This Privacy Policy explains what information we collect, how we use it, and what rights you have over it. By using MarketPlay you agree to this policy.
1. What we collect
Information you give us directly
Email address — used for account creation and login
Age band, as a range such as 16-17 rather than a date of birth — used to set your starting net worth, to decide whether you can appear on a public leaderboard, and to decide whether we may send you marketing email
Financial situation — used to set your starting net worth and onboarding profile
Display name, avatar, learning goals, and any messages you send to Monty
Information we collect automatically
Your in-app decisions and their outcomes
Your private Life simulation and simulated paper-trading activity
Your login activity and streak
Your group memberships and challenge results
Notifications sent to you and whether you opened them
App usage data including which screens you visit and when
Information processed by service providers
PostHog processes explicit product events, page paths, and a pseudonymous account identifier. MarketPlay does not send your email address, financial values, screen text, or session recordings to PostHog.
Sentry processes technical error and performance data when the app fails. Collection of default personal identifiers is disabled.
2. How we use your information
To create and manage your account
To generate personalised financial scenarios using AI
To calculate and display your simulated scenario balance
To provide learning progress, module tests, Positions, paper trading, and optional class features
To send push notifications you choose to enable
To send transactional emails via Resend
To improve the app using limited, pseudonymous product analytics
We never sell your data to anyone. We never use your data for advertising.
3. What we share
Within the app, other users can see
Your display name
Your level
Your login streak
Your learning-topic count and class rank, when you join a class
Other users can never see
Your email address
Your financial situation answer from onboarding
Your private Life simulation or paper-trading portfolio
Your chatbot conversations
Your psychology profile
Outside the app we share data with
Supabase — database and authentication provider
OpenRouter — AI processing; the profile context needed for a personalised response is sent when you use an AI feature
PostHog — explicit product events and a pseudonymous account identifier; no email address, financial values, automatic screen interaction capture, or session recording
Sentry — technical error and performance data; default personal-identifier collection is disabled
Resend — email delivery, your email address only
Upstash — short-lived rate-limit counters keyed by an account or network identifier
Vercel — hosting and standard request/security logs
4. Data retention
Your account data is retained until you delete your account
Onboarding session data is deleted immediately after onboarding completes
Chatbot conversation history and product activity are retained with your account unless you delete the relevant data or your account
Failed-sign-in security telemetry uses a scoped HMAC identifier instead of an email address and is retained for 30 days
If in-app account deletion succeeds, MarketPlay removes the account's active application records and authentication identity immediately. Infrastructure backups and provider security logs may remain for their providers' limited retention periods.
5. Your rights
You have the right to:
Access your data using Settings → Download your data, or email shahaarit3@gmail.com
Correct any inaccurate data in your account settings
Delete your account and all associated data at any time from your profile settings
Withdraw consent at any time by deleting your account
6. Children
MarketPlay accounts are for people aged 13 and above, with no upper limit. We do not knowingly hold an account for anyone under 13, and if we discover one we delete it. We ask for an age band, such as 16-17, and never for a date of birth.
If you are between 13 and 17 we hold your account more narrowly than an adult's. You are never placed on a public leaderboard, and we never send you marketing email. Nothing you can learn or play is reduced because of your age.
If you are under 18, we ask that a parent or guardian knows you use MarketPlay and agrees to this policy on your behalf. We ask for that agreement at the point you create the account. We do not verify it, and we would rather say so than claim a check we do not perform.
A parent or guardian can email shahaarit3@gmail.com to see everything we hold about the account, to correct it, or to have it deleted. We act on a request from a parent or guardian the same way we act on one from the account holder.
Some parts of MarketPlay need no account at all. The Money Brain test, for example, shows anyone their score and the explanations behind it. Where that happens we ask for no email address, we place the result on no leaderboard, and we store nothing that identifies the person taking it.
7. Security
We protect your data using:
Row Level Security on every database table — users can only access their own private data
Encrypted transmission via HTTPS on all routes
Server side only access to all API keys — never exposed to the browser
Signed, secure session cookies and rate limits on authentication-sensitive endpoints
8. Changes to this policy
If we make significant changes to this policy we will notify you via email and in-app notification before the changes take effect.
9. Contact
For any privacy questions or data requests contact: