Privacy Policy
Effective October 20, 2026 · Version 1 · uWave Innovations LLC
Summary
uWave Innovations LLC ("we", "us") makes IAH Guru: Trading School (the "App"), an educational app that teaches trading concepts with lessons, practice simulators with virtual cash, leaderboards and a study chat. This policy explains what information the App and our servers handle, why, who sees it and what choices you have. The short version:
- We do not sell your personal information and we do not share it for cross-context behavioral advertising.
- You can use the App without giving us your email address. Email is optional and is stored encrypted.
- We identify your install with a random ID, not your phone's hardware serial, advertising ID or phone number.
- Your display name and city/state are shown to other people only in places you choose (chat, and leaderboards if you switch "Public" on).
- Chat messages are deleted from our servers after 24 hours.
- You can delete your account and data inside the App, or from this page.
- The App is for people aged 17 and older.
Who we are
The controller of your information is uWave Innovations LLC, a limited liability company organized in Colorado, U.S.A. You can contact us through the Customer Support form in the app (Preferences › Customer Support) or the form on our Support page.
This policy covers the App and the servers that support it. It does not cover other websites or apps that we link to or that are linked from the App.
Information we collect
1. Information you give us
| What | Why | Who can see it |
|---|---|---|
| Display name (you choose it; please do not use your real name if you prefer privacy) | To show who wrote a chat message and who is on a leaderboard. | Other users in chat; on leaderboards only if you set that module to Public. |
| Country, state/province and city (typed or picked by you; not detected from GPS) | Location filters on leaderboards. | City and state are shown beside your name on a leaderboard only if you are Public. |
| Email address (optional) | To verify it with a 6-digit code, reply to support messages, and send reminder emails if you turn them on. | Only us and our email-sending provider. Stored encrypted; we keep a keyed hash so we can recognise it without reading it. |
| Email address on our website waitlist (optional, entered on the landing page) | To tell you once when the app is available for your phone. | Only us. Stored encrypted with a keyed hash to avoid duplicates. When you sign up we also record, as plain statistics, your approximate country (from your browser's time zone and language), browser and device type, screen size, the website you came from and campaign tags; we keep a one-way hash of your network address (not the address itself) to limit abuse. Every launch e-mail has an unsubscribe link, and you can ask us to remove you at any time. |
| Choices you make: agreement to the Terms (version and time), reminder-email opt-in, Public switch per module, blocked users | To honour your choices and show we have your consent where the law asks for it. | Only us. |
| Chat messages and message reports you send | To run the study chat and keep it safe. | Chat: everyone in that room. Reports: our moderators. |
| Support messages (name, email, message type, message and, if you tick the box, device information such as app version, phone model/OS, current module and membership status) | To answer you and fix problems. | Only us. |
| Friend codes you share or enter | To run the friend-invite program and credit rewards. | Only us (the friend whose code you used is told only how many people joined). |
2. Information created when you use the App
- Random install ID. The App creates a random ID the first time it starts and stores it in the secure storage of your phone (Keychain on iOS, Keystore on Android) when available. Our server keeps only a keyed hash of it, plus the app version, phone platform (Android or iOS), and when the install was first and last seen.
- Scores per module (Futures, Options, ForEx, Crypto) and skill level, and whether each module is Public.
- Progress and activity kept on your phone: lessons finished, streaks, simulator accounts and results, virtual cash and store items, settings, saved chat messages and folders, and screen recordings. This stays on your device unless a feature on this page says otherwise. It is removed when you delete the App or use Delete Account.
3. Information collected automatically
- Technical data sent with each request to our server: IP address, app version, platform, time, and the action requested. Our servers use IP addresses briefly to limit abuse (rate limiting); the server's access logs also contain IP addresses and are kept for a limited time for security and troubleshooting. When you redeem a friend code we store a keyed hash of your IP address to detect abuse.
- Crash and diagnostics: we do not currently use a third-party analytics or crash-reporting SDK. If we add one we will update this policy first.
4. Information from app stores and service providers
- If you subscribe, Apple or Google processes the payment and tells us (directly or through our subscription provider, RevenueCat) whether your membership is active, its type and renewal dates. We never see or store your card number.
