Privacy Policy: Fibonacci

Translation notice: This is an English translation provided for convenience. The legally binding version is the Spanish one (Política de Privacidad). In case of any discrepancy, the Spanish version prevails.

Last updated: November 15, 2026 · Version: 1.5

1. Who is responsible

Fibonacci (fibonacciapp.com and app.fibonacciapp.com) is operated by wil studio, LLC, a limited liability company organized in the State of Delaware, United States ("we", "us"). Privacy contact: [email protected] (subject: "Privacy").

This policy explains what data we process, why, who we share it with, and what rights you have.

2. Data we process

We do not request sensitive data. The emotional log consists of personal notes about your trading: it is used only to show you your own statistics.

3. Your Google account data

If you sign in with Google, we receive only:

• your name;
• your email address;
• your profile photo;
• your Google account ID.

What we use it for: solely to create your Fibonacci account, identify you when you sign in, display your name and photo in the app and send you service communications (receipts, account and security notices).

What we do NOT do with your Google data:

• We do not access your Gmail, contacts, Drive, calendar or any other Google data.
• We do not sell your Google data.
• We do not use it for advertising, personalized or otherwise.
• We do not transfer it to third parties, except to the providers needed to deliver the service (section 6), when required by law or with your consent.
• We do not use it to train artificial intelligence models.
• No one on our team reads your Google data, except with your consent, for security reasons or when required by law.

Compliance with Google's policy: Fibonacci's use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including the Limited Use requirements.

Fibonacci's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How to withdraw access: you can delete your Fibonacci account from Settings → Privacy, and revoke Fibonacci's access from your Google account's security settings (myaccount.google.com/permissions).

4. How we use data

• Providing the service: creating and managing your account; importing, syncing and displaying your history; generating statistics, reports and certificates.
• Billing: managing the subscription and the free trial, including preventing multiple trials by the same person.
• Security: protecting your account, detecting fraud and unauthorized access, and fixing errors.
• Service communications: receipts, end of trial, renewals, policy changes, security notices.
• Analytics: improving the website and app, only if you accept.
• Legal compliance: keeping proof of acceptance, handling payment disputes and requests from authorities.

We do not sell or rent your personal data and do not use it for third-party advertising.

4 bis. Partners program

If you sign up with another user's invitation link, or if you invite other people, we record which account invited which, the status of each invitation and the discounts earned. We use this data only to run the program: applying discounts and preventing fraud and abuse, for example detecting self-referrals through the secure card identifier provided by Stripe.

The person who invited you only sees the status of your invitation (signed up, first payment, discount applied). They do not see your email, name, accounts, trades or payments.

We keep this data while both accounts exist. If either account is deleted, the link is deleted or anonymized, except for records of discounts applied, which are kept with billing data (7 years).

4 ter. Mentors and students

If you join a mentor's group, the mentor can only see the data you expressly authorize, in read-only mode. They never see your broker credentials and cannot trade on your accounts. You can change what you share or withdraw access at any time from the app; from that moment the mentor no longer sees your data.

Your mentor does not see your payment data or the individual status of your subscription. They only see the total number of eligible students, which determines the price of their plan.

Access log: we record when your mentor views your data and which section, and you can see that log in the app. We keep it for 12 months.

Evaluations, reports and certificates your mentor issues about you remain in both accounts as history. You can ask us to delete them from yours.

The mentor is an independent user, not part of Fibonacci. We share your data with them only at your instruction, and require them to use it solely for their educational work within Fibonacci. If you believe a mentor is misusing your data, write to us at [email protected] (subject: "Privacy").

4 quater. Friends

If you connect with other users as friends:

• Your friends always see your account name.
• Only if you enable it, they also see your monthly performance in %, your balance in USD (exact amount) and the progress of your shared goals. Each item has its own switch, all are off by default, and you can change them whenever you want. If you do not share your performance, you do not appear in the ranking.
• Your friends never see your photo, trades, notes, emotional log or broker data or credentials.
• The ranking is visible only to your accepted friends, never to other users or publicly.
• If you invite someone by email, we use that address only to send them your invitation. We do not send them advertising. If they do not accept within 30 days, the invitation expires and we delete their email.
• If you stop being friends, the friendship and shared goals are deleted, and each of you stops seeing the other's data.

