Privacy Policy

Cicada (“we”, “us”, or “our”) respects your privacy. This policy explains how we handle information when you use the Cicada Android app and connect it to your Alpaca brokerage account and optional third-party data providers (Unusual Whales, Quiver Quant).

1. Information We Collect

We collect very little personal information:

• API credentials you voluntarily enter (Alpaca key/secret, paper trading flag, and optional Elite data provider keys). These are stored ONLY on your device using Android Keystore + EncryptedSharedPreferences.
• Non-sensitive preferences: selected tier, onboarding state, last connected account ID.
• Trading data fetched from your Alpaca account via the Cicada backend (positions, equity, order history, performance journal).
• Anonymous usage analytics (future — not implemented in v1).

2. How We Use Information

We only use your information to:

• Authenticate with Alpaca and execute trading signals on your behalf (only while the app is connected).
• Display performance metrics, risk status, and trade journal inside the app.
• Optionally enrich signals with paid alternative data you supply keys for (Elite tier).

3. Data Storage & Security

All secrets are encrypted at rest using AES-256-GCM via the Android Keystore. They never leave your device except when you explicitly call the backend /connect or /elite/set-keys endpoints.

The backend (hosted on Render) receives your Alpaca credentials only during the connect handshake and does not persist them beyond the lifetime of the trading session in memory.

We do not sell, rent, or share your keys or trading data with anyone.

4. Third-Party Services

• Alpaca Markets — your brokerage. See their privacy policy.
• Optional: Unusual Whales and Quiver Quant (only if you paste keys in Elite tier).
• Backend hosting: Render.com (HTTPS only).

5. Your Rights & Choices

• You can clear all stored credentials at any time from Settings → Sign Out & Clear Data. This removes everything from the device.
• You control all trading activity. The app only acts when you are connected and have enabled live strategies.
• Delete the app to remove all local data.

6. Children's Privacy

This app is not intended for anyone under 18. We do not knowingly collect data from children.

7. Disclaimer

This app is for educational and personal automation purposes only. It is NOT financial advice. Trading securities involves substantial risk of loss. Past performance (including backtests and journal) does not guarantee future results. Use at your own risk.