Legal
All legal documents for tilorah.co and Tilorah products in one place.
License Overview
How Tilorah site content, brand assets, demos, downloads, and active product software may be used.
Plain-English summary. Tilorah keeps ownership of the website, brand, app code, designs, demos, screenshots, and downloadable files unless a separate written agreement says otherwise. Product users receive only the limited right to use the relevant product for its intended purpose.
General Site License
All content published on tilorah.co, including text, layouts, screenshots, demos, downloadable files, product names, logos, and visual designs, is owned by Tilorah or its licensors and is provided for viewing, evaluation, and product support only.
You may not copy, scrape, crawl, mirror, republish, resell, sublicense, train models on, or commercially reuse Tilorah site content, demos, screenshots, downloadable files, or brand assets without written permission, except where a specific file or agreement grants that right.
Product Licenses
| Product | License posture | User/customer responsibility |
|---|---|---|
| intent: trade | Proprietary Tilorah app/service. Users receive a limited, non-transferable license to use enabled features during their active access period. | Users retain their trade journal content and are responsible for trades, risk management, tax/accounting records, broker reconciliation, and verifying AI/OCR output. |
Internal, local-only, draft, or personal-use projects are not licensed to the public unless Tilorah later publishes them under a separate agreement, notice, or app-specific license.
Third-Party Software
Tilorah public pages and intent: trade may include open-source libraries, CDN assets, fonts, app-store SDKs, cloud providers, AI providers, or other third-party services. Third-party components remain governed by their own licenses and terms.
Distributed apps should include a current THIRD_PARTY_NOTICES.md file. These notices must be regenerated before each release because package versions, CDN assets, and license obligations can change. The current public-site inventory is available in Third-Party Notices.
Separate Agreements
If Tilorah signs a customer contract, statement of work, source-code assignment, reseller agreement, or app-specific EULA that conflicts with this overview, the signed or app-specific agreement controls for that product and customer.
Terms of Service
The rules for using tilorah.co and intent: trade.
Not financial advice
intent: trade is an educational and productivity tool. It is not a broker, advisor, or financial service. Nothing produced by the app — including AI chart analysis, OCR-extracted trade data, statistics, or pattern detection — constitutes financial, investment, tax, or legal advice.
You alone are responsible for every trading or investment decision you make. You are responsible for trades, risk management, tax/accounting records, and broker reconciliation. Trading involves substantial risk of loss. Past performance does not predict future results. Consult a licensed professional before acting on any output of this app.
01Who we are
Tilorah is an independent product studio operated by TILORAH CORE LLC, a Florida limited liability company. References to "we", "us", or "Tilorah" mean TILORAH CORE LLC and its public website and services. References to "you" mean any individual or entity using our website, mobile apps, or services (collectively, the "Services").
These Terms cover everything published at tilorah.co and the current public Tilorah service, including intent: trade the intent: trade app distributed via web, Apple App Store, and Google Play. Internal, local-only, draft, paused, or personal projects are not customer-facing Services unless Tilorah later publishes them under these Terms or a separate written agreement.
02Acceptance
By creating an account, installing the app, or using any Service, you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the Services.
If you use the Services on behalf of an organization, you represent that you have authority to bind that organization to these Terms.
03Eligibility
- You must be at least 16 years old to use the Services. If you are between 16 and the age of legal majority in your jurisdiction, your parent or legal guardian must agree to these Terms on your behalf.
- You may not use the Services if you are barred from doing so under applicable law.
- You must provide accurate registration information and keep it up to date.
04Website, demos, and downloadable materials
The content on tilorah.co is provided for general informational, product-demonstration, and product-support purposes. It may include examples, screenshots, sample dashboards, downloadable files, demos, product notes, and links to third-party services. It is not professional advice and should not be relied on as financial, legal, tax, accounting, payroll, operational, or security guidance.
Demos and examples may use fake, seeded, incomplete, or simplified data. They are provided to show product behavior and design, not to guarantee production performance, data accuracy, business results, regulatory compliance, or suitability for your business.
Tilorah owns the Tilorah name, product names, logos, screenshots, website copy, demo designs, downloadable files, and other site content unless a file clearly says otherwise. You may view the site and use demos for evaluation, but you may not copy, scrape, crawl, mirror, train models on, republish, resell, or commercially reuse site content, screenshots, demos, downloadable files, or brand assets except as permitted by these Terms, a product EULA, or written permission from Tilorah.
Third-party links are provided for convenience. We do not control third-party sites or services and are not responsible for their content, security, pricing, availability, or terms.
05Product-specific license terms
Unless a separate signed agreement says otherwise, Tilorah grants you a limited, revocable, non-exclusive, non-transferable license to access and use each Service only for its intended purpose and only under these Terms, the applicable app store rules, and any product EULA or license file included with that product. Tilorah retains ownership of the software, source code, design, brand, documentation, and product materials.
intent: trade
intent: trade is licensed for your own personal trading journal and productivity use. A subscription or access code gives you permission to use the enabled features during the active subscription or access period; it does not transfer ownership of the app, code, models, designs, or brand. You may not resell access, provide it as a signal service, or use it to provide regulated financial services to others.
