1. Introduction
AlphaPips ("we", "our", or "us") operates the AlphaPips mobile application (the "App") and the website at alphapips.net. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services.
By downloading, installing, or using the App, or by visiting our website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.
2. Information We Collect
We collect the following categories of personal information:
- Account Information: When you register, we collect your full name, email address, and a securely hashed version of your password. We never store passwords in plaintext.
- Device Tokens: We collect Firebase Cloud Messaging (FCM) device tokens to deliver push notification alerts to your device.
- Usage Data: We may collect anonymised information about how you interact with the App, such as features used and session frequency, to improve the service.
- Device Information: This may include device type, operating system version, and app version for support and compatibility purposes.
- Contact Form Data: If you submit our contact form, we collect your name, email address, and message content.
We do not collect payment card information, broker account credentials, or any financial account data.
3. How We Use Your Information
We use the information we collect to:
- Create, maintain, authenticate, and secure your account
- Deliver real-time trading signal push notifications via Firebase Cloud Messaging
- Verify your email address and prevent unauthorised account access
- Respond to your support enquiries and contact form submissions
- Monitor and improve the performance and reliability of our service
- Comply with applicable legal obligations
4. Firebase & Third-Party Services
AlphaPips uses Google Firebase for push notification delivery (Firebase Cloud Messaging). Firebase is operated by Google LLC and may collect certain device identifiers and usage data in accordance with Google's Privacy Policy.
Our backend signal service is hosted on Railway (Railway Corp). Your data is processed on secure servers and is not sold, rented, or shared with any third-party advertisers.
Our authentication and user data is stored in a MySQL database on our managed hosting provider (Namecheap). All connections use TLS encryption.
5. Data Retention
We retain your personal data for as long as your account remains active. You may request deletion of your account and all associated data at any time via the App settings ("Delete Account") or by contacting us at accounts@alphapips.net.
Upon account deletion, your personal identifiers are removed from active systems within 30 days, except where retention is required by applicable law or legitimate business interest (e.g. fraud prevention).
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction, including:
- Passwords stored as bcrypt hashes — never in plaintext
- Authentication tokens stored as SHA-256 hashes with expiry dates
- HTTPS/TLS encryption for all data in transit
- Email verification required before account activation
While we take all reasonable precautions, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Children's Privacy
AlphaPips is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately so we can take appropriate action.
8. Your Rights
Depending on your location, you may have the following rights in relation to your personal data:
- The right to access the personal data we hold about you
- The right to rectify inaccurate or incomplete data
- The right to erasure ("right to be forgotten")
- The right to restrict processing in certain circumstances
- The right to data portability
- The right to object to processing based on legitimate interests
To exercise any of these rights, please contact us at accounts@alphapips.net. We will respond within 30 days.
9. Cookies & Local Storage
Our website uses PHP session cookies solely for functional purposes such as CSRF token protection on the contact form. We do not use tracking cookies, advertising pixels, or third-party analytics.
10. International Data Transfers
Your data may be processed on servers located outside your country of residence (including USA-based cloud infrastructure). Where this occurs, we ensure appropriate safeguards are in place consistent with applicable data protection law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date at the top of this page. Your continued use of the App or website following any changes constitutes your acceptance of the revised policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: accounts@alphapips.net
- Web: alphapips.net/contact.php