Privacy Policy
Last updated: July 17, 2026
Summary
BEAR is a trading journal and AI performance-coaching app operated by BEAR, operated by Najashi Abdullah, in Oklahoma, United States. BEAR reads your trades — it never trades for you and never touches your brokerage credentials. Your data is isolated from every other user at the database level. This page explains, in plain language, what we collect, what we don’t, and how it moves.
1. What we collect
We collect only what BEAR needs to coach you:
- Account. Email address, display name, and account preferences.
- Trading data you provide. Trades you log or import, screenshots you upload for parsing, and journal entries you write.
- Usage. Pages viewed, features used, and errors encountered, so we can find and fix problems.
- Device. Browser type, operating system, and general region derived from your IP address, for security and analytics.
- Affiliate program (invite-only). If you are an affiliate: your referral code, referral events (which plan was bought and when — never who bought it), and payout records. If you signed up through an affiliate link: which affiliate referred you. Affiliates never see the identity of anyone they refer.
2. What we never collect
BEAR never collects, stores, or transmits:
- Brokerage passwords
- Brokerage API keys or secrets
- Credentials to any financial account
There is no field in the app that asks for these, and there never will be. When brokerage connections ship, they will use OAuth — you authenticate on your broker’s own site and BEAR receives a read-only token, never a credential.
3. AI processing
To generate trade reviews, pattern detection, and coaching, BEAR sends the relevant parts of your trading data to Anthropic’s API for model inference. Anthropic acts as our subprocessor under a data-processing agreement and does not use your data to train its models.
One user’s data never coaches another.Your trades, notes, and history are used only to generate your own analysis. We do not aggregate identifiable user data into anyone else’s coaching.
4. Subprocessors
BEAR uses the following third-party services to operate:
| Service | Purpose |
|---|---|
| Supabase | Database and authentication |
| Vercel | Application hosting |
| Anthropic | AI model inference for coaching |
| Stripe | Payment processing |
| Resend | Transactional email |
| PostHog | Product analytics |
| Vercel Analytics | Product analytics |
| Tradier | Market data — receives ticker symbols only, never your identity |
| Finnhub | Market quotes — receives ticker symbols only, never your identity |
| Yahoo Finance | Market price history — receives ticker symbols only, never your identity |
| CapitolTrades | Congressional trading disclosures — receives ticker symbols only, never your identity |
| Browser push services (Apple, Google, Mozilla) | Notification delivery to your own device, only if you enable push |
5. Data isolation
Every table containing user data carries a user_id column, and Row-Level Security policies scope every read and every write to the authenticated user. A user cannot query another user’s trades, patterns, or coach history — the database refuses, regardless of what the application asks for.
Isolation is between traders, not from us: BEAR’s operator can access your data — including your conversations with Bear — for support, debugging, and abuse prevention. That access is operational only; it is never used to train models and never surfaces to another trader.
6. Retention
We keep your data while your account is active. When you delete your account, we delete the personal data associated with it within 30 days, except for records we must retain for legal, tax, or fraud-prevention reasons. Commission and payout records are financial records: on deletion your identity is removed from them, and the amounts are retained.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to certain processing. To exercise any of these rights, email us at withbear.app@gmail.com. We will respond within a reasonable time and verify your identity before acting.
8. Security
We use commercially reasonable safeguards to protect your data — encryption in transit, encryption at rest for the database, isolated per-user access controlled by Row-Level Security, and confined server-side keys. No system is 100% secure, and we do not promise otherwise.
9. Under-18
BEAR is for adults. You must be at least 18 years old (or the age of majority in your jurisdiction) to use the service. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email us and we will delete it.
10. Changes
If we materially change this policy, we will update the “Last updated” date at the top and notify you in the app or by email before the change takes effect.
11. Contact
Questions or requests: withbear.app@gmail.com.
