Current release: Chart Detector monitors patterns using closed candles and needs no image upload. Image upload is not available in this release; the screenshot reader is a separate upcoming feature. Any image-processing descriptions below apply if that feature is offered and to previously processed images. Existing history, deletion rights and legal protections remain unchanged.
Last updated: 23 October 2026 · version 2.1
Five-point summary
- We collect only what the service needs: your account email, the choices you make in the app, any chart image you choose to upload where that feature is available, and technical records needed to operate and secure the service. Optional daily activity sharing, if available, is described in section 6. The full list is in section 4.
- When you upload a chart image, it leaves your device: it goes to our systems and to an AI provider (currently OpenAI) so your explanation can be produced. The processing copy on our server is cleared once the analysis ends.
- Third-party product analytics and advertising attribution are disabled in this release. Optional daily activity sharing, if available, is off until you explicitly allow it in Account and can be turned off there (section 6).
- Available paid options, if any, show their price and renewal terms before purchase. Opening an account does not make a payment or start an automatic renewal. Store billing and cancellation are described in section 7. We do not hold card details.
- Your account is yours: you can delete it at any time from inside the app (Settings → Delete Account) or by writing to us — see section 11 and the Delete Account page. Namatak is educational; it is not investment advice.
1 · Who is responsible for your data
The party responsible for processing your data (the "controller") is Springwood Advertising Company (a Single Person Company) — registered in the State of Kuwait, license No. 2020/18325, commercial registration No. 433132 — the operator of the Namatak app and the namatak.com website.
For anything about privacy, write to support@namatak.com. It is the best way to reach us about this policy and about your data.
You do not need to sign up to look around: when you open the app, it creates an anonymous guest session on our service so the app can work. It holds no email address until you create an account. It does save your app language and the answers you give on the first screens, so the app fits you from the start. You can delete it at any time from Settings → Delete Account.
2 · Scope of this policy
This policy covers:
- The Namatak app, on the web and on mobile.
- The website
namatak.comand its pages.
It does not cover third-party sites or services we link to (such as the trading platform a chart screenshot was captured from, or an app store).
Educational content only. Namatak explains chart patterns for learning. Nothing in the app or on the website is investment, financial or trading advice, or a recommendation to buy or sell anything.
3 · Chart-image processing and temporary storage
Before anything is sent, the app shows you a short screen that names the AI provider (currently OpenAI) and asks for your permission. If you cancel, no image is sent.
When you allow it:
- The image, with the details you give for it (instrument, timeframe, your level and language), is sent over an encrypted (TLS) connection from your device to our systems.
- We check your account, your access and your remaining allowance.
- We pass the image and those details to an AI provider's service, which analyses the chart so the pattern, levels and scenarios can be described. Today that provider is OpenAI. Our systems are able to use another AI provider; if we switch, we will update this policy before the change reaches your images (see section 16). The provider processes the data under its own terms and privacy policy.
- We receive the text result, save it to your history, and return it to the app.
- Images may be stored temporarily on our server while waiting for or undergoing analysis. Processing copies are cleared when analysis completes, fails, is cancelled, or expires. Backups and AI-provider copies follow separate retention policies, set by our backup schedule and by the provider.
So the image does leave your device, and only to produce your explanation. We do not send chart images to PostHog, AppsFlyer or RevenueCat. We also keep:
- A digital fingerprint (hash) of the image — a technical string from which the original image can never be reconstructed, used only to avoid analysing the same image twice.
- The full explanation text (pattern name, levels, scenarios, lesson) — this is what appears in your history.
Chart explanation is not open to every account at the moment. When it is not available to you, the app says so and does not send an image.
