Privacy Policy

Version 1.0.3 · Effective 1 September 2026

The Korean-language version is the authoritative legal text under Korea's PIPA.

Revision history

• 1.0.3 (effective 1 September 2026) — amended together with the Terms of Use, under Article 16(2) of those Terms. Added the "AI-client reports" item to Section 1 and amended the IP bullet's request enumeration and the Section 3 retention table alongside it. Version aligned with Terms 1.0.3 (the new transmission of AI-client reports to the Company — default on, off in the app's settings). The Company receives one new item (product reports written by an AI); no other item, purpose, retention period, processor or data-subject right changed.
• 1.0.2 (effective 31 August 2026) — amended together with the Terms of Use, under Article 16(2) of those Terms. The section below now records that what leaves your computer through an AI client integration is limited to the permissions you have turned on, and that the default immediately after connecting is narrower. The categories of personal data processed, the purposes, the retention periods, the processors and your rights as a data subject are unchanged — this amendment reduces what can leave your computer.
• 1.0.1 (effective 30 August 2026) — amended together with the Terms of Use, as Article 16(2) of those Terms requires. The item in section 1 below now records that update checking has become a setting the user can turn off. The items processed, the purposes, the retention periods, the sub-processors and your rights did not change.
• 1.0 (effective 29 August 2026) — first issue.

TestMyLogic (the "Service") is a desktop analysis tool that validates crypto strategy backtests for overfitting. This policy describes the personal data the Service processes during its free, anonymous stage — the items, purposes, retention periods, sub-processors, and your rights.

1. What we process, and why

The Service processes only the items below; anything not listed is not collected.

• Feedback reply email (optional) — collected only if you enter it, and only to reply to your message.
• Feedback title, body, and a diagnostic log excerpt — for error diagnosis and quality. The app version, build ID, OS, language, and the screen where the issue occurred are attached. The diagnostic log is attached only if you tick the box yourself; it is off by default. Before anything is sent, the app masks (scrubs) the identifying values it can derive from this machine, such as user paths and email addresses.
• AI-client reports (title, body, reproduction context) — for diagnosing faults and improving quality. Bug and improvement reports about this product that a connected AI client left inside the app are transmitted by the app to the Company's server when automatic transmission is on (on by default; the app's settings screen turns it off). The report kind, the reporting AI client's name, the app version and the operating system are attached. No reply email and no diagnostic log are attached on this channel. Before sending, the app scrubs machine-derived identifying values such as user paths (Terms of Use, Article 15(11)).
• IP address in web/API access logs — for operating the service and preventing abuse (rate limiting). Occurs when you visit the site, and when the app makes a request to our servers (license check, update check, consent record, feedback, AI-client reports).
• Update-check requests (app version, OS, IP) — to deliver updates. When the app asks for the latest version, its version, OS and architecture are in the request URL. We keep no separate record of these requests; they appear only in the access logs above. Automatic checking can be turned off in the app's settings; with it off, this request happens only when you run a check yourself (Terms of Use, Article 9(7)).
• Anonymous device registration / license (lease) records — device public key, fingerprint, issue/renewal history, and app version. Pseudonymized data, not linked to an account and containing nothing about how you use the app.
• Terms and privacy-policy consent records — device public key, the version of each document you accepted, the time of acceptance (both the device's clock and our server's), the app version, and the language the documents were shown in. Its purpose is to establish which version you accepted and to ask again when a document is revised. Nothing else is recorded.
• Download counts per artifact — the website tallies how many times each kind of artifact is downloaded. The record holds only the timestamp, the artifact kind and the version — no IP address, no browser information, no referrer.

The Service collects no account or payment information (free, anonymous stage) and does not track how you use it (no usage tracking). Your strategy files, raw market data (OHLCV), and full trade records stay on your computer.

The optional feature — what leaves your computer when you connect an AI client

If you connect an AI client, the following may be passed to your own AI provider — only where you have turned that item's permission on in the App, and then only within the scope of what you ask that AI to do. We do not receive any of it.

Immediately after connecting, only the first item below is on; the other four are off. You turn each item on and off in the App's settings screen, and each item states what is passed when it is on (Terms of Use, Article 15(10)).

• Verdict grades, summary statistics, and configuration values
• The result rows of a query you asked for, which include stored price candles and individual trade rows — 1,000 rows by default, 10,000 at most, with each string value truncated at 500 characters
• The body of a strategy file (up to 32 KiB per direction)
• A screen capture of the app window — if the AI asks, the app captures its own window and passes it along. It does not capture other programs or the desktop
• The absolute path of the workspace folder on your computer. On Windows that path normally contains your account name

There is no path by which a whole price file or a whole result matrix flows to an AI client. The AI client you connect is governed by its provider's own privacy policy, which you should review.

The transmission to the Company of product reports a connected AI client leaves inside the app is covered by the "AI-client reports" item in Section 1 above — what the Company receives on that channel is a report the AI wrote, not the items in this list.

2. Sub-processors and cross-border transfer

The Service relies on the sub-processors below; depending on where their servers are, personal data may be transferred outside Korea.

• Vercel Inc. (web hosting) — United States and others: serving the website
• Supabase (database, authentication) — Seoul region, Republic of Korea: storing feedback, releases, device/lease records, and consent records
• Cloudflare, Inc. (DNS, download delivery via R2) — United States and others: domain and installer delivery

3. Retention

Where the law requires it, data is retained for the period the law specifies.

4. Your rights and how to exercise them

You may request access to, correction of, deletion of, or suspension of the processing of your personal data. Send requests to the contact in section 6 below; we respond within 10 days of receipt.

5. Children's personal data

The Service does not collect personal data from children under the age of 14.

6. Personal information protection officer and contact

The following person is designated as the personal information protection officer, with overall responsibility for personal data processing and for handling complaints and remedies related to it.

7. Changes to this policy

If this policy changes we will give notice through the website, and the app will display the revised policy and ask for your consent again. The revision history, version and effective date appear at the top of this document.