Privacy Policy
Cheat Code X is a members-only trading community with an AI assistant called Kai. This page explains what we collect when you use the app, why, who helps us process it, how long we keep it, and how to delete it. Section 8 covers our marketing website, which works differently. "We" and "us" means Cheat Code X. Questions go to support@cheatcode.com.
1. What we collect
Everything below is linked to your account. None of it is sent to Meta, used for advertising, or used to track you across other companies' apps or websites.
| Email address | Your login, and messages about your account and membership. |
|---|---|
| Phone number | Only if you join on our website, where we ask for your mobile number to text you a welcome with your username and links to the app and to set your password. |
| Name and username | The display name and @username your posts are signed with. |
| User ID | The number that ties your account, posts and membership together. |
| Your answers when you set up the app | Your experience, how you like to trade, your goal, the tickers you follow, which notifications you want, and, only if you choose to answer, a rough band for the size of the account you trade (for example "under $5k"). The account-size band only shapes the position-size examples Kai gives you. Nobody else sees it and you can skip it. |
| Your content | Posts, replies, calls, polls and poll votes, ticker talk, War Room chat, reactions, alert cards and their updates, chart markup, reports you file, and your conversations with Kai. |
| Photos | Your profile picture, and pictures you choose to post. We only see photos you pick. |
| Audio | Only when you tap the microphone to ask Kai a question out loud. The recording is sent to be written down as text and is not kept by us. If you speak on the floor of a live War Room session (when that feature is on), the session is recorded and the speakers are transcribed for moderation, and you are told this before you join. |
| Camera | Only if you turn your camera on while you are on the floor of a live War Room session, so the room can see you. |
| Device push token | Lets us send the notifications you turned on. It identifies your device to Apple's or Google's push service, nothing more. We keep it with your account. When you turn notifications off for a device we stop using its token, and every token is deleted when you delete your account. |
| IP address | The internet address your device connects from. When you redeem an invite code, it is stored with that redemption so a code can't be abused. Staff actions are logged with the staff member's address. For signing up, onboarding and the billing page it is used only for a moment, to limit repeated requests, and is not stored. The membership link works out your country from it at the time of the request; we don't store the country or use it for anything else. |
| Membership status | Whether your membership is on a trial, active, past due or canceled, and the customer number our payment provider gives us. We never see your full card number. |
2. How you use the app
To make Cheat Code more useful to you, the app records how you use it, inside the app only:
- Visits: when you open the app, when you sign in and out, and how long each visit lasts.
- Screens: which screens you open and for how long.
- A short list of named buttons: for example the tabs and the menu wheel, Share, Report and Block, Follow, the post type you pick, skipping the tour, and sending a question to Kai. Not every tap, and never where on the screen you touched.
- Tickers and posts: the tickers you view and add to your watchlist; the topics and $tickers of your own posts; your reactions, calls, "I'm in" and poll votes; and the alerts you open.
- Notifications: which notification you tap and how soon after it was sent.
- War Room: the live sessions you join, how long you stay and how many messages you post.
- The app itself: the app version, whether you use iPhone, Android or the web, and how the app is installed. Not your device model, its settings or any device identifier.
We use this only inside Cheat Code: to put what you follow first, to send notifications at times you're usually around and stop sending the kinds you never open, to keep your daily streak, and to understand which parts of the app members use so we can improve them. Our staff can see a summary of each member's use (for example how many days they visited, how long visits last, and which kinds of notification they tap) in a staff-only view; other members never see it.
You can see everything the app has learned on Your profile & privacy in the app, remove any ticker or topic, switch personalisation off (we then keep only the days you open the app, for your streak, and nothing more is learned about you), or reset it at any time.
We never record what you type into search, your location, your Wi-Fi or network, your contacts, or anything that identifies your device beyond the push token and the IP address described in section 1. There are no outside analytics or tracking tools in the app.
3. Your posts
Everything you post is stored with your account, the time, its $tickers and the kind of post, so we can run the community and improve the app.