4 · Data we collect and why
| Category | What exactly | Source | Purpose | Processor | Retention |
|---|---|---|---|---|---|
| Chart image | The image you upload or capture, and the details you give for it (instrument, timeframe, level, language) | You | Producing the educational explanation | Our systems · AI provider (currently OpenAI) | May be stored temporarily on our server while waiting for or undergoing analysis; processing copies are cleared when analysis completes, fails, is cancelled, or expires. Backups and AI-provider copies have separate retention policies |
| Image fingerprint (hash) | A non-reversible technical string derived from the image content | Derived by us from the image | Avoiding duplicate analysis of the same image | Our server | Until account deletion |
| Analysis results | The structured explanation text (pattern, levels, scenarios, lesson), market tag, date, follow-up questions and answers | Produced by us | Showing your history, follow-up questions | Our server; the AI provider (currently OpenAI) receives a follow-up question and the saved explanation it is about, after you allow it | Until account deletion |
| Reports about an explanation | The reason you pick, any note you write, and which explanation it is about | You | Reviewing AI content you report | Our server | Until account deletion |
| Account details | Your account identifier, sign-up email, a password if you set one (kept only in protected, non-readable form), the sign-in method you used (email, Apple or Google), and verification and access status | You and the app | Operating the account, verifying email, managing access, account deletion | Our server; Resend for authentication email | Until account deletion |
| Guest session | An anonymous account identifier created when you open the app, before you sign up | The app | Letting the app work before you create an account | Our server | Until you delete it from Settings → Delete Account |
| Your starting answers and language | The markets you are interested in, your level, the main difficulty you chose, and your app language. Saved for guest sessions too | You | Fitting the app, its explanations and its alerts to your level, interests and language | Our server | Until the account or guest session is deleted |
| Apple sign-in linkage (if you use Sign in with Apple) | Apple account identifier and encrypted authorization grant: the identifiers Apple provides for sign-in, and your email address or Apple's private relay address. We do not keep your name | You, Apple, and the app | Signing in and revoking Apple authorization when account deletion is requested | Our server (encrypted grant); Apple (identity and revocation) | Kept while the Apple link is active and, if needed, until revocation and account deletion complete. If revocation fails, deletion is not confirmed; we may retain the grant for a retry |
| Google sign-in linkage (if you use Google) | The Google account identifier and email address Google returns to sign you in. We never see your Google password | You, Google, and the app | Signing in with Google and linking it to your Namatak account | Our server; Google (identity) | Until account deletion |
| Optional daily activity sharing (if available) | Your verified account identifier and a record of a Home visit once per UTC day, only after explicit consent. No chart images or chart inputs | Your explicit choice in Account | Optional first-party daily activity measurement | Our own server | Turning it off stops new activity records; it does not delete records already received. Account deletion is described in section 11 |
| Third-party analytics and install attribution | Disabled in this app release: no new PostHog or AppsFlyer events are sent by the app | Not active in this release | Not active in this release | No new app event data to PostHog or AppsFlyer in this release | Any records from earlier releases remain subject to provider retention and deletion procedures |
| Purchase and subscription records, where paid options are available | Account identifier, product, price, currency, store receipt, transaction identifier and purchase, renewal or expiry dates. We do not receive your card number or payment method | A purchase or existing subscription, the store and the configured billing service | Managing purchased access, renewals, refunds and accounting | Where store billing is configured: Apple or Google and RevenueCat; our server | While needed for the subscription and accounting, tax or legal records. Server records are de-identified on account deletion as described in section 11 |
| Access code and allowance | Code record, activation date, usage, remaining amount, and allowance type (total or monthly) | You and the Operator | Granting access and showing analysis usage | Our server | Until account deletion or as required for records |
| Alert preferences | The schools, patterns, instruments and timeframes you choose, quiet hours and a daily limit if you set them, alert language, channel and delivery status, your alert inbox, the app device token when push notifications are on, and your browser's push subscription when browser notifications are on | You, the app and your browser | Sending the alerts you chose and showing their delivery status | Our server; Expo, and through it Apple (APNs) on iPhone or Google (FCM) on Android, for app push notifications; your browser's push service for browser notifications | Until alerts are disabled or the account is deleted |
| Optional Namatak messages | Whether you agreed to receive optional messages from Namatak by email, by device notification, or both; their language; when you agreed or withdrew; and the device token if you register a device for them. Nothing is switched on for you | You | Sending you optional messages about Namatak, such as news and offers, only if you agreed | Our server; Resend for email; Expo with Apple or Google for device notifications | Until you withdraw or the account is deleted. Withdraw at any time in Settings → Optional Namatak messages, with the unsubscribe link in any such email, or by writing to us |
| Support correspondence | What you send to support@namatak.com. "Report a problem" in the app opens an email already filled with your app version, device model, operating-system version and language, which you can read and edit before you send it | You | Replying to you | Zoho Mail | For as long as needed to handle your request and keep our support records; you can ask us to delete it |
| In-app support tickets | Ticket subject and category, messages and replies, status, and event timestamps | You and support staff | Handling and tracking your support request | Our own server and database | Ticket data is removed with the account when account deletion is processed |
| Referral attribution | Referral code and source, account link after email verification, discount and commission terms, and eligible order or sale records | Referral link or code, your verified account, and our server | Applying a referral discount and recording partner attribution and commission | Our own server and database | Account-linked attribution is deleted with the account. Financial snapshots may remain without the customer link, email, IP address or raw provider data, as required for accounting records |
| Free-guide request on the website | The email you enter to open a guide, which guide it was, and, only if you allowed tracking, the campaign your visit came from | You and your browser | Giving you the guide and knowing which guides are useful | Our server | Kept with our guide-request records; you can ask us to delete it at any time |
| Server and security logs | Your IP address, the date and time, the address requested, and your browser or app identifier (user agent) | Your connection to our servers | Delivering the service, limiting misuse, keeping accounts secure and fixing faults | Our servers | For as long as needed for security and troubleshooting |
We do not run a separate crash-reporting service. Third-party product analytics and advertising attribution are disabled in this app release. Operational and security logs are described in the table above.
