Legal

Privacy Policy

Effective 26 September 2026 · updated 21 October 2026

Mind Kinetic ("we", "us"), based in the Philippines, makes MK Trading Desk. This policy explains what personal data we handle when you use the MK Trading Desk app, visit mindkinetic.app, or buy a plan, and the choices you have.

In short

  1. 1. Data that stays on your PC
  2. 2. When the app goes online
  3. 3. Fibby
  4. 4. Your account, buying and plans
  5. 5. Trade ideas and coins
  6. 6. The website
  7. 7. Email with us
  8. 8. Who processes data for us
  9. 9. How we use data
  10. 10. How long we keep it
  11. 11. Your rights
  12. 12. Security
  13. 13. International transfers
  14. 14. Children
  15. 15. Changes and contact

1. Data that stays on your PC

MK Trading Desk is built local-first. The following is stored only on your computer, in the app's own storage and in the backups it writes to your Documents\Mind Kinetic\Backups folder:

We cannot see or access this data. It leaves your PC only when you choose to export or share a backup, or in the specific cases in sections 2 to 5. Fibby's voice is generated on your PC; no audio is sent anywhere.

2. When the app goes online

FeatureGoes toWhat is sent
News calendarForexFactory's public calendar feedA request for this week's calendar. Like any web request, it reveals your IP address. Nothing about you or your trading is sent.
FibbyOur servers and our AI provider (see section 3)Your question and a summary of the relevant trading data.
Trade ideasOur servers (Supabase), through our websiteWhat you post (ideas, pictures, comments, appreciations, reports), what you buy for Pips with coins and the days your journal and trades earned coins (see section 5).
Signing in and checking your planOur servers (Supabase), Cloudflare for the human check, and Google if you sign in with GoogleYour email and password, or your Google sign-in, and an identifier for the computer (see section 4).
Links you clickThe website you openLinks open in your own browser, under that website's own policy.

MT5 itself connects to your broker. That connection is between you, MetaQuotes and your broker; MK Trading Desk only reads the files MK Prices writes on your PC.

3. Fibby

Most of Fibby runs on your PC: her warnings, lessons, voice and quick answers never leave it. When you have a conversation with her, or ask for a daily debrief or weekly review, the app sends:

It does not send your MT5 password (MK Trading Desk never has it) or your account password, and it does not send your journal wholesale: only the summary above and the parts a question needs, within those limits. The request passes through our servers, which check your plan and usage allowance, and is answered by Anthropic's Claude models. Our servers keep only usage records (how much of your allowance you used), not the content of your conversations. Anthropic processes the request to produce the answer under its commercial terms, which do not allow it to train its models on this data by default. Your conversation history is stored on your PC.

If you add your own Anthropic API key in Settings → Fibby, the same request goes straight from your PC to Anthropic with your key, under your own agreement with Anthropic, and does not pass through our servers; we see nothing of it. Your key is stored only on your PC, outside the app's database, so it is never in a backup.

You can turn Fibby off in Settings at any time. Nothing is sent while she is off.

4. Your account, buying and plans

Your account. You sign in to MK Trading Desk with an account, on every plan including Free. We keep your email address; the username you pick, which other traders see beside your plan's badge on trade ideas and the leaderboards (your email never is); your password only as a one-way hash, so we never see or store the password itself; when you signed up and last signed in; and the IP address of each sign-in, for security. If you choose Continue with Google, Google confirms your identity and shares your email address and name with us; we do not receive your Google password or any other access to your Google account. We email you six-digit codes to confirm your address and to reset your password. To keep bots out, the sign-in screen runs a human check from Cloudflare Turnstile: Cloudflare looks at signals from your browser (such as your IP address and how the page is used) to tell a person from a bot, and tells us only whether the check passed. It uses no advertising cookies.

When you buy a plan, Whop, our payment provider, collects your name, email address, billing country and payment details, and checkout uses a Whop account under Whop's own privacy policy. Whop shares with us your name, email, country, what you bought, and your payment and membership status, which we link to your account. We never receive your full card or bank details.

To check your plan, the app sends your sign-in and an identifier for the computer: a one-way fingerprint made from your computer's own ID, which cannot be turned back into that ID. For a paid plan we keep the fingerprints of the computers it is on (up to two), with when each last checked in. Nothing about your trading accounts or your journal is sent.

You can delete your account at any time in Settings → Plan. That deletes your account, your username, your plan records, your list of computers, and your trade ideas, pictures, comments and coins from our servers. Billing records that Whop and we must keep by law stay for as long as the law requires. A running Supporter subscription has to be cancelled first.

