1. Introduction
This Privacy Policy describes how Ticktora (the "App"), operated by Lukshya Arora ("we", "us", "our"), collects, uses, and protects your information. The App is an educational trading simulator — it handles no real money and no real brokerage accounts. By using the App you agree to the practices described here.
2. Information You Provide
Account and sign-in:
Email address and password. Email and password is the only way to sign in to the App — there is no Google, Apple, or phone-number sign-in, and we never ask for or collect a phone number. Your password is stored only as a salted cryptographic hash, so we never store or see it in plain text.
Date of birth. This is required to create an account and is checked on our server to confirm you are at least 13 (see section 11), and to work out whether you are 18 or over, which the Practice leaderboard requires (see section 4). We use it for nothing else, and it is never shown to anyone.
Correcting your date of birth. You can correct it in the Profile tab, with one exception: a change that would make an account under 18 into one aged 18 or over cannot be made in the App. Because the leaderboard is for adults only, that change goes through our support team — write to support@ticktora.com and we will check and correct it.
Profile details (all optional except your name and date of birth; editable in the Profile tab at any time, apart from the one date-of-birth change described above):
Preferred display currency
Self-described trading experience level
Friends:
When you send a friend request you type the other person's email address. That address is submitted to our server for one purpose only — to look up an existing Ticktora account whose sign-in email matches it. If there is a match we record the link between the two accounts. If there is no match the address is discarded, is not stored, and no invitation or other message is sent to it. The App never reads your contacts.
3. Information Created as You Use the App
To make the learning features work, the App stores your activity on our servers:
Quiz attempts and results, and lesson progress
Historical-scenario runs, including your decisions, reasoning choices, and scores
Trade-journal statistics derived from those runs
Hearts (lives), daily activity days, and streaks
Practice Trading activity on the fictional Meridian Exchange — simulated orders, holdings, and virtual cash with no monetary value
Your Practice watchlist — the fictional companies you choose to follow — used only to filter which Meridian newswire headlines you are shown. It is never used to decide what headlines are written.
Your Practice leaderboard handle and your monthly Practice return (see section 4)
A push-notification token for your device, if you turn on reminders. The token identifies the device to the push service rather than you personally, and is deleted when you turn reminders off.
4. The Practice Leaderboard
The App has a worldwide leaderboard that ranks Practice Trading accounts by the percentage return on their own virtual starting cash for the current calendar month (India Standard Time). It is built only from the fictional Meridian Exchange — no real money and no real securities are involved.
What is shown, and to whom:
Your leaderboard handle, your rank, and your Practice return percentage for the current month are shown to other signed-in learners of the App.
Your name, email address, date of birth, virtual cash, holdings, orders, and trades are never shown on the leaderboard.
Your handle is either one we generate for you or one you choose in Profile → Leaderboard. Handles are filtered before they are stored, can be reported or blocked by other learners, and may be reset by our moderators. On the leaderboard, a learner who blocks you sees "A learner" in place of your handle.
Who is included:
Only learners aged 18 or over, which we work out from the date of birth you gave us. Learners under 18, and accounts without a date of birth, are never ranked or shown.
Nobody is ranked before being shown a one-time notice that explains what the leaderboard displays. It is shown in the Practice tab, and on the leaderboard and in Profile → Leaderboard until you answer it. The notice lets you choose to appear ("Show me on the leaderboard") or to stay off ("Keep me off").
An account with no Practice trade in the current month does not appear.
How to opt out: turn off "Show me on the public leaderboard" in Profile → Leaderboard at any time. Your handle, rank, and return are removed from the leaderboard within a few minutes, and you can turn the switch back on whenever you like.
Deleting your account removes your handle and every leaderboard entry for your account (see section 10).
5. Purchases
Subscriptions are billed by the app store you purchased through (e.g., the Apple App Store). We never receive or store your card, bank, or UPI details — payment is processed entirely by the app store.
To activate a subscription, the App sends your app-store purchase receipt to our server for validation. We store the resulting subscription record: the product purchased, your subscription tier, its expiry date, and an app-store transaction identifier used to prevent one purchase from being shared across accounts.
6. What We Do Not Collect
No third-party analytics, advertising, or tracking SDKs are included in the App.
No precise location — only the city and country you choose to type into your profile.
No phone number — the App has no phone or SMS sign-in and never asks for one.
No contacts, photos, microphone, or camera access.
We do not sell or rent your personal information to anyone.
7. How We Use Your Information
To provide and personalise the App — your name in greetings, your preferred currency for display, and your experience level for content.
To confirm you meet the minimum age of 13, and whether you are 18 or over for the Practice leaderboard (date of birth only).
To show your handle, rank, and monthly Practice return on the Practice leaderboard, if you are 18 or over and have not hidden yourself (see section 4).
To filter the Meridian newswire by your Practice watchlist or holdings when you ask it to. This only changes which already-written headlines you see; it never influences what is written.