What we never collect: your card or bank account details · your contacts · your precise location · your trading account data · the content of other photos in your gallery (we only access the image you choose).
5 · Who processes your data on our behalf
We work with a limited number of providers, each for a defined job. They process data for us under their own terms and privacy policies, which you can read through the links below. Our database, sign-in and API run on our own server (we host the open-source Supabase software ourselves, so Supabase as a company does not receive your data).
| Processor | Purpose | Data it receives | Location | Privacy policy |
|---|---|---|---|---|
| Our own server (database, authentication, API) | Account, history, preferences, request processing | Everything listed in section 4 that is marked "Our server" | Servers operated by or for us (hosting location available on request) | This policy |
| OpenAI | Analysing chart images and producing the text explanation (the AI provider in use today; see section 3) | The chart image, the details you enter for it, and follow-up questions with the saved explanation they concern. The image itself may contain personal information | United States and other countries where OpenAI operates | openai.com/policies/privacy-policy |
| PostHog | Disabled for app product analytics in this release | No new app event data in this release; earlier records, if any, remain subject to its policy | United States and other countries where PostHog operates | posthog.com/privacy |
| AppsFlyer | Disabled for app advertising attribution in this release | No new app attribution events in this release; earlier records, if any, remain subject to its policy | Countries where AppsFlyer operates | appsflyer.com/legal/privacy-policy |
| RevenueCat | Managing store subscriptions where configured | Account identifier, purchase records and store receipts where this billing integration is used | United States and other countries where RevenueCat operates | revenuecat.com/privacy |
| Apple (App Store billing, Sign in with Apple, push) | Processing App Store payments; verifying your identity and revoking authorization if you use Sign in with Apple; carrying push notifications (APNs) | Payment and receipt data (held by Apple, not by us); sign-in identifiers; device token and alert text | International | apple.com/legal/privacy |
| Google (Play billing, Google sign-in, push) | Processing Google Play payments; verifying your identity if you use Google sign-in; carrying push notifications (FCM) on Android | Payment and receipt data (held by Google, not by us); sign-in identifiers; device token and alert text | International | policies.google.com/privacy |
| Expo | Delivering push alerts to a registered app device when you enable them | Device token and the alert content needed for delivery | United States | expo.dev/privacy |
| Resend | Sending account-authentication emails, including email verification, and optional Namatak messages by email if you agreed to them | Your email address and the message needed for delivery | United States | resend.com/legal/privacy-policy |
| Zoho Mail | Receiving messages sent to support@namatak.com | Sender address and message content | International | zoho.com/privacy |
| Your browser's push service (Google, Mozilla, Microsoft or Apple) | Delivering browser notifications when you turn them on | Alert content in encrypted form, which only your browser can read, and the subscription address your browser created | International | The privacy policy of your browser's maker |
None of these services other than the AI provider is used to analyse chart images. We do not sell your personal data, and we do not share it with data brokers.
6 · Optional activity and third-party attribution
This release. Third-party product analytics and advertising attribution are disabled. The app does not initialize PostHog or AppsFlyer event reporting in this release.
Optional daily activity sharing, if available. This is a separate first-party choice in Account, off until you explicitly allow it. It is limited to a Home visit once per UTC day for a signed-in, verified account. The activity record does not include chart images or chart inputs. It is offered only where its consent service is available.
Turning it off. You can withdraw this optional consent in Account. Turning it off stops new activity requests; an in-flight request may already have arrived. It does not delete activity records already received. Account deletion and other requests are described in sections 11 and 12. Account, security and billing services operate independently of this optional choice.
Earlier records. If a provider holds records from an earlier release, its retention rules and the deletion procedures below still apply. Disabled integrations are not described here as current collection.
7 · Subscriptions and purchases
Available purchase options depend on your device, account and release. If a paid option is offered, its price, currency, period and renewal terms are shown before you confirm. Opening an account does not make a payment or start an automatic renewal. This policy does not set a fixed price.
- Billing is handled by Apple (App Store) or Google (Play), using the payment method on your store account. We never receive your card or bank details.
- RevenueCat, where store billing is configured, manages subscription access using your account identifier, purchased product, receipt and purchase dates. Purchase records may also be held on our server for access and accounting. Third-party advertising attribution is disabled in this app release.
- Cancelling. Deleting your account does not cancel a store subscription. Cancel it in your store account first (App Store → Subscriptions, or Google Play → Payments & subscriptions). The app has a "Manage subscription" link and a "Restore purchases" button.