06intent: trade — what it is and isn't
intent: trade intent: trade is a personal trading journal and productivity tool. It helps you record trades, attach chart screenshots, view performance statistics, and optionally use AI features to analyze charts or extract trade data from images via OCR.
What intent: trade is
- A private notebook for your own trading activity.
- A productivity layer on top of your trading — log entries, calendar view, calculations.
- An educational tool that may help you spot patterns in your own behavior.
What intent: trade is NOT
- Not a brokerage. We do not place trades, hold funds, custody assets, or route orders.
- Not financial advice. AI suggestions, pattern detection, win-rate stats, and any other output are illustrative only.
- Not a signal service. We do not publish trade calls, recommendations, or buy/sell signals.
- Not regulated. Tilorah is not a registered investment advisor, broker-dealer, or financial institution in any jurisdiction.
You are solely responsible for
- Every trade you place and every position you open or close.
- Your trade plan, position sizing, risk management, stop-loss decisions, and broker reconciliation.
- Verifying any data the app extracts via OCR before relying on it.
- Validating any AI-generated chart analysis with your own judgment and independent sources.
- Tax reporting, accounting records, regulatory disclosure, and any compliance obligations connected to your trading.
07Accounts and security
You are responsible for safeguarding your account credentials and for all activity that occurs under your account. Notify us at hello@tilorah.co immediately if you suspect unauthorized access.
We may suspend or terminate accounts that violate these Terms, attempt to abuse the Services, or pose a risk to other users or the platform.
08Subscriptions, billing, and refunds
intent: trade is a paid product. Pricing, billing periods, and feature tiers are disclosed at the point of purchase, whether via the web, Apple App Store, or Google Play.
App store purchases
- Purchases made through the Apple App Store are governed by Apple's Standard EULA and Apple's Media Services Terms. Refunds are handled by Apple at reportaproblem.apple.com.
- Purchases made through Google Play are governed by Google Play Terms of Service. Refunds are handled by Google per Play's refund policy.
- Subscriptions auto-renew unless cancelled at least 24 hours before the end of the current period via your App Store or Google Play account settings.
Direct (web) purchases
- Direct subscriptions auto-renew at the disclosed price until cancelled. You may cancel any time from your account; cancellation takes effect at the end of the current billing period.
- We do not offer pro-rated refunds for partial billing periods, except where required by law (e.g. EU 14-day cooling-off period for digital services not yet activated).
09Acceptable use
You agree not to:
- Reverse-engineer, decompile, or attempt to extract source code from the Services.
- Use the Services to violate any law, including securities, tax, or anti-money-laundering laws.
- Upload content you do not have the right to upload, including copyrighted chart images you don't own or have license to use.
- Probe, scan, or test the vulnerability of the Services without prior written consent.
- Interfere with other users, send spam, or attempt to gain unauthorized access to other accounts.
- Use the AI features to generate content that promotes fraud, market manipulation, or pump-and-dump schemes.
- Resell, sublicense, or commercially distribute the Services without written permission.
- Scrape, crawl, copy, mirror, bulk download, or train models on Tilorah site content, demos, screenshots, downloadable files, or app output beyond normal personal evaluation or use permitted by a product license.
10Your content
You retain all rights to the trade entries, screenshots, notes, and other content you upload ("Your Content"). You grant Tilorah a limited, worldwide, royalty-free license to host, store, process, and display Your Content solely to operate the Services for you and to provide the features you have enabled (e.g., running AI analysis on screenshots you submit).
We do not sell Your Content. We do not use Your Content to train third-party models. See the Privacy Policy for details on how we handle data.
11AI features
intent: trade includes optional AI features such as chart analysis and OCR. When you use these features:
- The relevant image or text is sent to our backend (Supabase Edge Functions) and forwarded to the third-party AI model provider configured for that feature at the time of use. Tilorah may configure Anthropic, Google, OpenAI, or another commercial provider depending on product settings, availability, and approved vendor terms.
- AI-provider data handling depends on the provider, account tier, contract, region, and logging settings in effect at the time of use. Tilorah's policy is to use commercial API configurations that do not permit provider model training on your submitted content, but final statements must match the active provider contract and account settings.
- Output may be wrong, incomplete, or hallucinated. Always verify before relying on it.
- You must not submit content you do not have rights to, content involving real people in private contexts, or content that violates law.
12Intellectual property
Tilorah and its licensors own all rights, title, and interest in the Services, including the website, app code, brand assets, screenshots, demos, documentation, downloadable files, and the Tilorah name and logos. Nothing in these Terms grants you any right to use Tilorah trademarks except as expressly permitted. See the License Overview for the current product-license posture.