We analyse the words of your own posts to personalise the app. Unless you switch it off, the app reads the text of your own posts with fixed word rules (not a person, and not an AI model) to learn what you trade and how, for example options, 0DTE, swing trading, earnings or small caps, and the $tickers you mention. Only the results are kept in your profile, where you can see them, remove any of them, or switch this off with "Learn from the words of my posts". Other members' posts are never read to build your profile. Posts written before a reset are not read again.
Your questions to Kai are read the same way. Unless you switch it off with "Learn from what I ask Kai", the same fixed word rules read your own questions to Kai (never Kai's answers) for what you trade and the tickers you ask about. Only the results are kept in your profile. Questions asked before a reset are not read again.
4. AI safety checks, Kai and outside AI services
Safety checks on everything posted. To keep the community safe and on topic, every post, comment, chat and room message, the reason you give for a call, and your username and display name are sent to Anthropic to be checked automatically before other members can see them. This happens for every member and is part of posting, so it can't be switched off. If the check flags something, or can't finish, it stays hidden from other members (you still see it, marked as waiting) until it passes or a moderator reviews it. Kai's short lines in chat rooms are also written from the room's recent messages.
Kai is our AI assistant. Kai's written answers are produced by Anthropic (the company behind Claude), and Kai's voice features use OpenAI. Before the first time you use Kai, the app asks your permission and names these services. If you say no, Kai and other AI features stay off and the rest of the app works as normal. You can change your answer at any time in the app's settings.
When you have said yes, Kai's features send the content you ask about, and this is what is sent:
- To Anthropic: your messages to Kai and the conversation so far, and what Kai needs to answer: your display name, your experience, how you trade, the tickers you follow, your practice account and risk limits, what you asked Kai to remember, and your setup answers (including the optional account-size band). It also gets the market context needed to answer, such as prices and alert details. Your email address is not sent.
- To OpenAI: the recording of a question you ask out loud, to turn it into text; and Kai's written replies, when you choose to listen to them, to turn them into speech.
- To Cartesia: Kai's own written lines in live War Room sessions, to turn them into Kai's voice. Nothing about you is sent.
These companies process the data to provide their service to us under their own commercial terms and privacy commitments.
5. Who processes it
We use these companies to run the service. Each one gets only what it needs for its job.
| Supabase | Our database, login system and file storage. Your account, content and photos live here. |
|---|---|
| Vercel | Hosts the web app and our server. Keeps short-lived request logs (such as IP address and time) to run and protect the service. |
| Anthropic | Checks every post, message and username for safety, automatically. Writes Kai's answers, with your permission (see section 4). |
| OpenAI | Voice only, with your permission: speech to text, and Kai's spoken replies. |
| Cartesia | Kai's voice in live War Room sessions. Receives only Kai's own words. |
| LiveKit | Carries the audio and video of live War Room floor sessions, when that feature is on. |
| Stripe | Takes payment for the membership on our website and runs the billing page. Stripe holds your card details. |
| Resend | Sends account emails, such as your welcome, a trial ending and a failed payment. Receives your email address and the message. |
| Twilio | Sends the welcome text when you join on our website. Receives your phone number and the message. |
| Expo, Apple and Google | Deliver push notifications to your device using its push token. |
| Market data providers | Supply prices and company information. They receive ticker symbols, never anything about you. |
We may also share information if the law requires it, to protect members or the public from harm, or as part of a sale or merger of the business, in which case this policy keeps applying to your data.
6. What other members see
Cheat Code X is a community. Your username, display name, profile picture, posts, replies, calls and their results, XP and level can be seen by other members. Your email, payment details, setup answers, account-size band, activity and your private conversations with Kai are not shown to other members.
Moderators can see reported content and the reports themselves so they can act on them.
7. What we don't do in the app
- The app, on your phone or on the web, has no advertising, no ad networks, and no tracking across other companies' apps or websites.
- The app has no third-party analytics, attribution or crash-reporting tools. The activity in section 2 stays in our own database.
- We don't sell your account information, and we don't send anything from your account to Meta or any ad network.
- We don't read your contacts, your location, or photos you haven't picked.