5. Permissions the App may ask for
| Permission | Used for |
|---|---|
| Internet | Chat, leaderboards, lesson and content updates, support messages, ads. |
| Microphone | Only if you start a screen recording and leave the microphone on. You can turn it off in the recorder. |
| Storage / Downloads (Android) | To save your own screen recordings to your Downloads folder, and to keep downloaded music in the App's folder. |
| Notifications | Local reminders you turn on in Notification Settings (for example streak reminders). You can switch each off. |
We do not collect precise location, contacts, photos, calendar, health data, or the advertising-ID of your phone for our own purposes. (Our advertising partner may use the advertising ID as described below.)
How we use information
- Provide the App: run lessons, simulators, leaderboards, chat and your account (this is needed to perform our contract with you).
- Keep the App safe: rate limits, spam and abuse prevention, moderation of chat and reports, enforcing our Community Guidelines and Terms (our legitimate interests).
- Communicate: verification codes, replies to support, service notices, and reminder emails only if you opt in. Every reminder email has an unsubscribe link.
- Improve and maintain the App: fix bugs, measure how features are used in aggregate, plan new lessons (legitimate interests).
- Memberships and rewards: confirm your membership and give friend-code rewards.
- Legal: comply with the law, answer lawful requests, and protect our rights.
If you are in the European Economic Area, the United Kingdom or Switzerland, the legal bases are: contract (providing the App), legitimate interests (safety, abuse prevention, improving the App), consent (optional email reminders, advertising choices where required, and permissions such as the microphone), and legal obligation.
We do not make decisions about you that have legal or similarly significant effects by automated means. Leaderboard ranks and simulator scores are automatic game results, not decisions of that kind.
How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in these ways:
| Who | Why | What |
|---|---|---|
| Cloud hosting and email-delivery providers acting for us | To run our servers and send email. | Data needed to run the service (encrypted fields stay encrypted). |
| Apple and Google (App Store, Google Play) | Distribution, payments and subscriptions. | Handled under their own terms and privacy policies. |
| RevenueCat | Subscription status and entitlement checks. | A purchase identifier and subscription status. |
| Google AdMob | To show ads to members who are not subscribed. | See "Advertising" below. |
| Other users | Chat and public leaderboards. | Only what you chose to make public (display name, messages, city/state, score). |
| Authorities and advisers | To follow the law, enforce our rights, or protect safety. | The minimum needed. |
| A buyer of our business | If uWave Innovations LLC is sold or merged. | Your information may transfer; we will tell you and honour this policy. |
We may share aggregated or de-identified information that cannot reasonably be used to identify you.
Advertising
Members without a paid subscription may see ads served by Google AdMob. AdMob may collect your device's advertising ID, IP address and information about your device and ad interactions to deliver and measure ads, under Google's Privacy Policy.
- EEA/UK/Switzerland: where the law requires, the App asks for your consent before personalized ads are shown and lets you change it.
- iOS: the App asks permission (App Tracking Transparency) before using your advertising ID for tracking. You can decline and still use the App.
- Android and iOS: you can reset your advertising ID or opt out of ad personalization in your phone's settings (Android: Settings › Google › Ads; iOS: Settings › Privacy & Security › Tracking).
- Paying members see no ads.
Chat and public information
Your display name and chat messages are visible to everyone in the room you post in. Do not post personal contact details, financial account numbers or anything you want to keep private. Links are not allowed in chat.
- Messages are deleted from our servers after 24 hours. Copies may remain on other users' phones, and on your own phone if you saved them to a folder.
- Leaderboards list you only if the Public switch is on for that module. Switching it off removes you from the list the next time it refreshes (usually within minutes).
- You can report a message or block a user from the message menu. Blocked users' messages are hidden for you.
- When you delete your account your past messages are made anonymous ("Deleted user") and the text is removed.