13Disclaimers
THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR UNINTERRUPTED SERVICE.
WITHOUT LIMITING THE FOREGOING, WE MAKE NO WARRANTY THAT TRADE JOURNAL OUTPUT — INCLUDING AI ANALYSIS, OCR RESULTS, OR PERFORMANCE STATISTICS — IS ACCURATE, COMPLETE, OR SUITABLE FOR ANY PURPOSE. ALL TRADING DECISIONS ARE MADE AT YOUR OWN RISK.
14Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, TILORAH AND ITS OFFICERS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, OR TRADING LOSSES, ARISING FROM YOUR USE OF THE SERVICES.
OUR TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF OR RELATING TO THESE TERMS IS LIMITED TO THE GREATER OF (A) THE AMOUNT YOU PAID TO TILORAH IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR (B) USD 50.
SOME JURISDICTIONS DO NOT ALLOW CERTAIN LIMITATIONS, SO PORTIONS OF THIS SECTION MAY NOT APPLY TO YOU.
15Indemnification
You agree to defend and indemnify Tilorah from any claim, loss, or expense arising from (a) your use of the Services, (b) Your Content, (c) your trading activity, or (d) your violation of these Terms or any law.
16Termination
You may stop using the Services at any time and delete your account from in-app settings or by emailing hello@tilorah.co. We may suspend or terminate your access if you violate these Terms or if continuing to provide the Services to you would expose Tilorah to legal or operational risk.
On termination, your access ends and we will delete or anonymize your data per the retention rules in the Privacy Policy. Sections that by their nature should survive termination (Disclaimers, Limitation of Liability, Indemnification, Governing Law) will survive.
17Changes
We may update these Terms. Material changes will be announced via email or in-app notice at least 14 days before they take effect, except when changes are required by law or to address security risks. Continuing to use the Services after changes take effect means you accept the updated Terms.
18Governing law
These Terms are governed by the laws of the State of Florida, United States, without regard to conflict-of-laws rules. Any dispute will be resolved in the state or federal courts located in Broward County, Florida, except where mandatory consumer-protection law in your jurisdiction grants you the right to bring suit locally.
If you purchased through the Apple App Store or Google Play, the dispute-resolution provisions of those platforms' agreements may also apply.
19App store specific terms
Apple App Store
If you obtained the app from the Apple App Store: these Terms are between you and Tilorah, not Apple. Apple is not responsible for the app or its content. Apple has no obligation to provide maintenance or support. In the event of any failure to conform to applicable warranty, you may notify Apple, who will refund the purchase price; Apple has no other warranty obligation. Apple is a third-party beneficiary of these Terms and may enforce them.
Google Play
If you obtained the app from Google Play: these Terms apply alongside the Google Play Terms of Service. Google is not a party to these Terms and is not responsible for the app.
20Contact
Questions, complaints, or notices: hello@tilorah.co
Privacy Policy
How we collect, use, and protect your information across tilorah.co and intent: trade.
Plain-English summary. We collect what we need to run our products and public website. Your trade data is yours. We don't sell personal information and we don't use advertising trackers. For AI features, our policy is to use commercial provider settings/contracts that do not permit provider model training on your submitted content; the exact handling must match the active vendor contract and account configuration.
Privacy Contents
- 01Who we are
- 02Scope
- 03What we collect
- 04Why we use it
- 05Legal basis (GDPR)
- 06Who we share with
- 07AI features
- 08Retention
- 09Security
- 10International transfers
- 11Thailand rights (PDPA)
- 12EU/UK rights (GDPR)
- 13California rights (CCPA/CPRA)
- 14Children
- 15App Store / Play disclosures
- 16Cookies
- 17Changes
- 18Contact
01Who we are
Tilorah is an independent product studio operated by TILORAH CORE LLC, a Florida limited liability company ("Tilorah", "we", "us"). We are the data controller for personal information processed through tilorah.co and intent: trade.
For privacy questions, contact hello@tilorah.co.
02Scope
This Policy covers tilorah.co and the current public Tilorah service, including intent: trade the intent: trade app distributed via web, Apple App Store, and Google Play. Our Terms of Service govern your use of these services. Internal, local-only, draft, paused, or personal projects are outside this public customer-facing Policy unless Tilorah later publishes them under a separate notice.
Product-specific privacy summary
| Property | Privacy position | Processors / responsibility |
|---|---|---|
| tilorah.co public pages | Public website pages may generate hosting/server logs such as IP address, request time, requested URL, referrer, and user agent. At this time, we do not use analytics cookies, advertising cookies, or cross-site tracking cookies on public Tilorah pages. | Hosting/CDN providers may process server logs for security, delivery, abuse prevention, and diagnostics. Some pages load Google Fonts, which causes your browser to request font assets from Google. |
| intent: trade | Cloud service controlled by Tilorah. We process account data, trade journal content, chart images, settings, subscription status, diagnostics, server logs, and optional AI/OCR requests to provide the service. | Processors include Supabase for hosting/auth/database/edge functions, AI providers only when you trigger AI/OCR, app stores/payment providers for purchases, and email providers for account/support messages. Retention, deletion/export, AI processing, and no-ad-tracking commitments are described below. |
Other internal, local-only, draft, or paused Tilorah tools are outside this public customer-facing Policy unless we later publish a product-specific privacy notice for them.
