This policy explains how FinXhubra handles personal data across the website, the waiting list and the Signal Prime mobile app.
We collect what we need to run the service and nothing we have no use for.
What we collect
When you join the waiting list, through a Google Form: your name, email address, WhatsApp number, and whether you are a trader or a signal provider.
When you create an account: your name, email address, phone number, and a profile photo if you add one.
If you become a signal provider: identity verification details and trading history evidence, which we need to verify you.
As you use the app: the signals you view and follow, subscriptions you take, reviews you write, journal entries you record, and any reports you file.
Automatically: device and app version, crash diagnostics, and a push notification token if you allow notifications.
We do not collect your broker credentials, and we never ask for them. Nobody from FinXhubra will ever ask for your trading account password.
Subscriptions are free while we launch, so we do not currently collect payment or mobile money details. If that changes, this policy will be updated before it does.
Why we use it
- to create and run your account, and to deliver the signals you subscribe to
- to verify signal providers, so the marketplace means something
- to send you service messages — signal alerts, subscription notices, security notices
- to review reports, detect fraud and market abuse, and to enforce our terms
- to fix faults and improve the product
- to tell you about launch, if you asked us to by joining the waiting list
Who we share it with
We do not sell your personal data.
We share it with service providers who process it on our behalf, under contract and only for the purposes above:
- Google (Forms) — the waiting list
- Supabase — database, authentication and file storage
- Twelve Data — market prices (no personal data is sent)
- push notification, email and SMS delivery services
We may also disclose data where the law requires it, or to establish or defend legal claims.
What other users see
If you are a signal provider, your name, photo, bio, markets, signals, modification history and performance record are public. That transparency is what subscribers pay for.
If you are a trader, your name and photo are visible to a provider you subscribe to, and on any review you publish. Your trading journal is private and is never shown to providers or other traders.
Reports you file are private. The person you report is not told who reported them.
Deleting your account
You can delete your Signal Prime account from inside the app: Profile → Account → Delete account. You can also request deletion at finxhubra.com/delete-account, or by writing to us.
Deleting removes your profile, subscriptions, reviews, journal entries, notification tokens, uploaded images and identity documents. If you are a provider, it removes your published signals and their history too.
We may keep a limited record where the law requires it — financial and anti-fraud records, and moderation records where an account was actioned for breaking our terms. Nothing kept for those reasons is used to contact you or to profile you.
How long we keep it
Account data: for as long as your account is open, and for a period afterwards where we need it for legal, tax or dispute purposes.
Waiting list entries: until launch, plus a reasonable period after — or until you ask us to remove you.
Transaction records: as long as financial record-keeping law requires.
Published signals and their history: retained as part of the public record while the provider's account is open, since deleting them would defeat the audit trail. If the provider deletes their account, their signals go with it.
Your rights
You can ask us to:
- give you a copy of the data we hold about you
- correct anything inaccurate
- delete your data, where we have no overriding legal reason to keep it
- stop sending you marketing messages — you can also unsubscribe directly
Write to support@finxhubra.com and we will respond within 30 days.
Security
Data is encrypted in transit. Access to production data is restricted to those who need it. Database access is governed by row-level security rules so an account can only read its own records.
No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority as the law requires.
Children
The platform is not for anyone under 18, and we do not knowingly collect their data. If you believe a minor has given us data, contact us and we will delete it.
International transfers
Some of our providers store data outside Tanzania. Where that happens we rely on contractual protections requiring a comparable standard of care.
Changes and contact
We will post any change here and update the date at the top. Material changes will be notified in the app or by email.
Questions, or to exercise a right: support@finxhubra.com.