. A record of a chat mute (and which reported messages caused it) is deleted a year after the mute ends. When you change your username, or delete your account, the old username is held for 30 days so nobody else can take it and pretend to be you, and is then deleted. A note pinned by a league's host is deleted when the host changes or removes it, leaves the league or deletes their account, or when the league is deleted. League chat messages are kept while the league exists, and yours are deleted with your account. A Trading Cup's chat messages are deleted a day after the Cup ends. If a message there was reported, they are kept until we have reviewed the report; if one was held for our review, for up to a week. Practice drafts are deleted when you finish or quit them, and any left behind are removed automatically after a few hours. If you sign up but never confirm your email address, we delete that sign-up, with its email address and username, after 7 days. Crash reports at Sentry aren't tied to your account and are deleted automatically after 30 days. Feedback you send from the app is deleted after 30 days (it reaches our support mailbox as an email without your username or email address, which we delete within 90 days). If you signed up under 18, the date your under-18 limits end stays with your account after that day, only so that what you played before it stays out of our totals; it is deleted with your account. The last day you opened the app is replaced each day you open it, and deleted with your account. If one of our automatic steps for your account fails (setting it up, or giving invite Clout), our note of the error, with your account's number, is deleted after 30 days. Your Portfolio's daily totals (for its value chart) are kept while your account exists and deleted with it. If you buy a plan, its record (which plan, its dates and what it cost) is deleted with your account, and so is our note of each email we sent you about it (which email it was, for which plan and price; otherwise we keep the note for 2 years). Apple's notices about purchases carry only Apple's purchase reference number; we keep them for 90 days. Apple's notice that a parent or guardian took back their OK for a child names no one: we keep only that it came, for 90 days. If you allow phone notifications, your phone's notification address and time zone are deleted when you log out on that phone, when you delete your account, when the notification service tells us the address no longer works, or 30 days after you last opened the app on that phone, whichever comes first. A log-out that can't reach us (for example with no internet connection) can't delete it then: that phone gets no notices once the app hasn't been opened there for 7 days. Our record of each notice is deleted 30 days after we queued it, and your notification switches are deleted with your account.

Delete your account

You can delete your MarketEd account at any time, with or without the app.

In the MarketEd app: open Profile → Delete account and enter your password to confirm. The account is deleted straight away.
Without the app: email support@flaronix.com from the email address your account uses, with the subject "Delete my MarketEd account", and include your username if you know it. We check that the request comes from the account's owner, delete the account within 30 days, and email you when it's done. If you can no longer use that email address, write to us anyway and we'll help you show that the account is yours.

If you have a paid plan, deleting your account doesn't cancel it, and neither does removing the app. Apple or Google bills the plan, so cancel it with them first or you may keep being charged: on iPhone or iPad, open Settings → your name → Subscriptions → MarketEd → Cancel Subscription; on Android, open Google Play → Subscriptions → MarketEd → Cancel subscription.

When the account is deleted, your login, email address, username, balance, trades and holdings, chat messages and personal game history are permanently deleted. What can stay is explained under "How long we keep it": records other players' games depend on (without your name), leagues other people are still in, reports about you or by you (without your name) and copies of chat messages someone reported, a refused chat message that threatened a school or mass violence (for 30 days), your username for 30 days so nobody else can take it, emails you exchanged with us (and feedback you sent from the app, which reached us without your name), our email sender's record of the account emails it sent you, and security logs and backup copies for up to 7 days.

Your choices and rights

You can change your language, your password and your email address, and delete your account, in the MarketEd app under Profile. If you're 18 or older, Profile also lets you turn each kind of phone notification on or off, and your phone's Settings can turn them all off. If you're under 18, Profile also has two separate switches, "Count my play in totals" and "Send crash reports", which decide whether your play is counted in our totals and whether crash reports are sent. Both are optional and off until you turn them on, MarketEd works the same with them off, and you can turn either off at any time. Depending on where you live, you may also have the right to ask what information we hold about you, to correct it, to get a copy, or to have it deleted. To use any of these rights, email support@flaronix.com and we'll answer within a reasonable time. We don't sell personal information or share it for advertising.

Keeping it safe

Connections to our servers are encrypted, passwords are stored in a scrambled form, and database rules make sure each person can only read their own account data. No system is perfectly secure, so please choose a strong password and don't share it.

Children

MarketEd is for people 13 and older. When you sign up we ask the month and year you were born, and we don't let anyone under 13 make an account. Where a law requires it (such as in Texas), or where the phone can't tell whether one does, the app also asks Apple or Google for your age range each time it opens. That answer stays on your phone while the app is open: we never save it or send it to our servers, and we use it only for the limits in this section. If it says you're under 13, MarketEd can't be used; if it says you're 13 to 17, you get the limits below; if a parent has turned on Screen Time's communication limits, all chat is off. If a parent or guardian takes back their OK, Apple or Google stops MarketEd opening for you, and your account and everything in it stay as they were. We don't knowingly collect information from anyone under 13. If you're 13 to 17, chat in public leagues and Trading Cups is off, because the players there are strangers. Chat in private leagues works, but everyone's messages there follow the strangers' rules on contact details and other apps, and a few unsure messages are held for review, so nothing in a league shows whether a player under 18 is in it. If your sign-up answer shows you're under 18, you can leave a private league at any time, even after its draft, and its host can remove anyone from it. Your play is counted in our totals only if you turn on "Count my play in totals" in Profile, and crash reports are sent only if you turn on "Send crash reports" there. Both are optional, off until you turn them on, and not needed to play. MarketEd sends no phone notifications to anyone under 18 and keeps no notification address for them, whatever the phone allows. To end these limits when you turn 18, we keep only the month they end. On that day your two choices are reset, the app tells you once (the next time it starts) that the limits have ended, and from that day on your play is counted like every adult's; what you played before stays out of our totals for good, and we keep the date the limits ended only for that. If you think a child under 13 has an account, email support@flaronix.com and we'll delete it. If you think we have your age wrong, email support@flaronix.com and a person will look at it.

Where your data is stored

Our servers are in the United States. If you use MarketEd from another country, your information is sent to and stored in the United States, where privacy laws may differ from those where you live.

Changes to this policy

If we change this policy in a meaningful way, we'll tell you in the app or by email before it applies, and update the date at the top. If a change would use or share information we already have in a way that gives you less privacy, we'll ask for your OK first.

Contact us

Questions or requests about your information? Email support@flaronix.com.