03What we collect
Information you give us
| Category | Examples | Where |
|---|---|---|
| Account info | Email address, password (hashed), display name (optional) | intent: trade sign-up |
| Profile / preferences | Time zone, currency, default lot size, theme | App settings |
| Trade entries | Symbol, direction, entry/exit, P/L, notes, tags, dates | Logged by you in-app |
| Uploaded images | Chart screenshots, broker statement screenshots | Attached to trade entries / submitted to OCR / AI features |
| Communications | Email content, support requests, feedback | When you email hello@tilorah.co |
| Payment info | Subscription status, transaction ID, plan tier | Via Apple, Google, or our payment processor — we do not store card numbers |
Information collected automatically
| Category | Examples | Source |
|---|---|---|
| Identifiers | User ID (UUID), session token | Generated on sign-up |
| Device / app info | OS version, app version, language, locale, device model | App runtime |
| Diagnostics | Crash logs, error traces (no trade data attached) | App runtime |
| Usage | Feature interactions (e.g. opened OCR, ran analysis), aggregated counts | App runtime |
| Server logs | IP address, request timestamps, requested URL, referrer, user agent | Public website hosting, CDN, backend, and Supabase |
What we do NOT collect
- We do not connect to your broker or read your live brokerage account.
- We do not collect your card or bank information directly — that goes to Apple, Google, or our payment processor.
- We do not use third-party advertising trackers, fingerprinting SDKs, or behavioral ad networks.
- We do not collect precise location, contacts, microphone, or camera data unless you explicitly upload an image.
04Why we use it
| Purpose | What we use |
|---|---|
| Provide the Service (account, sync, journal) | Account info, trade entries, uploaded images, identifiers |
| Run the AI features you trigger | The specific image or text you submit |
| Process payments and manage subscriptions | Payment info, account info |
| Customer support | Communications, account info, diagnostics |
| Security, fraud prevention, abuse detection | Server logs, identifiers, device info |
| Improve product reliability | Diagnostics, aggregated usage |
| Comply with legal obligations | Whatever is necessary |
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use your trade entries or screenshots to train third-party AI models.
05Legal basis (GDPR)
If you are in the EU, UK, or other GDPR/UK GDPR jurisdictions, we rely on the following lawful bases under Article 6:
- Contract (Art. 6(1)(b)) — to deliver the Service you signed up for: account creation, sync, journal, AI features, customer support.
- Legitimate interests (Art. 6(1)(f)) — for security, fraud prevention, debugging, and basic product improvement, balanced against your rights.
- Legal obligation (Art. 6(1)(c)) — when we must retain or disclose data to comply with law (e.g. tax records, lawful requests).
- Consent (Art. 6(1)(a)) — for anything that requires it, such as optional marketing emails. You can withdraw consent at any time.
06Who we share with
We share personal information only with the service providers we need to run the product. They process data on our instructions under written agreements.
| Provider | Role | Data shared | Region |
|---|---|---|---|
| Supabase | Hosting, authentication, database, file storage, edge functions | All account and product data | US / EU (configurable) |
| Anthropic, PBC (default when configured) | Chart analysis and OCR via Claude models | The image and prompt you submit when you trigger AI features. Training, logging, and retention commitments must match the active Anthropic contract, plan, and account settings. | US / as configured |
| Google LLC (alternate when configured) | Chart analysis and OCR via Gemini models | The image and prompt you submit when you trigger AI features. Training, logging, and retention commitments must match the active Google API contract, plan, and account settings. | US / as configured |
| OpenAI, L.L.C. (alternate when configured) | Chart analysis and OCR via GPT-class models | The image and prompt you submit when you trigger AI features. Training, logging, and retention commitments must match the active OpenAI API contract, project settings, and data controls. | US / as configured |
| Apple | App distribution, in-app purchases, App Store receipts | Subscription status, transaction IDs | Per Apple |
| App distribution, in-app billing | Subscription status, transaction IDs | Per Google | |
| Email provider (transactional) | Sending verification, password reset, receipt emails | Email address, message content | US / EU |
We may also disclose data when required by law, court order, or to protect the rights, property, or safety of Tilorah, our users, or others.
If Tilorah is involved in a merger, acquisition, or asset sale, personal information may be transferred to the successor entity, subject to this Policy.
07AI features
intent: trade includes optional AI features (chart analysis, trade-entry OCR). When you trigger one of these:
- The relevant image or text is sent over TLS to our backend (Supabase Edge Function), which forwards the request to the AI provider configured for that feature at the time of use. Tilorah may configure Anthropic, Google, OpenAI, or another commercial provider depending on product settings and availability.
