Privacy Policy

01 Overview

Winners ("we", "us") is a market-education game for iOS, published by Winners. This policy explains what personal information we collect when you use the Winners app, why we collect it, who we share it with, and the choices you have.

The short version. We collect the identity you sign in with, the preferences you give us during onboarding, and a record of your learning and practice progress so we can save it and sync it across your devices. We run no advertising, we do not track you across other apps or websites, and we do not sell your data. The simulator uses virtual currency only — we never connect to your bank, hold real funds, or place real trades. You can delete your account and all associated data at any time from within the app.

This policy applies to the Winners iOS app. This marketing website (winnersapp.app) is a static page: visiting it does not require an account, and we do not collect personal information through it.

02 What we collect

Account identity. When you create an account with Sign in with Apple, Apple gives us a unique user identifier and, depending on your choice, your name (shared once, at first sign-up) and either your email address or an Apple private-relay ("Hide My Email") forwarding address. We never receive your Apple password.

Onboarding preferences. Your stated learning goal, experience level, areas of interest (such as stocks or crypto), and how many minutes per day you want to practice.

Profile. An optional display name and a customizable avatar you build in the app.

Activity you create as you play. Linked to your account, we store your course and lesson progress, quiz attempts, practice-simulator activity (virtual positions, virtual balances, and simulated profit or loss — always virtual currency, never real funds), badges and tier progression, your streak and activity calendar, discipline and consistency metrics, and your WIN token balance and reward history. WIN tokens are in-app reward points with no monetary value — they cannot be purchased, withdrawn, or exchanged for money.

Technical data. The basic technical data needed to run the app and keep your account secure. When the app shows live prices, charts, or asset icons, your device requests that content from third-party market-data and content providers; those providers see your device's IP address and request details, but not your account information.

What we do not collect. We do not collect your location, contacts, photo library (other than a single chart image you deliberately choose to send to Sage for analysis — see §04), camera, microphone, or health data. We do not use advertising identifiers (such as IDFA), we do not track you across other companies' apps or websites, and we show no App Tracking Transparency prompt because we perform no such tracking.

03 How we use it

• Run the app. Create and secure your account; save, sync and display your progress, simulator activity, rewards and streaks across your devices.
• Coach you in context. Power and personalize the Sage coaching experience from your own in-app data.
• Notifications you asked for. If you grant permission, we register a push token via Apple's Push Notification service so we can send you a daily market brief and occasional educational nudges (capped per day, controllable in the app). You can turn notifications off at any time in iOS Settings.
• Support & safety. Provide help when you write in, keep the app secure, prevent abuse, and meet our legal obligations.

We do not use your information for advertising, and we do not sell it.

04 Sage & AI

Sage is an educational AI coach. When you chat with Sage, ask it to read a chart image, or request a market or trade review, the content you send (your message, an uploaded chart screenshot, or a short summary of your own practice data) is transmitted to our AI processing provider, Anthropic, under our API keys, solely to generate that response and return it to you.

• Sage conversations are stateless by design: we do not retain your chat messages or uploaded chart images on our servers as a stored record, and they are not used to train AI models.
• Your recent conversation history is kept only on your device, in encrypted local storage, so you can continue a conversation. Deleting the app, or clearing the conversation, removes it.
• Sage provides educational analysis only and displays an "educational, not financial advice" notice. It is not a licensed adviser and does not provide personalized real-money investment advice.

05 Sharing

We do not sell your personal information. We share it only with the service providers needed to run the app, each under contract and only for the purposes above:

• Apple — for Sign in with Apple and push-notification delivery.
• Supabase — our backend, database and authentication provider (hosting your account and progress data).
• Anthropic — AI processing for Sage, as described in §04.
• Market-data and content providers — which your device contacts for prices, charts and icons (they receive your IP address, not your account data).

We may also disclose information if required by law or to protect our users or others, and as part of a business transfer (such as a merger or acquisition), with notice to you where required.

The app and this website may link to third-party services that have their own privacy policies — including, where available, an external regulated brokerage or live-trading site. Winners does not operate those services, does not process real-money trades, and is not responsible for their content or privacy practices. Once you leave, this policy no longer applies; please read the privacy policy of any site you visit.

06 Retention & deletion

We keep your personal information for as long as your account is active or as needed to provide the app. You can delete your account and all associated data at any time in the app (Settings → Delete Account); doing so removes your account and the personal data linked to it, and anonymizes operational telemetry, except where we must retain limited records for legal, accounting or security reasons. Data stored locally on your device is removed when you delete the app.

International transfers. We and our service providers may process and store your information in countries other than the one you live in, including where our backend infrastructure is located. Where required by applicable law, we put appropriate safeguards in place for such transfers. By using the app, you understand your information may be transferred to and processed in those locations.

Security. We protect your information using industry-standard measures, including encryption of data in transit (TLS), securely hashed credentials, database row-level security (so each user can only access their own data), and encrypted on-device storage for sensitive local content such as Sage conversations. No method of transmission or storage is completely secure, but we work to protect your information and to address vulnerabilities promptly.

07 Your choices

Subject to your local law, you may ask us to access, correct, export, delete or restrict the use of your personal information, and object to certain processing. You can exercise any of these — or ask a question — by emailing privacy@winnersapp.app.

• EEA / UK users have rights under the GDPR and UK GDPR (access, rectification, erasure, restriction, portability, objection, and the right to complain to a supervisory authority). Our legal bases are performance of a contract, our legitimate interests in a secure and functional app, your consent (for example, notifications, which you can withdraw at any time), and compliance with legal obligations.
• California users have rights under the CCPA/CPRA (to know, delete, correct, and opt out of any "sale" or "sharing" — which we do not do for advertising).
• Users in other countries, including Iraq and the UAE, may have additional rights under local data-protection law and can contact us to exercise them.

08 Age requirement

The app is intended for users 18 years of age or older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, contact privacy@winnersapp.app and we will delete it.

09 Changes

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, provide a more prominent notice in the app or by email. Your continued use of the app after an update means you accept the revised policy.

10 Contact