Privacy Policy

Updated: August 12, 2026

Who we are

This Privacy Policy explains what data PatternLabs obtains when you use the website patternlabs.org, the PatternLabs mobile apps for iOS and Android, guest mode, accounts, notifications, and support (together, the “Service”), why we need it, who it may be shared with, and what choices you have.

In this Policy, PatternLabs means the PatternLabs Service and the person who operates it (“we”, “us”). Contact: support@patternlabs.org. Automatic messages may come from no_reply@patternlabs.org — that address is not for user inquiries.

This Policy does not cover third-party sites or services opened via external links or embedded in the Service that act as independent data controllers.

Who may use the Service

The Service is intended for users who, under the laws of their country, have the legal capacity to accept the Terms of Service on their own. If applicable law requires consent or involvement of a legal representative, you must obtain it before use.

We do not knowingly collect data from people who cannot validly consent or enter an agreement under applicable law. If we learn that such data was obtained without a proper basis, we will take reasonable steps to delete or restrict processing.

What we process

Account & sign-in

Email — registration, OTP sign-in, access recovery, and service messages.
Google Sign-In — when you sign in with Google, we receive your Google Account identifier, email address and, where provided by Google, your name and profile image. We use this data to create your account, authenticate you, and keep the account secure. We do not receive your Google Account password. Google’s own terms also apply to the sign-in flow.
Display name — if you set one in your profile.
User ID, account and session status — to run the account, sync data, and manage authorization.
OTP codes and send metadata — code, request time, expiry, use status, and anti-abuse signals.
Auth token — stored on device in secure storage for the active session.

Guest mode & device

Client / install ID — guest settings, guest limits, and distinguishing installs. After sign-in, some guest data may be linked to the account.
Account ID if signed in; device platform and push delivery id; app language, timezone, and UI settings if sent by the app.

Product use

Selected exchanges, markets, pairs, and timeframes; filter chains and shortlist state; search/session state needed for features.
Favorites and saved settings; alert rules (pair, timeframe, pattern, related params); in-app notification list.
Usage counters and plan / feature entitlement status.

Technical, security & diagnostics

IP address, request time, network/server logs; device type, OS and app version; API metadata and abuse signals.
Basic crash/error diagnostics on our servers.
Google Firebase Analytics — app usage metrics such as sessions, devices, approximate region, and automatic analytics events, to understand product performance. This is not precise GPS location and is not used for personalized cross-app advertising tracking.
Google Firebase Crashlytics — we use Firebase Crashlytics (Google) to diagnose crashes and improve app stability. It may process technical crash data, including an app installation identifier, device information, OS and app versions, error logs, and stack traces. We use this data to identify, analyze, and resolve technical issues.

Push

We use Firebase Cloud Messaging. A push token may be created and registered with PatternLabs when the app starts or a device session initializes — including before you create a specific alert. Display depends on OS permissions. You can disable notifications in system settings; a stored token may remain until refreshed, invalidated, or related data is deleted.

Support

Support is by email and Telegram. Via Telegram we may process Telegram ID, name, username, profile photo, and other data Telegram provides, plus message text, attachments, and conversation history. Do not send passwords, OTP codes, seed phrases, private keys, or full payment details to support.

Payments

The Service is currently provided free of charge. User or technical limits may apply to certain features and may change. Before any paid features or subscriptions are introduced, this Policy will be updated.

Website

The site may process IP, browser/device type, language, date/time, pages requested, referrer, and server logs. It may use cookies or local storage needed for language, UI, security, and correct operation. If we add optional analytics cookies, we will update this Policy and provide a choice where required by law.

What we do not request

The current app does not request precise location, contacts, camera, microphone, photos, or device files. That does not limit what you voluntarily send via a third-party support channel.

Where data comes from

We receive data from you; automatically from the app, device, and our infrastructure; from app stores and payment platforms; and from technical providers. Market data comes from official or publicly available APIs and other permitted sources.