- The provider returns a result. We store the result with the related trade entry in your account.
- Tilorah's policy is to use commercial API settings/contracts that do not permit providers to train their models on your submitted content. Provider logging, abuse monitoring, retention windows, regions, and opt-out settings vary by provider and account configuration, so any absolute statement must be verified against the active vendor contract and settings before release.
- You can choose not to use AI features. The rest of the journal works without them.
AI is not advice. AI output may be wrong. Treat it as a starting point, not a recommendation. See our Terms of Service for the full disclaimer.
08Retention
| Data | Retention |
|---|---|
| Active account data | Until you delete your account or request deletion |
| Backups | Up to 30 days after deletion |
| Server logs | Up to 90 days |
| Crash diagnostics | Up to 90 days |
| Billing / tax records | As required by Thai law and other applicable tax law (typically up to 7 years) |
| Support emails | Up to 24 months unless you ask us to delete sooner |
09Security
- All traffic is encrypted in transit (TLS 1.2+).
- Data at rest is encrypted by our infrastructure provider.
- Passwords are hashed with industry-standard algorithms — we never see your password in plaintext.
- Row-level security restricts each user's data to that user.
- We follow the principle of least privilege for internal access.
No system is perfectly secure. If we discover a breach affecting your data, we will notify you and the relevant authorities as required by law.
10International transfers
Tilorah operates from Thailand. Our service providers may process data in the United States, the European Union, and other regions. When personal data of EU/UK residents is transferred outside the EEA/UK, we rely on:
- Adequacy decisions where available, or
- EU Standard Contractual Clauses (SCCs) and/or the UK International Data Transfer Addendum, supplemented by appropriate technical and organizational safeguards.
11Your rights (Thailand — PDPA)
If you are in Thailand, the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") gives you the following rights as a data subject:
- Access your personal data and request a copy.
- Rectify inaccurate, incomplete, or outdated data.
- Erase data when it is no longer necessary, when you withdraw consent, or when it was processed unlawfully.
- Restrict processing in defined circumstances.
- Object to processing based on legitimate interests, including direct marketing.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time (without affecting the lawfulness of prior processing).
- Lodge a complaint with the Personal Data Protection Committee (PDPC) at pdpc.or.th.
To exercise these rights, email hello@tilorah.co with subject "PDPA Privacy Request". We will respond within 30 days.
12Your rights (GDPR / UK GDPR)
If you are in the EU, UK, or another jurisdiction with similar law, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase data ("right to be forgotten") in defined circumstances.
- Restrict processing in defined circumstances.
- Object to processing based on legitimate interests, including profiling.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time when consent is the legal basis.
- Lodge a complaint with your local data-protection authority. EU residents can find theirs at edpb.europa.eu; UK residents can contact the ICO at ico.org.uk.
To exercise any of these rights, email hello@tilorah.co. We will respond within 30 days.
13Your rights (California — CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you the right to:
- Know what personal information we collect, the sources, the purposes, and the categories of third parties we share with.
- Access a copy of the personal information we have collected about you in the last 12 months.
- Delete personal information, subject to legal exceptions.
- Correct inaccurate personal information.
- Limit use of sensitive personal information to purposes specified by law.
- Opt out of "sale" or "sharing" for cross-context behavioral advertising. Tilorah does not sell or share personal information in the CCPA/CPRA sense, and has not done so in the preceding 12 months.
- Non-discrimination — we will not deny service, charge a different price, or provide a different quality of service because you exercised a privacy right.
To submit a request, email hello@tilorah.co with subject "California Privacy Request". We may need to verify your identity before fulfilling the request. You may also designate an authorized agent to make a request on your behalf.
Categories collected (CCPA/CPRA notice)
- Identifiers (email, user ID, IP address)
- Customer records (account info, billing info — card details handled by processor)
- Commercial information (subscription tier, transaction IDs)
- Internet/network activity (server logs, app usage, diagnostics)
- User content (trade entries, uploaded images, notes)
We do not knowingly collect "sensitive personal information" as defined by CPRA in any category that would trigger the right to limit, beyond credentials used to access your account. We do not use this data for inference about characteristics.
14Children
Our Services are not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact hello@tilorah.co and we will delete it.
15App Store / Play Store disclosures
Apple App Privacy ("Nutrition Label") summary
For intent: trade, the data types we declare to Apple, the purposes, and whether linked to your identity:
| Data type | Purpose | Linked to you | Used for tracking |
|---|---|---|---|
| Email address | App functionality, account management | Yes | No |
| Name (optional) | App functionality | Yes | No |
| User ID | App functionality | Yes | No |
| Purchase history | App functionality, subscription management | Yes | No |
| User content (trade entries, photos) | App functionality (the journal itself) | Yes | No |
| Diagnostics (crash data, performance) | App functionality | No | No |
| Usage data (product interactions) | Analytics (aggregated only) | No | No |
We do not use any data for tracking across apps and websites owned by other companies.
