Privacy Policy

Effective October 21, 2026

BDF Journal is a trading journal provided under the Black DeFi Family brand. This policy explains how the BDF Journal application handles information when you visit, sign in, record trades, or connect an account. Privacy inquiries: info@bdfjournal.com. Product help: support@bdfjournal.com.

Information the app processes

• Sign-in information. ChatGPT sign-in supplies a site-specific account identifier, email address, and, when available, display name. The app uses the identifier to separate accounts. BDF Journal does not receive your ChatGPT password.
• Your journal. Uploaded execution records, manually entered and API-imported trades, notes, reviews, goals, portfolio positions, account names, balances, cash flows, and import history are stored for your account. A CSV is parsed into records; the original file is not separately stored by the app.
• Connections. If you connect Kraken, the app stores your API key and secret encrypted and retrieves native asset balances and up to 50 recent executions per sync. If you track a Bitcoin address, the app stores the address and retrieves its confirmed and pending balance. It does not request seed phrases or wallet private keys.
• Import API. A personal import token is shown once. The app stores a cryptographic hash of it, its creation time, and its last-use time. Imported trade records remain in your journal until you delete them.
• Preferences and technical information. Theme and calendar-visibility preferences are stored in your browser. Hosting, authentication, security, and support providers may process technical information such as IP addresses, request metadata, browser information, and operational logs. Information you email to us is processed to respond.

How information is used

We use information to authenticate users, save and display their journals, calculate results, perform requested imports and connection refreshes, provide support, and protect the service. The app does not publish member journals or offer a public member directory. No advertising tracker or marketing analytics tool is installed in this version, and the app does not sell journal data or share it for targeted advertising.

Providers and disclosures

OpenAI/ChatGPT Sites provides hosting and sign-in services; Cloudflare services support the application runtime and database. They process information needed to operate the service under their own applicable terms and policies. When you connect Kraken, authenticated requests are sent to Kraken to retrieve account information. When you track a Bitcoin address, that address is sent to Blockstream’s public API; a public address and its blockchain history are inherently public. Provider connections are optional.

Service operators and infrastructure providers may access information as needed to operate, maintain, secure, or support the service. Account separation prevents other ordinary members from viewing your journal; it is not end-to-end encryption. Information may also be disclosed when required by law or reasonably necessary to address fraud, security incidents, or protect rights. We do not send your journal to a language model for analysis as part of the current app features.

Your choices and controls

• View and edit journal records in the app. Download a journal backup or trade export through Data & method.
• Disconnect a provider in Connections to remove its stored credentials and cached snapshot from the active app database. This does not revoke a key at the provider; revoke it there if no longer needed. Separately imported journal trades remain.
• Revoke or replace your personal import token in Connections. Existing imported records remain.
• Use Connections → Delete my BDF Journal data to remove your journal, connection data, and import token from the active app database. This does not delete your ChatGPT, exchange, or broker account.
• For access, correction, deletion, portability, or other privacy requests available under applicable law, contact info@bdfjournal.com. We may need to verify your identity before acting. Do not send passwords, seed phrases, or API secrets by email.

Retention, storage, and safeguards

Active journal data is retained until you delete it or request deletion. Connection credentials and snapshots are retained until disconnected or your app data is deleted. Operational logs, backups, and support correspondence may remain subject to provider retention, security needs, and legal obligations; the in-app deletion control does not promise immediate erasure from infrastructure backups.

The app uses authenticated account scoping, encrypted storage for provider credentials, hashed import tokens, and HTTPS in production. These measures reduce risk but no system can guarantee absolute security. Data may be processed in countries where service providers operate, including outside your country. Avoid storing information unnecessary for your journal.

Children

BDF Journal is intended for adults aged 18 and older. It is not directed to children. Contact us if you believe a child has submitted personal information.

Changes and contact

We may update this policy as the service changes. The effective date above identifies the current version. Material changes will be communicated through the service or another appropriate channel as required. For privacy and general inquiries, email info@bdfjournal.com; for app assistance, email support@bdfjournal.com.