4 quinquies. Website and app analytics

We measure, in aggregate, how the website and app are used in order to improve them. We only do this with your permission, and you can withdraw it whenever you want.

On the public website (fibonacciapp.com): if you accept analytics in the cookie banner, we use Metricool and PostHog. They receive the page address, the referring page when there is one, technical browser and device data (such as window size) and your IP address, which is used to infer your country. You can withdraw your permission from "Cookie preferences".

In the app (app.fibonacciapp.com): if you turn analytics on in Settings → Privacy (off by default), we use Cloudflare Web Analytics and PostHog. They only record which section of the app you visit (for example, Statistics or History), technical browser and device data, and your IP address to infer your country. They do not receive your user ID, name, email, trades, accounts or amounts, and they do not identify you as a person. We store on our server whether you gave permission and when. If you turn it off, we stop measuring immediately.

In both cases: we do not record your session or your clicks, we do not build visitor profiles, we do not measure sign-in, password-recovery or payment pages, or addresses containing account data, emails or payment codes, and these tools do not set cookies of their own. We honor your browser's Global Privacy Control and Do Not Track signals: if they are on, we do not measure. PostHog processes the data on its servers in the United States; it uses your IP only for an instant to infer your country and does not store it. Visits already sent before you withdraw your permission are not deleted automatically, but you can ask us to delete them at [email protected] (subject: "Privacy").

5. Broker and platform connections

• All connections are read-only: Fibonacci cannot open, modify or close trades, or withdraw or transfer funds.
• MetaTrader 4/5: connected through the MetaApi service using your investor password (read-only). Fibonacci does not store that password.
• cTrader: connected through the official cTrader API with a read-only authorization token.
• Interactive Brokers: connected through a read-only Flex token.
• Tokens and credentials that are kept are stored encrypted on our server.
• You can disconnect any account at any time from the app or the platform.

Platforms and brokers are independent services with their own privacy policies.

6. Providers we share data with

We share data only with the providers needed to deliver the service, which process it on our instructions:

We may also disclose data if required by law, to protect our rights or users' safety, or in the event of a merger, acquisition or sale of the company, with prior notice.

7. Where data is processed

Fibonacci operates from the United States. Our main server is in Boston, Massachusetts (USA). Your data is stored and processed in the U.S. and in the countries where our providers operate. By using the service from another country, you understand that your data is transferred and processed outside your country.

8. Security

• Encrypted connections (HTTPS).
• Hashed passwords.
• Broker credentials encrypted on the server.
• Optional two-step verification.
• Sessions visible and revocable from the app.
• Daily database backups, encrypted (AES-256) before leaving our server and stored on our server and in private Cloudflare storage.
• Restricted internal access.

No system is infallible. If an incident affecting your personal data occurs, we will notify you as required by applicable law.

9. How long we keep data

10. Your rights

Regardless of your country, you can:

• Access your data and export it in JSON format from Settings → Privacy.
• Correct your data from your profile.
• Delete your account and data from Settings → Privacy.
• Withdraw your consent to analytics or marketing at any time (on the website, from "Cookie preferences"; in the app, from Settings → Privacy).
• Close active sessions from the app.
• Contact us at [email protected] (subject: "Privacy") for any other request. We will respond within 30 days at most and may ask you to verify your identity.

California and other U.S. state residents: you have the rights granted by your state's privacy law (to know, access, delete, correct and not be discriminated against). We do not sell or share personal data for behavioral advertising.

11. Minors

Fibonacci is only for people aged 18 or over. By signing up you confirm you are of that age. If we detect a minor's account, we will delete it.

12. Changes to this policy

We will notify you of material changes by email or in the app before they take effect, and we will ask you to accept the new version when necessary.

13. Contact

[email protected] (subject: "Privacy") · wil studio, LLC · Delaware, USA