Google Play Data Safety summary
| Data type | Collected | Shared | Purpose |
|---|---|---|---|
| Email address | Yes | No | Account management, app functionality |
| Name | Optional | No | Personalization |
| User IDs | Yes | No | Account management, app functionality |
| Photos | Yes (only those you upload) | To AI provider for the analysis you request | App functionality (chart analysis, OCR) |
| Files and docs | Yes (only what you upload, e.g. exports) | No | App functionality |
| App activity | Yes | No | Analytics, app functionality |
| Crash logs / diagnostics | Yes | No | App functionality |
| Purchase history | Yes | No | Subscription management |
Encryption in transit: yes. You can request data deletion: yes (in-app or via email).
16Cookies and similar technologies
tilorah.co uses minimal cookies and local storage:
- Public website pages — at this time, no analytics cookies, advertising cookies, or cross-site tracking cookies are used on public tilorah.co pages. Hosting/server logs may still record IP address, request time, requested URL, referrer, and user agent for security, delivery, abuse prevention, and diagnostics.
- Authenticated apps — session storage, local storage, or cookies may be used for authentication, sync state, security, theme, language, and product settings.
- Local-only or internal tools — any local-only or internal Tilorah tool may use local storage or files on the configured device. Tilorah does not receive that local app data during normal use unless you send it to us for support or the tool is later externalized under separate terms.
- We do not use third-party advertising or cross-site tracking cookies.
You can clear cookies and local storage in your browser settings at any time.
17Changes
We may update this Policy. Material changes will be announced via email or in-app notice at least 14 days before they take effect, except when changes are required by law. The "Last updated" date at the top reflects the most recent revision.
18Contact
For privacy questions, requests, or complaints:
- Email: hello@tilorah.co
- Subject line for rights requests: "Privacy Request — [PDPA / GDPR / CCPA / Other]"
If you are in the EU and we appoint an Article 27 representative, we will list them here. Until then, please contact us at the email above.
Security
How to report security concerns for tilorah.co and Tilorah products.
Security contact. Email hello@tilorah.co with the subject line "Security Report" if you believe you found a vulnerability or data exposure.
Reporting Guidelines
- Include the affected URL, product, account context if relevant, and clear reproduction steps.
- Include screenshots, logs, or proof-of-concept details only when they are necessary to explain the issue.
- Do not include passwords, private keys, access tokens, payment data, government IDs, or other sensitive personal data in the report.
- Do not access, modify, delete, retain, or share data that does not belong to you.
Scope
This page covers the public tilorah.co website and active Tilorah products published by Tilorah. Internal, paused, archived, draft, or personal-use projects are outside public scope unless Tilorah publishes them as customer-facing services.
Response
Tilorah will review security reports in good faith and prioritize issues based on practical impact, exploitability, affected data, and current product status. Response times may vary for paused, internal, prototype, or non-customer-facing projects.
Operational Notes
- The public site is static HTML and assets unless a page clearly states otherwise.
- Email links open the visitor's chosen email client or provider.
- Product-specific data handling is covered in the Privacy Policy.
- Product use, disclaimers, and user responsibilities are covered in the Terms of Service.
Third-Party Notices
A release checklist and notice inventory for third-party software, assets, fonts, and services used by the public tilorah.co website.
Release note. This page should be regenerated and verified before each production release because page assets, font families, CDN URLs, package versions, and license obligations can change.
Public Site Assets
| Component | Observed source/version | License or terms to verify | Use |
|---|---|---|---|
| Google Fonts | Fraunces and Geist on legal pages; Fraunces/Geist on the studio landing page | Font licenses via Google Fonts, plus Google Fonts API terms | Typography |
Public Site Services
- Website hosting/CDN may process normal server logs for delivery, security, diagnostics, and abuse prevention.
- Email links such as
mailto:hello@tilorah.coopen the visitor's chosen email client or provider.
Release Action
- Confirm exact font families and licenses used by the deployed pages.
- Update the Privacy Policy if analytics, cookies, pixels, forms, CDN scripts, or embedded third-party media are added.
- Keep
legal.html(contains all English legal sections: License, Terms, Privacy, Security, Notices, Refund, AI Disclosure, EULA), Thai translations (terms-th.html,privacy-th.html,license-th.html), and the sourceTHIRD_PARTY_NOTICES.mdin the deploy checklist.
The source notice inventory remains available as THIRD_PARTY_NOTICES.md.
Refund & Cancellation Policy
How cancellations, refunds, and credits work across Tilorah products.
Quick version. Cancel anytime. If you're unhappy within the first 7 days, we'll refund you in full, no questions asked. After that, contact us and we'll work something out.