To operate gamification features: hearts, streaks, and progress tracking.
To send the practice reminders you have opted in to, and to stop sending them when you opt out.
To enforce free-tier limits and activate paid subscriptions.
To keep accounts secure and prevent fraud or abuse, such as blocking one purchase receipt from unlocking multiple accounts.
To comply with applicable law.
8. Sharing of Information
We share information only with:
Infrastructure providers that host the App and its database (currently Netlify), which process data on our behalf.
The app store (e.g., Apple) when validating purchase receipts.
Expo's push notification service (expo.dev), which receives your device push token and the text of the reminder so that it can be delivered to your device. Your email, profile details, and learning history are not sent with it.
DeepSeek (api.deepseek.com), the AI provider used to write coaching feedback on a completed scenario decision. Only coaching-relevant content is sent: the scenario checkpoint text exactly as published in the App, the decision you took, and the reason you gave for it. Your name, email address, user id, account balance, and Practice Trading positions are never sent. The generated feedback is stored against the decision, not against you, and is reused for anyone who makes the same decision.
DeepSeek also writes the headlines on the Meridian newswire, and suggests the shape names used in the chart descriptions beside Practice price charts (the App writes the descriptions themselves). A newswire request contains only a made-up company’s name, sector, a short excerpt of its made-up backstory, and its own recent headlines, with the App’s writing instructions. A chart-description request contains only the relative shape of the chart’s recent closing prices — not even the company’s name or a price level. Neither contains personal data of any kind: no name, email address, or user id, and nothing about any learner’s holdings, watchlist, or trades. The results are the same for every learner and are not stored against any account.
Other learners, who can see your leaderboard handle, rank, and monthly Practice return if you are 18 or over and have not hidden yourself (see section 4).
A news provider, when the News tab is serving live headlines rather than the bundled sample articles. Depending on how the App is configured this is GNews, NewsData, or NewsAPI, and the only thing sent is the topic or company name you searched for — no personal data and no account identifier.
An email delivery provider (currently Resend), used for one message only: the code we send when you ask to reset your password. It receives your email address and that code, and nothing else — not your name, your learning history, or your subscription.
Authorities or courts where disclosure is required by applicable law.
We do not sell your data, share it with advertisers, or use it for third-party marketing.
9. Data Security
All traffic between the App and our servers is encrypted in transit (HTTPS/TLS).
Passwords are stored only as salted cryptographic hashes.
Sessions use signed tokens, and sign-in endpoints are rate-limited against brute force.
No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we work to protect your information with industry-standard measures.
10. Data Retention and Deletion
We keep your information while your account is active. You can edit or clear optional profile fields in the Profile tab at any time.
You can delete your account yourself, from inside the App: open the Profile tab, go to About, and choose Delete account. This permanently deletes your account and the data described in this policy — your profile details, quiz and lesson progress, scenario runs and journal statistics, hearts and streaks, Practice Trading activity and watchlist, your leaderboard handle and every leaderboard entry for your account, friendships, and any push-notification token — from our servers, and signs you out everywhere. Deletion is immediate and cannot be undone: there is no recovery period and no way for us to restore the account afterwards.
Deleting your account does not cancel an Apple subscription. Subscriptions are billed by Apple and can only be cancelled with Apple, in Settings → Apple ID → Subscriptions on your device. If you do not cancel there, Apple will keep renewing and charging the subscription even though the account is gone.
One record survives deletion. We keep a row keyed only to the app-store transaction identifier of your subscription, so that a returning subscriber is recognised as already having paid and so that one purchase cannot be used to unlock several accounts. That record contains no name, no email address, and no user id, and we cannot use it to identify you.
If you are unable to use the in-app option, write to support@ticktora.com and we will delete the account for you.
11. Children's Privacy
The minimum age to use the App is 13. Your date of birth is required at registration and is validated on our server, and a registration showing an age under 13 is refused. We do not knowingly collect personal information from anyone under 13, and if we discover that we have, we delete it.
Learners aged 13 and over who are minors should use the App with the involvement and consent of a parent or legal guardian (see our Terms and Conditions). We collect no more information from minors than is described in this policy. If you are a parent or guardian and believe your child has provided personal information without your consent, contact us at support@ticktora.com and we will delete it.
Learners under 18 are never ranked or shown on the Practice leaderboard (see section 4).
12. Your Rights
Access and correction — view and edit your profile details in the App at any time. The one exception is a date-of-birth correction that would make an account under 18 into one aged 18 or over: our support team makes that change on request (see section 2).
Deletion — delete your account and its data yourself, at any time, from Profile → About → Delete account.
Grievance redressal — contact us with any privacy concern and we will respond within a reasonable time, as required by applicable Indian data protection law.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via the App or by other reasonable means. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
14. Governing Law and Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India, without regard to conflict of law principles. Any disputes shall be subject to the exclusive jurisdiction of the courts of Delhi-NCR, India.
15. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
Lukshya Arora
support@ticktora.com