Privacy Policy

Loxoda ("we", "us", "our") is the operator of loxoda.com and related Loxoda services. Loxoda is a trading name of Eliot Kindy. We are the data controller for personal data collected through these services. We are based in the United Kingdom.

Privacy / data questions: hello@loxoda.com

You may also complain to the UK Information Commissioner's Office (ICO): ico.org.uk.

Loxoda is software for education, illustration, and personal planning only. It is not financial advice, investment advice, tax advice, legal advice, accounting advice, or a recommendation to buy, sell, hold, or otherwise deal in any security, cryptoasset, pension, or other product. We are not authorised by the FCA to provide regulated advice. Outputs (including Monte Carlo confidence, targets, tax samples, and stress scenarios) are probabilistic illustrations based on your inputs and assumptions — not predictions, warranties, or guarantees of future results.

Account and authentication: email address and auth metadata when you create an account or sign in (via Supabase Auth), including magic-link / session cookies.

Payment and membership: Stripe processes payments. We receive subscription status, customer / subscription references, billing email, and plan identifiers. We do not store full card numbers — Stripe holds payment credentials under PCI DSS.

Planning data: if you use Loxoda while signed in, we store plan inputs you provide (for example date of birth, holdings and share counts, cash, lifestyle / obligations, contributions, income sources, partner details, tax / residency settings, and related preferences). We also store daily snapshots with aggregate figures only (portfolio value, projected value, plan confidence, target value) — not a full holdings list in the snapshot table. Coach email cadence metadata (for example last sent / opt-out) may be stored with your plan.

Market / price data: ticker symbols from saved plans may be used to refresh market prices via our providers so projections stay current. We do not sell your holdings list.

Communications: emails and messages you send us; transactional emails we send (welcome, billing, coach check-ins); optional marketing if you consent.

Usage and technical data: IP address, device / browser type, pages viewed, approximate timing, and diagnostic logs needed to run and secure the service.

Cookies: as described in our Cookie Policy.

We do not knowingly collect data from children under 18. Loxoda is intended for adults only.

• Provide, operate, and secure accounts, subscriptions, and the Loxoda cockpit
• Save, sync, export, and delete your plans and snapshots at your request
• Run projections, charts, reports, and optional coach email check-ins
• Process payments, prevent fraud, and manage membership entitlements
• Respond to support and legal requests
• Improve reliability, performance, and product quality using aggregate insights
• Send transactional notices; send marketing only with consent where required
• Comply with UK law and enforce our Terms

We do not sell personal data. We do not use your planning data to make automated decisions that produce legal or similarly significant effects about you without human involvement in a regulated-advice sense — projections are tools you operate.

• Contract: delivering the subscription and features you request (including cloud plan storage)
• Legitimate interests: security, fraud prevention, service improvement, transactional engagement (for example coach check-ins you can stop), limited analytics
• Legal obligation: tax, accounting, and regulatory record-keeping where applicable
• Consent: non-essential cookies and marketing communications (withdrawable anytime)

We use carefully selected processors under appropriate terms:

• Stripe — payments (stripe.com/privacy)
• Supabase — authentication and database for plans / snapshots
• Vercel — hosting and application infrastructure
• PostHog (EU-hosted) — product analytics and session replay, with numbers and typed entries hidden
• Resend — transactional and marketing email (welcome, coach check-ins, support, and updates you sign up for)
• EODHD (or similar market-data providers) — price history for holdings

We may disclose data if required by law, court order, or to protect rights, safety, and security. If we sell or reorganise the business, data may transfer to a successor under equivalent protections.

Some processors may process data outside the UK. Where required, we rely on appropriate safeguards (for example UK International Data Transfer Agreement / Addendum or adequacy decisions) as applicable.

We keep account and plan data while your account is active and for a reasonable period afterward. Billing and tax records may be retained up to 6 years (or longer if required by law). Snapshots follow your plan and are removed when plans / accounts are deleted (subject to backups that expire in the ordinary course).

You can export or delete Loxoda cloud data from Settings → Your Data, or email hello@loxoda.com. We aim to complete erasure requests within 30 days except where law requires retention.

Under UK GDPR you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data (subject to legal exceptions)
• Restrict or object to certain processing
• Data portability
• Withdraw consent where processing is consent-based

Contact hello@loxoda.com. We will respond within one month (extendable for complex requests as permitted by law).

We use HTTPS in transit, access controls, and industry-standard practices appropriate to the risk. No method of transmission or storage is 100% secure — you use the service at your own risk regarding residual security risk. Report suspected incidents to hello@loxoda.com.

If you are a Loxoda member, we may send occasional check-in emails based on aggregate snapshot deltas (for example confidence movement). Emails do not include your holdings list. You can ask us to stop coach emails; transactional billing / security mail may still be required.

We may update this policy. The "Last updated" date will change. Material changes may also be highlighted in-product or by email. Continued use after the effective date means you accept the updated policy.