01Subscription plans
| Plan | Price | Billing |
|---|---|---|
| Standard | $15.99 / month | Monthly recurring |
| Grand | $29.99 / month | Monthly recurring |
All subscriptions are billed through LemonSqueezy. Prices are in USD.
02Cancellation
- Cancel anytime from your LemonSqueezy customer portal or by emailing hello@tilorah.co.
- Cancellation takes effect at the end of your current billing period. You keep access to paid features until then.
- No partial-month refunds for time remaining in the current period.
- After cancellation, your data remains accessible. You can export it at any time.
03Refund policy
First 7 days
If you're not satisfied within 7 days of your first purchase, email hello@tilorah.co for a full refund. No questions asked.
After 7 days
Refunds are evaluated case-by-case. Contact hello@tilorah.co with your reason and we'll do our best to help.
Forgotten renewals
If you forgot to cancel before a renewal charge, contact us within 48 hours for a full refund of that renewal.
Technical issues
If the app is unusable due to a bug on our side, we'll either fix it promptly or refund the affected billing period.
Processing
Refunds are returned to your original payment method via LemonSqueezy. Allow 5–10 business days for the refund to appear, depending on your bank.
04AI top-up packs
AI top-up packs are one-time purchases that add credits to your account.
- Unused packs: Refundable within 7 days of purchase.
- Used credits: Non-refundable once credits have been consumed.
05App Store & Google Play purchases
Subscriptions purchased through the Apple App Store or Google Play Store are managed by Apple and Google respectively. We cannot process refunds for app store purchases directly.
06Free features
Features available without a subscription have no refund implications. Your free data and local functionality are always yours.
07Changes to this policy
We may update this policy. Changes apply to purchases made after the update date. Active subscribers keep the terms they subscribed under until their next renewal.
08Contact
For refund requests or billing questions:
- Email: hello@tilorah.co
- Response time: Within 2 business days
AI Disclosure
How Tilorah products use artificial intelligence — what it does, what it doesn't do, and how your data is handled.
Not financial advice
AI-generated analysis, chart readings, pattern detection, and trade statistics produced by our apps are for educational and informational purposes only. They do not constitute financial, investment, tax, or legal advice. You are solely responsible for your trading and investment decisions. Trading involves substantial risk of loss.
01Which products use AI
| Product | AI features | AI provider |
|---|---|---|
| intent: trade | Chart screenshot analysis, trade pattern detection, statistical insights, natural-language trade notes | Anthropic (Claude API) |
Our public website pages do not send user content to AI providers.
02How AI features work
When you use an AI-powered feature in intent: trade:
- Your input (e.g., a chart screenshot or trade data) is sent to the AI provider's API.
- The provider processes the input and returns a response (e.g., chart analysis or pattern summary).
- The response is displayed in the app. We may store the response alongside your trade data for your future reference.
AI features are opt-in. The app works fully without them. You choose when to invoke AI analysis.
03What data is sent to AI providers
- Chart screenshots you explicitly submit for analysis.
- Trade data (entry/exit prices, dates, symbols) when you request AI-powered insights.
- Trade notes when you use natural-language features.
We do not send:
- Your email address, name, or account credentials.
- Your full trade history (only the specific data you submit).
- Data from trades you haven't explicitly asked the AI to analyze.
- Any data in the background without your action.
04AI model training
Your data is not used to train AI models.
We use commercial API agreements that prohibit the provider from using your submitted content for model training. Specifically, Anthropic's API terms state that inputs and outputs are not used to train their models.
If we change AI providers in the future, we will verify equivalent training-exclusion terms before switching and update this disclosure accordingly.
05Accuracy and limitations
AI-generated content may be:
- Inaccurate. AI can misread charts, misidentify patterns, or produce incorrect statistics.
- Incomplete. AI analysis does not consider all market factors, news, or context beyond what you provide.
- Non-deterministic. The same input may produce slightly different outputs on different occasions.
Always verify AI-generated analysis against your own judgment and other sources before making any trading decision.
06AI usage and credits
AI features consume credits from your subscription plan or purchased AI top-up packs. Each AI call has a cost based on the amount of data processed. Your current credit balance and usage are visible in the app.
07Your control
- Opt-in only. AI features never run automatically. You explicitly trigger each analysis.
- Delete anytime. AI-generated results stored with your trades can be deleted at any time.
- Export. Your data export includes AI-generated content alongside your trade data.
- Works without AI. Every core feature of the app (trade logging, statistics, journaling) works without AI.
08Children
AI features follow the same age restrictions as the rest of the app. Our products are not directed to children under 16.
09Changes
If we add AI features to other products, change AI providers, or materially change how AI processes your data, we will update this disclosure and note the change date. Active subscribers will be notified of material changes.
10Contact
Questions about AI in Tilorah products:
- Email: hello@tilorah.co
End User License Agreement
License terms for Tilorah mobile applications, including intent: trade on Apple App Store and Google Play.