5. Trade ideas and coins

Trade ideas come with Supporter and OG. Nothing is sent until you use them. When you do, our servers keep:

Your ideas and comments are shown, with your chosen name and mark, to every Supporter and OG who uses trade ideas. We never show your email address or anything about your trading accounts. A picture of your chart shows it as it is, including any dollar amounts on your trade lines, so check it before you post.

Coins. Your journal and your trades earn coins at the end of each day. The app works out what they earn on your PC and sends only which day earned what, for example "a day page on 3 October, 5 coins". It never sends your journal pages, your trades or your account details. Coins have no money value.

You can delete an idea or a comment at any time, and its pictures go with it. Deleting your account deletes your name, ideas, pictures, comments, appreciations and coins; posts you reported stay reported without your account.

6. The website

mindkinetic.app is hosted by Vercel, which keeps standard server logs (IP address, browser, pages requested, time) for security and reliability. The site loads its fonts from Google Fonts, which receives your IP address when the fonts load. The site sets no advertising cookies, and sets analytics cookies only if you accept them (below). If you join a waitlist or sign up for updates, we store the email address you give us and the plan you are interested in.

Google Analytics, only if you accept

When you first visit, the site asks whether it may use Google Analytics. Nothing is loaded and no analytics cookie is set unless you click Accept. If you do, Google Analytics sets its cookies (_ga and _ga_…, kept for up to two years) and Google receives, for each page you open: the page, the page you came from, your browser and type of device, an approximate location worked out from your IP address (Google Analytics doesn't store the IP address itself), and a few actions on the site, such as downloading a free guide or opening the checkout. It never receives your email or anything you type. We use it only to see, in totals, which pages and articles help traders; Google signals and ad personalization are switched off, and nothing is used for advertising. You can change your choice at any time with Cookie settings at the foot of every page. The site remembers your choice in your browser's local storage, not in a cookie.

Our own servers also count each click on the button that opens the Complete Edition's checkout, by day only, with nothing about who clicked.

Free guides

The free guides on our blog (mindkinetic.app/blog) download after you enter your email. For each guide you download we keep, on our servers (Supabase): your email address, which guide, the page you downloaded it from, when, and how many times; and whether you ticked the box asking for our emails, with the time and the exact words you agreed to. To stop bots and abuse, we also keep a scrambled, one-way code made from your IP address and email for one day; it cannot be turned back into either.

7. Email with us

If you write to us, we keep your message and email address to reply and to handle support. Our email is hosted by Zoho. We send account and product emails as needed, such as the codes that confirm your email or reset your password, and notices about your plan, from hello@mindkinetic.app. Whop sends your receipts. We only send marketing email if you asked for it, and every marketing email has an unsubscribe link.

8. Who processes data for us

ProviderWhat for
WhopPayments, tax and receipts
AnthropicAnswers for Fibby
SupabaseAccounts and sign-in, and our database and servers for plans, usage allowances, trade ideas, waitlists, the blog and free guide downloads
VercelHosting the website, which passes the app's requests and trade ideas' pictures on to our servers
ZohoEmail
GoogleSigning in with Google, if you choose it, fonts on the website (Google Fonts), and Google Analytics on the website, only if you accept it
CloudflareThe human check on the sign-in screen (Turnstile)

Each provider handles data under its own privacy policy and only for the service it provides to us. We do not sell or rent personal data, and we do not share it for advertising.

9. How we use data

We rely on our contract with you, our legitimate interest in running a secure service, legal obligations, and, for marketing email, your consent.

10. How long we keep it

Data on your PC stays until you delete it. Uninstalling the app can remove its storage; your backups in Documents stay until you delete them.

11. Your rights

You can ask us to show you the personal data we hold about you, correct it, delete it, or send you a copy. You can object to or ask us to limit how we use it, and withdraw consent at any time. These rights apply under the Philippine Data Privacy Act of 2012 and, where they apply to you, laws such as the EU and UK GDPR and California's privacy laws. Write to support@mindkinetic.app. We will reply within 30 days. You may also complain to your data protection authority; in the Philippines, the National Privacy Commission.

For payment data, you can also contact Whop directly.

12. Security

Connections to our servers are encrypted. Access to our systems is limited and protected. The less we collect, the less can be exposed, which is why your trading data stays on your PC. No system is perfectly secure; keep your PC, your backups and your password safe.

13. International transfers

Our providers may process data in the United States and other countries outside the Philippines. Where required, they use safeguards such as standard contractual clauses to protect it.

14. Children

MK Trading Desk is for adults. We do not knowingly collect data from anyone under 18. If you think a child has given us data, contact us and we will delete it.

15. Changes and contact

We may update this policy as MK Trading Desk changes. We will post the new version here with its effective date, and tell you by email about significant changes if we have your address.

Questions or requests: support@mindkinetic.app