Privacy Policy

Skylr (“we”, “us”, “our”) is operated by ZAWAYA GCC ADVERTISING & MARKETING COMPANY, a company registered in Kuwait. This Privacy Policy explains what personal data we collect when you use the Skylr iOS app and skylr.app, why we collect it, where it’s stored, and the choices you have.

We aim to collect the minimum data needed to run a trade-journal product that works across multiple devices. Skylr is not an advertising business, we do not sell your data, and we do not use it to train machine-learning models.

1. Data we collect

1.1 Account data

When you create a Skylr account we collect:

• Email address — used for sign-in, verification, and account-related messages.
• Password — hashed by our authentication provider (Supabase Auth). We never see your raw password.
• First and last name — for greetings inside the app and on the web account page.
• Optional phone number + country code — stored if you choose to add it.

1.2 Trade and portfolio data

Everything you enter as a trade, wallet, fee preference, or PnL reset is stored so the app can show it back to you and sync across your devices. This includes:

• Trade records (asset, type, quantity, price, fee, date, optional note).
• Wallet records (name, kind, colour, icon, default flag).
• Realized-profit reset markers.
• App settings (default fees, favourite assets, base currency).
• Exchange connections you set up (API keys are stored encrypted).

1.3 Subscription data

Your current billing tier (Free / Pro / Pro Annual) is stored on your profile. When billing goes live, payment processing will be handled by a regulated third party (e.g. Stripe or RevenueCat); we never receive or store your card details.

1.4 Technical data

When you use Skylr, our hosting and analytics providers may record standard technical signals: IP address, browser / device type, timestamps, and pages visited. We use these to keep the service running and to diagnose issues. We do not use third-party advertising cookies.

2. Where your data lives

Skylr’s primary database is Supabase, a PostgreSQL platform hosted on AWS in the EU region (eu-central-1 by default). Daily encrypted backups are retained for 30 days. Auth credentials are stored separately in Supabase’s Auth service, also hosted on AWS.

Static web assets (images, CSS, JS for skylr.app) are served by Vercel via their global edge network. Vercel may receive request-level metadata (IP, country, user agent) to route the request.

Email is sent by Resend (or your authentication provider’s built-in sender) for verification, password reset, and account messages.

3. Third-party data feeds

Skylr fetches live and historical asset prices from public APIs:

• CoinGecko — cryptocurrency prices and historical charts.
• Twelve Data — stock prices and historical charts.

These services receive the asset symbols you hold, but never receive your trade quantities, prices, account ID, or identity. They simply return the public market data for those symbols.

4. How we use your data

• To run the Skylr app and website — display your portfolio, sync between devices, send verification emails.
• To respond to support requests you send via the in-app Contact form.
• To process billing (when Pro / Pro Annual subscriptions go live).
• To diagnose bugs and improve performance (aggregate, non-identifying analytics).
• To comply with legal obligations under Kuwaiti or applicable law.

5. Who we share data with

We share data only with the service providers above (Supabase, Vercel, Resend, CoinGecko, Twelve Data, future billing processor), and only the minimum each provider needs to do its job. We do not sell your data. We do not share it with advertisers.

We may disclose data if compelled by a valid legal order in Kuwait or another jurisdiction where we operate. We will tell you about such requests unless legally prohibited.

6. Your rights

You may, at any time:

• Access your data — visit your account page or email us.
• Correct your name, phone number, or profile data inside the app.
• Export your trade data as a spreadsheet from inside the app (Settings → Export).
• Delete your account and all associated data — email us at wt@zawayagcc.com. Once we complete deletion (within 30 days), your trades, profile, wallets, resets, and exchange connections are permanently erased from our primary database and the next backup rotation.

7. Children

Skylr is rated 17+ on the Apple App Store and is intended for adults. We do not knowingly collect data from anyone under 17. If you believe a minor has registered, email us and we will delete the account.

8. Changes to this policy

We may update this policy as the product evolves. The “Last updated” date at the top reflects the most recent revision. For material changes (e.g. a new data category, a new processor), we will notify you by email before the change takes effect.

9. Contact us

Questions, requests, or complaints about this policy: wt@zawayagcc.com

ZAWAYA GCC ADVERTISING & MARKETING COMPANY
Kuwait