Plain-English summary. You get a personal license to use the app while your subscription is active. You own your trade data. The app is not financial advice. Apple and Google are not responsible for the app.
This End User License Agreement (“EULA”) is between you and TILORAH CORE LLC (“Tilorah”, “we”, “us”) for the intent: trade mobile application and related services (the “App”). By installing, accessing, or using the App, you agree to this EULA. If you do not agree, do not install or use the App.
This EULA supplements our Terms of Service and Privacy Policy, which also govern your use of the App. If this EULA conflicts with the Terms of Service on an app-specific matter, this EULA controls for that matter.
01License grant
We grant you a limited, non-exclusive, non-transferable, revocable license to install and use the App on devices you own or control, solely for your personal, non-commercial trading journal and productivity purposes, subject to this EULA and any applicable app store terms.
This license does not transfer ownership of the App, its source code, designs, models, or brand assets.
02Subscriptions
| Plan | Price | Billing |
|---|---|---|
| Standard | $15.99 / month | Monthly, auto-renewing |
| Grand | $29.99 / month | Monthly, auto-renewing |
- Subscriptions auto-renew unless cancelled at least 24 hours before the end of the current billing period.
- Cancel anytime via your app store account settings or LemonSqueezy customer portal.
- Pricing and features are disclosed at the point of purchase.
- See our Refund & Cancellation Policy for full refund terms.
03AI features
The App includes optional AI-powered features (chart analysis, pattern detection, OCR). These features are opt-in only and subject to our AI Disclosure.
Not financial advice
AI output is not financial, investment, tax, or legal advice. You are solely responsible for all trading decisions. See our Terms of Service for the full financial disclaimer.
04Your content
You retain ownership of all trade entries, screenshots, notes, and other content you create in the App (“Your Content”). We do not sell Your Content or use it to train AI models. You can export or delete Your Content at any time. See our Privacy Policy for details.
05Restrictions
You may not:
- Copy, modify, distribute, sell, or lease any part of the App.
- Reverse-engineer, decompile, or extract source code from the App.
- Use the App to provide financial services, signal services, or advisory services to third parties.
- Use the App in violation of any applicable law, including securities, tax, or anti-money-laundering laws.
- Remove or alter any proprietary notices in the App.
- Resell, sublicense, or commercially distribute access to the App.
06Updates
We may release updates to the App that add features, fix bugs, or address security issues. Some updates may be required for continued use. We are not obligated to provide updates, maintenance, or support beyond what is required by applicable law or app store terms.
07Termination
This license is effective until terminated. You may terminate by deleting the App and cancelling any active subscription. We may terminate or suspend your license if you violate this EULA or our Terms of Service.
On termination, you must stop using the App. Your data is handled per the retention rules in our Privacy Policy. Sections that by their nature should survive termination (Disclaimers, Limitation of Liability, Governing Law) will survive.
08Disclaimers
THE APP IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR UNINTERRUPTED SERVICE.
THE APP IS NOT A BROKER, ADVISOR, OR FINANCIAL SERVICE. ALL TRADING DECISIONS ARE MADE AT YOUR OWN RISK. TRADING INVOLVES SUBSTANTIAL RISK OF LOSS.
09Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, TILORAH WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, OR TRADING LOSSES, ARISING FROM YOUR USE OF THE APP.
OUR TOTAL LIABILITY IS LIMITED TO THE GREATER OF (A) THE AMOUNT YOU PAID TO TILORAH IN THE 12 MONTHS BEFORE THE CLAIM, OR (B) USD 50.
10Apple App Store
If you obtained the App from the Apple App Store, the following applies:
- This EULA is between you and Tilorah, not Apple. Apple is not responsible for the App or its content.
- Apple has no obligation to provide maintenance or support for the App.
- In the event of any failure to conform to applicable warranty, you may notify Apple for a refund of the purchase price; Apple has no other warranty obligation.
- Apple is not responsible for addressing any claims by you or a third party relating to the App, including product liability claims, legal compliance claims, or consumer-protection claims.
- In the event of a third-party intellectual property claim, Tilorah, not Apple, is responsible for investigation, defense, settlement, and discharge.
- You represent that (a) you are not located in a country subject to a U.S. Government embargo or designated as a “terrorist supporting” country, and (b) you are not on any U.S. Government prohibited or restricted party list.
- Apple and its subsidiaries are third-party beneficiaries of this EULA and may enforce it against you.
11Google Play
If you obtained the App from Google Play:
- This EULA applies alongside the Google Play Terms of Service.
- Google is not a party to this EULA and is not responsible for the App.
- Google has no obligation to provide maintenance or support for the App.
12Governing law
This EULA is governed by the laws of the State of Florida, United States, without regard to conflict-of-laws rules. Disputes will be resolved in state or federal courts in Broward County, Florida, except where mandatory consumer-protection law grants you the right to bring suit locally.
13Contact
Questions about this EULA:
- Email: hello@tilorah.co