Overview

QuantVAT (Quantitative Crypto Volume Analysis Tool) is built with a privacy-first philosophy. This policy explains what data the application touches, where it is stored, and how we use access granted through third-party services such as Google.

Data Ownership & Storage

QuantVAT operates on a user-centric data model. We do not store, aggregate, or retain your personal trading data on our servers. All journal records, images, and backups created through the application are stored directly within your personal Google Drive using the drive.file scope.

Google OAuth Access

QuantVAT requests exactly two Google Drive scopes, and nothing more:

1. drive.file — used by the Trading Journal feature to create, update, and delete files that QuantVAT itself created (journal entries and trade chart images inside a "Trading Journal" folder in your own Drive).
2. drive — used only by the Chart Browser feature, which lets you browse folders you choose in your own Drive (including folders shared with you) and view the chart images inside them. The same feature lets you upload chart images into the folder you are viewing and move an image to your Drive trash. Uploads and deletions happen only when you press Upload or Delete; QuantVAT never changes, moves, or deletes files on its own, and it does not read files other than the images in folders you open.

Images fetched for viewing are kept only in temporary storage and are removed automatically after 48 hours, or sooner when you clear the cache or disconnect.

What We Collect

1. Account Information: Basic profile details provided during registration (e.g. email address) to authenticate your account.
2. API Keys You Provide: Third-party API keys (e.g. CoinMarketCap, Gemini) you enter are used solely to fetch market data or generate analysis on your behalf.
3. Application-Generated Files: Trading journal entries, images, and report files, which are written directly to your own Google Drive rather than our servers.
4. Google OAuth Tokens: When you connect Google Drive, the OAuth tokens are stored in our secure Firebase backend (Firestore), scoped to your account, so the app can sync your journal on your behalf.
5. Usage Data: Minimal technical data (such as error logs) may be collected to maintain and improve the tool's reliability.

How We Use Information

Information you provide is used only to operate core features of QuantVAT: authenticating your session, performing spot and futures cross-analysis, generating your OISS score, and saving your journal and reports to your own Google Drive. We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

Google User Data: Access, Use & Transfer

What we access: Your Google account identity (email and profile) at sign-in, the app-created journal and chart files in your Drive, and — only when you use Chart Browser — the chart image files you browse.

How we use it: Exclusively to provide the user-facing features you invoke: storing your trading journal in your own Drive and importing your charts for analysis. We do not use Google user data for advertising, profiling, or any purpose beyond providing these features.

What we share: Nothing. Google user data is not sold, traded, or transferred to any third party. The only external processing is the optional Journal Auditor feature, which sends your journal ledger (CSV) to Google's Gemini API using your own API key to produce a trading analysis for you. This data is processed per request and is never used to train AI/ML models.

How we protect it: OAuth tokens are stored server-side in Google Cloud Firestore, protected by Firebase Authentication and Google IAM access controls, and all data in transit is encrypted with TLS.

Google API Limited Use

QuantVAT's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

1. We do not use Google user data to develop, improve, or train AI/ML models.
2. We do not transfer Google user data to third parties that use such data to train AI/ML models.
3. We do not use or transfer Google user data for advertising, credit, or data-broker purposes.

Data Retention & Deletion

Because your journal records, images, and backups live in your own Google Drive, you remain in control of retention and deletion at all times. Revoking QuantVAT's access through your Google Account settings, or deleting the relevant files from your Drive, removes QuantVAT's ability to read or write that data. To delete your account and associated stored settings, contact us at the address below.

Contact

Questions about this policy or your data? Reach out via @heisbuba on X.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Material changes will be reflected on this page with an updated revision date.