- The microphone is used only while you are asking Kai a question or speaking on a War Room floor. On iPhone, what you say to Kai may be turned into text on the device by Apple's speech recognition. The camera is used only when you choose to take a photo to post (for example a screenshot of a win), or turn it on in a War Room session.
If we add a crash-reporting or analytics tool, we will update this policy before it ships.
8. Our marketing website and Meta's pixel
Our marketing website is the public page that tells people about Cheat Code X. It uses Meta's pixel, a small piece of code from the company behind Facebook and Instagram, so we can measure and improve our ads. The pixel is not in the app and not on this page.
What it collects. When you visit that page, the pixel sends Meta:
- the page address, the page you came from, and the time;
- your IP address, your browser type and your screen size;
- an ID stored in a cookie on your browser for 90 days, so a return visit can be recognised;
- that you viewed the page, and whether you tapped the button to the App Store or the button to join.
The page has no form, so it doesn't send your name, email or phone number. Meta may connect a visit to your Facebook or Instagram account if you have one, and uses it under its own privacy policy.
How to opt out. You can do any of these, and the page keeps working:
- Use a browser setting or extension that blocks trackers. When Meta's code is blocked, nothing is sent.
- Clear your cookies to remove the ID, and block cookies for that page to stop a new one being saved.
- If you have a Facebook or Instagram account, change how your activity from other websites is used in Meta's ad settings.
9. How long we keep it
- Your account and content: while your account exists.
- Detailed activity (section 2): 180 days, then only daily totals (how many times, and for how long, per day). The record of which notification you tapped stays with that notification, which is deleted with your account.
- Voice questions: not kept by us; sent to be written down and then discarded. Kai's spoken replies are stored as audio files so they can be replayed.
- War Room recordings and transcripts (when that feature is on): kept for moderation for a limited time.
- Device addresses: push tokens until you delete your account (a device you turned notifications off for is no longer used); the IP address stored with an invite redemption, for as long as that record exists (it is deleted with your account).
- Billing records: kept after an account is deleted, for accounting, tax and disputed charges, with your name and email removed from our copy.
- Backups: deleted data can remain in encrypted database backups until they roll off.
10. Deleting your account
In the app, open your account menu and choose Delete account. The screen tells you exactly what happens before you confirm:
- Deleted: your profile, alerts, watchlists, chart markup, every Kai conversation and what Kai remembered about you, your activity and interest profile, your devices and push tokens, notifications and settings, and your login.
- Anonymised: posts and replies that sit in conversations with other members. The content is removed and your name is cut from it, so other people's replies still make sense.
- Kept: payment records and other people's moderation records, as described above, with nothing that identifies you.
Deleting your account also cancels your membership straight away. If you can't use the app, email support@cheatcode.com from the address on the account and we will delete it for you.
11. Your choices and rights
- Turn Kai's outside AI services on or off in the app's settings.
- See, edit or reset what the app has learned on Your profile & privacy, and switch off learning from your posts or from your questions to Kai.
- See and delete what Kai remembers about you.
- Edit your profile, username and photo at any time.
- Turn notification types on or off in the app, or turn notifications off in your phone's settings.
- Block any member, and report any post or member.
- Delete a post you made, or your whole account.
- Ask us for a copy of your data, or to correct it, by emailing support@cheatcode.com. We'll answer within 30 days.
Depending on where you live, you may have further rights, such as those under the California Consumer Privacy Act. We honour them through the same address.
12. Age
Cheat Code X is for adults. You must be 18 or older to join, and we don't knowingly collect information from anyone younger. If you believe someone under 18 has an account, email us and we will delete it.
13. Security
Everything travels over encrypted connections. Your sign-in session is stored in your device's secure storage. Access to member data is limited to the people and systems that need it to run the service, and the database enforces who can read what. No system is perfectly secure; if a breach affects your data we will tell you as the law requires.
14. Changes and contact
If we change this policy we will update the date above, and for a significant change we will tell you in the app or by email before it takes effect.
Contact: support@cheatcode.com. See also the Terms of Use and the Support page.