How long we keep information
| Information | Kept for |
|---|---|
| Chat messages | 24 hours, then deleted automatically. |
| Profile, scores, Public choices, device record, friend codes | Until you delete your account. |
| Email address | Until you remove it or delete your account. |
| Verification codes | 15 minutes (and deleted once used). |
| Support messages and message reports | As long as needed to handle the request and to meet legal obligations. |
| Short-term security data (rate-limit counters, one-time request numbers) | Minutes to a few days. |
| Server access logs | A limited time set by our hosting provider, for security and troubleshooting. |
| Data on your phone | Until you delete the App or use Delete Account. |
After deletion, a few records may remain in routine backups for a short time until they are overwritten, and we may keep information we are legally required to keep.
Your choices and controls
- Display name and location: change or clear them in Preferences › Account Settings.
- Leaderboard: switch Public off at any time.
- Email: remove it in Account Settings; switch reminder emails off there or with the unsubscribe link in any reminder.
- Notifications: Preferences › Notification Settings, or your phone's settings.
- Ads: see "Advertising" above.
- Microphone and storage permissions: change them in your phone's settings.
- Delete everything: Preferences › Account Settings › Delete Account.
Deleting your account and data
You can delete your account inside the App (Preferences › Account Settings › Delete Account) or by following the steps on our account deletion page, even if you no longer have the App installed.
Deleting your account removes your profile, encrypted email, scores, Public choices, blocks, reports you made, friend-code records and device record from our servers, and makes your chat messages anonymous. It does not cancel an App Store or Google Play subscription: cancel that in your store account (see Subscription Terms).
Your rights in the United States
Depending on where you live (including Colorado, California, Virginia, Connecticut, Utah, Texas, Oregon and other states with privacy laws), you may have the right to:
- Know/access the personal information we hold about you and receive a copy;
- Correct inaccurate information;
- Delete your personal information;
- Opt out of the sale of personal information, of targeted advertising, and of profiling that produces legal effects. We do not sell personal information or use it for targeted advertising ourselves; ads shown through Google AdMob are covered by "Advertising" above;
- Limit the use of sensitive information (we do not collect sensitive personal information as the laws define it);
- Not be treated unfairly for using these rights.
To make a request, use the Customer Support form in the app (Preferences › Customer Support) (it sends us your saved address as the reply address) or the form on our Support page, or use the in-App deletion. We may need to verify your request (for example by sending a code to your saved email). You may use an authorized agent; we may ask for proof. We respond within 45 days (extendable once by 45 days where the law allows). If we decline a request you may appeal by replying to our answer; if you are still not satisfied you may contact your state attorney general.
California: in the last 12 months we have not sold or shared personal information as those terms are defined in the CCPA/CPRA. We honour browser-based opt-out signals such as Global Privacy Control where they apply to our website pages.
Your rights in Europe and the UK
If the GDPR or UK GDPR applies to you, you have the right to access, correct, delete, restrict or object to our processing of, and port your personal data, and to withdraw consent at any time (without affecting earlier processing). Use the Customer Support form in the app (Preferences › Customer Support) or the Support page to use these rights. You may complain to your local data-protection authority.
Our servers are in the United States. When we transfer personal data from the EEA/UK/Switzerland to the United States we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses with our service providers. If you need an EU/UK representative contact, write to us and we will provide it when one is appointed.
Children
The App is for people aged 17 or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 13 (or under the age required in your country). If you believe a child has given us information, tell us through the Customer Support form in the app (Preferences › Customer Support) and we will delete it.
Security
We use reasonable technical and organizational safeguards: encrypted connections (HTTPS/TLS), signed requests so only the genuine App can use our servers, encryption of email addresses at rest, keyed hashes instead of raw device IDs, rate limits, and limited staff access. No system is perfectly secure; please use a strong passcode on your phone. If a breach affects you we will notify you and the authorities as the law requires.
Other things you should know
- Links: the App and these pages may link to other sites. Their privacy practices are their own.
- Do Not Track: the App does not track you across other companies' apps and sites for our own purposes.
- AI features: some characters and voices are AI-generated (see AI & Synthetic Content). We do not use your chat messages, simulator results or personal information to train AI models.
- Cookies: the App itself does not use browser cookies. These document pages set none.
Changes to this policy
We may update this policy. If the changes are significant we will tell you in the App (and ask you to agree again where required) before they take effect. The date at the top shows the current version.
Contact us
uWave Innovations LLC
Contact: the Customer Support form in the app (Preferences › Customer Support), or the form on our Support page.