BEARBEAR

Privacy Policy

Last updated: July 17, 2026

Not financial advice. Bear analyzes your trading for educational and coaching purposes only. Nothing in this app is investment, legal, or tax advice, and Bear never executes trades on your behalf. Trading involves substantial risk of loss.

Summary

BEAR is a trading journal and AI performance-coaching app operated by BEAR, operated by Najashi Abdullah, in Oklahoma, United States. BEAR reads your trades — it never trades for you and never touches your brokerage credentials. Your data is isolated from every other user at the database level. This page explains, in plain language, what we collect, what we don’t, and how it moves.

1. What we collect

We collect only what BEAR needs to coach you:

  • Account. Email address, display name, and account preferences.
  • Trading data you provide. Trades you log or import, screenshots you upload for parsing, and journal entries you write.
  • Usage. Pages viewed, features used, and errors encountered, so we can find and fix problems.
  • Device. Browser type, operating system, and general region derived from your IP address, for security and analytics.
  • Affiliate program (invite-only). If you are an affiliate: your referral code, referral events (which plan was bought and when — never who bought it), and payout records. If you signed up through an affiliate link: which affiliate referred you. Affiliates never see the identity of anyone they refer.

2. What we never collect

BEAR never collects, stores, or transmits:

  • Brokerage passwords
  • Brokerage API keys or secrets
  • Credentials to any financial account

There is no field in the app that asks for these, and there never will be. When brokerage connections ship, they will use OAuth — you authenticate on your broker’s own site and BEAR receives a read-only token, never a credential.

3. AI processing

To generate trade reviews, pattern detection, and coaching, BEAR sends the relevant parts of your trading data to Anthropic’s API for model inference. Anthropic acts as our subprocessor under a data-processing agreement and does not use your data to train its models.

One user’s data never coaches another.Your trades, notes, and history are used only to generate your own analysis. We do not aggregate identifiable user data into anyone else’s coaching.

4. Subprocessors

BEAR uses the following third-party services to operate:

ServicePurpose
SupabaseDatabase and authentication
VercelApplication hosting
AnthropicAI model inference for coaching
StripePayment processing
ResendTransactional email
PostHogProduct analytics
Vercel AnalyticsProduct analytics
TradierMarket data — receives ticker symbols only, never your identity
FinnhubMarket quotes — receives ticker symbols only, never your identity
Yahoo FinanceMarket price history — receives ticker symbols only, never your identity
CapitolTradesCongressional trading disclosures — receives ticker symbols only, never your identity
Browser push services (Apple, Google, Mozilla)Notification delivery to your own device, only if you enable push

5. Data isolation

Every table containing user data carries a user_id column, and Row-Level Security policies scope every read and every write to the authenticated user. A user cannot query another user’s trades, patterns, or coach history — the database refuses, regardless of what the application asks for.

Isolation is between traders, not from us: BEAR’s operator can access your data — including your conversations with Bear — for support, debugging, and abuse prevention. That access is operational only; it is never used to train models and never surfaces to another trader.

6. Retention

We keep your data while your account is active. When you delete your account, we delete the personal data associated with it within 30 days, except for records we must retain for legal, tax, or fraud-prevention reasons. Commission and payout records are financial records: on deletion your identity is removed from them, and the amounts are retained.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to certain processing. To exercise any of these rights, email us at withbear.app@gmail.com. We will respond within a reasonable time and verify your identity before acting.

8. Security

We use commercially reasonable safeguards to protect your data — encryption in transit, encryption at rest for the database, isolated per-user access controlled by Row-Level Security, and confined server-side keys. No system is 100% secure, and we do not promise otherwise.

9. Under-18

BEAR is for adults. You must be at least 18 years old (or the age of majority in your jurisdiction) to use the service. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email us and we will delete it.

10. Changes

If we materially change this policy, we will update the “Last updated” date at the top and notify you in the app or by email before the change takes effect.

11. Contact

Questions or requests: withbear.app@gmail.com.