- Refunds are handled by the store under its own rules.
8 · The website
Website measurement is off by default. First-party visit measurement and optional Google/advertising tags have separate controls on the page. Google/advertising tags load only after you explicitly allow them; if you withdraw consent after tags have loaded, the page reloads. Free-guide downloads work whether or not you allow tracking. We do not send chart data, email, account numbers, download tokens, or URL query strings through browser event tracking.
Referral links and codes can be kept temporarily in your browser session while you sign in. The website creates a referral cookie only after you allow tracking; the signed __Host-namatak_referral cookie expires within the period set for that partner, up to 90 days. Revoking tracking consent clears the referral cookies. After you verify your email, the referral may be linked to your account so a qualifying discount and partner commission can be recorded. Referral attribution is separate from first-party visit measurement and advertising tags.
The app activity choice described in section 6 is separate from the website controls described in this section.
9 · International data transfers
Your account and history are held on our own server. Where the corresponding feature is available, providers such as OpenAI, RevenueCat, Expo, Resend, Apple, Google, Zoho Mail and your browser push service may process data in the countries described in section 5. PostHog and AppsFlyer app reporting are disabled in this release; earlier records, if any, follow those providers’ policies. These countries may have data-protection laws that differ from those of your country of residence. Write to support@namatak.com for information about processing locations.
10 · Retention period
- Listed per category in the table in §4.
- Analytics, attribution and purchase data are kept as shown in §4 and in the providers' own policies (§5).
- When you request account deletion, we remove the profile and analysis history from the active service when the request is processed (details in §11). Backup copies and records kept for legal, security or operational purposes follow separate schedules.
11 · Deleting your account
You can delete your account:
- In the app: Settings → Delete Account (حذف الحساب) → confirm. The app signs you out only after our service confirms the deletion. If you used Sign in with Apple, iOS asks you to authorise again with the same Apple account so Apple's link can be revoked first. This also deletes a guest session.
- By email: write to
support@namatak.comfrom the address registered to your account.
What is deleted from the active service when the request is processed: your profile and account record, analysis history and follow-ups, image fingerprints, alert preferences and inbox, device token, reports and support tickets, access-code redemptions and usage records, referral links to your account, and your sign-in credentials.
What may remain:
- Purchase and subscription records, kept without your account link for accounting, tax and legal purposes.
- Backups, which follow a separate schedule and age out of rotation.
- Records kept for legal, security or operational reasons (for example fraud prevention or defending a legal claim).
- Copies held by providers (PostHog, AppsFlyer, RevenueCat, OpenAI, Apple, Google, Expo and others) under their own retention rules. Our deletion function removes data from our own systems; to have your data removed from a provider's systems too, write to
support@namatak.comwith your account identifier and we will pass the request on where the provider allows it. - Store subscriptions are not cancelled by deleting your account; cancel them in your store account.
Full step-by-step instructions are on the Delete Account page.
12 · Your rights
Wherever you live, you can:
- Access your data and ask for a copy: write to us and we will send it to you.
- Correct your data: change your language and alert choices in the app yourself, and write to us for anything else.
- Delete your account and data from inside the app (Settings → Delete Account) or by writing to us — see section 11 and the Delete Account page.
- Withdraw a consent you gave: optional daily activity sharing, if available, in Account; optional Namatak messages in Settings; notifications in the app or device settings; website tracking with the page control. Third-party app analytics and advertising attribution are disabled in this release.
- Object to specific processing, where your country's law grants you this right.
- Lodge a complaint with the competent authority in your country.
To exercise any right, write to support@namatak.com. We may ask you to verify your identity first, to protect your account.
13 · Security
- Transport is encrypted (TLS) between the app and our server, and between our systems and the AI provider.
- The credentials we use to reach providers such as the AI provider stay on our side and are never placed in the app. Chart-analysis requests go through our systems.
- No system can be perfectly secure. If we become aware of a breach affecting your data, we will notify you and the competent authority as required by law.
14 · Children
Namatak is for adults, aged 18 and over, and is not directed at children. It explains financial markets and is not suitable for minors. We do not knowingly collect data from anyone younger. If we learn that an account belongs to someone under 18, we delete it. If you are a parent and believe your child has used the Service, contact support@namatak.com.
15 · Governing law
The operator is a Kuwaiti company, and this policy is read in the context of the data-protection laws applicable in the State of Kuwait, without prejudice to any mandatory protection granted to you by the law of your country of residence.
16 · Changes to this policy
For material changes (a new processor, a new data category, a new purpose) we will notify you inside the app or by email before they take effect. The "Last updated" date at the top reflects the current version.
17 · Contact
Springwood Advertising Company (a Single Person Company) — Namatak, Kuwait Email: support@namatak.com