Why we process it

create and maintain accounts (email OTP and Google Sign-In) and sessions;
provide guest mode and the market search engine (filters, shortlist, related features);
save filters, favorites, alerts, and settings;
send service emails, OTP codes, and push notifications;
enforce free limits and feature quotas;
understand product usage and improve the app via Firebase Analytics;
diagnose and fix crashes and errors via Firebase Crashlytics and our server logs;
security, abuse prevention, reliability, and support;
comply with law and protect PatternLabs and users.

Legal bases

Depending on your country and the operation, we rely on one or more of: performing our agreement with you; steps at your request before an agreement; our legitimate interests in security, stability, abuse prevention, and product improvement; your consent where required (e.g. optional cookies or choosing Google Sign-In); legal obligations; and establishing or defending legal claims. Where processing is based on consent, you may withdraw it for the future via settings or support; withdrawal does not affect processing before withdrawal.

Who we share with

We share data only as needed. Recipients / processors may include:

Hosting, database, backup, and network providers — API, site, and storage. Our primary infrastructure is currently located in the European Union. Some service providers may process data in other countries. Infrastructure locations and service providers may change, and this Policy will be updated where necessary.
Email (SMTP) provider — OTP and service mail.
Google Firebase — Cloud Messaging (push), Analytics (usage metrics), and Crashlytics (crash reports). Google may process related device/technical data under Google’s terms for Firebase.
Google Sign-In / Google Identity — when you sign in with Google.
Telegram — if you contact support via the bot.
TradingView — when charts load in WebView; TradingView may receive ordinary connection data under its policy.
Apple / Google — install, store use, purchases, and subscriptions.
Exchanges (e.g. Binance, Bybit) — public market data APIs. We do not send them your email or name for normal search-engine use.
Advisors and authorities when required by law or to protect rights; a successor if the project is transferred, with applicable protections.

We do not sell personal data, do not share it with data brokers, and do not use it for personalized cross-app advertising tracking.

International processing

Users and providers may be in different countries, so data may be processed outside your country (including our EU infrastructure and global services such as Google Firebase or TradingView). Where law requires safeguards, we rely on available transfer mechanisms and provider terms.

Retention

We keep data only as long as needed for the purposes in this Policy, plus law, security, backups, and disputes. In particular: account data while the account exists; guest data while the install id is active or until cleanup; OTP codes for a short life (limited send metadata may last longer for security); favorites/filters/alerts until deleted or the account is removed; support tickets as needed to finish the case and handle disputes. After account deletion we delete or anonymize data in primary systems within a reasonable time. Limited copies may remain in backups until overwritten, or longer if required by law or for legal claims — not for ordinary service use.

Delete your account

Signed-in users can delete the account in app profile settings. That ends access and deletes or anonymizes related user data (profile, sessions, favorites, alert rules, linked push tokens, and similar settings), except what we must keep as above. You can also email support@patternlabs.org. Uninstalling or clearing app data removes local tokens/ids but does not always delete a registered account on our servers. For guest server records, clear local app data and contact support with your Client ID if available.

Your choices & rights

Disable push in OS (and in-app if available). You can choose not to use Google Sign-In and sign in with email OTP instead. Uninstalling the app or clearing app data stops further on-device collection for that install; it does not always delete a server account — use in-app account deletion or email support. Optional site cookies — only if we add them and the law requires a choice. Depending on where you live, you may have rights to access, correct, delete, or restrict processing, object, portability, withdraw consent, and complain to a regulator. Contact support@patternlabs.org. Where GDPR or similar rules apply, we respond within the required time.

Security

We use reasonable technical and organizational measures (secure on-device token storage, access limits, authentication, logging, abuse protection, and provider oversight). No transmission or storage method is perfectly secure. Keep OTP codes confidential and protect your email and device. Report suspicious activity to support@patternlabs.org.

Changes

We may update this Policy when features, providers, infrastructure, or law change. The current version is always on this page with a new date. For material changes we will give reasonable notice (site, app, or email) before they take effect when required by law.

Contact

Privacy questions and access, correction, or deletion requests: support@patternlabs.org. Effective date: as stated at the top of this page.