Privacy Policy — Constant Signal

Last updated: July 10, 2026 Applies to: the Constant Signal mobile application (“App”) and related services.

1. Who we are

Constant Signal is operated by Constant LLC, a Wyoming limited liability company (“Constant,” “we,” “us,” or “our”), with a registered/principal address at Registered address available upon written request (contact admin@constantqj.com).

• Governing law / jurisdiction: Wyoming, USA (see Section 15).
• Contact for privacy matters: admin@constantqj.com
• Data-protection point of contact: [NAME/TITLE OR “Privacy Contact”], admin@constantqj.com (we do not currently designate a statutory Data Protection Officer; confirm whether one is required — see open items).

This Policy explains what personal information we collect through the App, why we collect it, how it is used and shared, how long we keep it, your rights, and how to exercise them — including how to delete your account.

2. What Constant Signal is (and is not)

Constant Signal is a research and educational tool designed to help users learn to read the market “tape” — real-time price, volume, and short-term “whips and spikes” for a single instrument. The account and figures shown in the signal are a simulated / anonymized demo, not a real brokerage account.

Constant Signal is not investment, financial, legal, or tax advice, is not a recommendation to buy or sell any security or instrument, and is not personalized advice. The App does not connect to any user brokerage account, does not place, route, or automate trades, and does not access your financial accounts or credentials. (This section is included for context; the binding trading/educational disclaimers live in the Terms of Use.)

Because the App is deliberately narrow in scope, our data practices are minimal by design. Data minimization is our guiding principle: we try to collect only what is necessary to give you an account, verify your subscription, and keep the App working.

3. Information we collect

We collect only the following categories of personal information:

3.1 Account information (Sign in with Apple)

When you create an account, you use Sign in with Apple. Depending on your Apple settings and choices, Apple provides us with: - Your name (as you choose to share it), and - An email address — which may be Apple’s private email relay address (an @privaterelay.appleid.com forwarding address) rather than your personal email, if you choose to hide your email.

We do not receive your Apple ID password. We receive a unique Apple user identifier that lets us recognize your account on return visits.

3.2 Subscription / entitlement status

Constant Signal offers an auto-renewing subscription (US $29.00/month; Apple product id com.constantsystems.constantsignal.monthly) that unlocks the live signal. Payment is handled entirely by Apple through App Store In-App Purchase. We receive and store only your entitlement status — for example, whether your subscription is active, expired, in a grace period, or cancelled, and related non-financial transaction metadata (such as product identifier and renewal/expiration dates) needed to grant or revoke access.

We never see or store your payment card, bank, or other financial account details. Apple processes all payments. (Note: subscription price, currency, and renewal terms are also governed by Apple; see Apple’s terms.)

3.3 Diagnostics and crash data

We collect minimal app diagnostics and crash data — such as crash logs, error reports, and basic performance/stability information — to keep the App reliable and fix defects.

3.4 What we do NOT collect

To be explicit, Constant Signal does not collect or process: - Trading data, orders, positions, or brokerage account information; - Brokerage or financial-account credentials; - Payment card or bank data (Apple handles payment); - Precise or coarse geolocation; - Advertising identifiers or cross-app/cross-site tracking data (we run no advertising and do not use App Tracking Transparency / IDFA — see Section 9); - Contacts, photos, microphone, health, or biometric data; - Special categories of sensitive personal data.

4. Why we collect it, and how we use it

We use the information above only for these purposes:

We do not use your information for advertising, ad targeting, profiling for marketing, or sale. We do not use your personal information to train third-party advertising or unrelated machine-learning models.

5. Legal bases for processing (EEA/UK — GDPR framing)

Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — to create your account, provide the App, and administer your subscription.
• Legitimate interests (Art. 6(1)(f)) — to keep the App secure, stable, and functional (diagnostics/crash data), and to prevent fraud/abuse, balanced against your rights.
• Legal obligation (Art. 6(1)(c)) — to comply with applicable law and respond to lawful requests.
• Consent (Art. 6(1)(a)) — where we ever rely on consent (e.g., any optional communications), you may withdraw it at any time.

6. How we share information (sub-processors and disclosures)

We do not sell your personal information and do not share it for cross-context behavioral advertising (see Section 9). We disclose personal information only to the limited service providers (“sub-processors”) that help us run the App, and only as needed for the purposes above:

[confirm sub-processors] — Before publication, confirm the complete, current list of sub-processors (including Supabase’s underlying cloud/hosting region and any crash-reporting or email-delivery vendors), and ensure a data-processing agreement (DPA) is in place with each.

We may also disclose information: (a) to comply with law, legal process, or lawful government requests; (b) to enforce our Terms or protect the rights, safety, and security of users, the public, or Constant; and (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy or notify you as required by law.

We do not disclose your information to data brokers or advertisers.

7. International data transfers

We are based in the United States, and our sub-processors may process data in the United States or other regions. If you access the App from outside the United States, your information may be transferred to, stored in, and processed in the U.S. or other countries whose data-protection laws may differ from your own.

Where required (e.g., for EEA/UK personal data), we will rely on an appropriate transfer mechanism, such as the EU Standard Contractual Clauses or another lawful mechanism.

8. Data retention

We keep personal information only as long as necessary for the purposes described in this Policy:

• Account and subscription-status data — retained while your account is active.
• After account deletion — we delete or de-identify your account data from our active systems within [e.g., 30] days of a verified deletion request, except where we must retain limited records to comply with law, resolve disputes, or enforce our agreements. Note that Apple retains its own records of purchases/subscriptions under Apple’s policies, which we do not control.
• Diagnostics / crash data — retained for [retention period — confirm] and then deleted or aggregated/de-identified.
• Backups — residual copies in encrypted backups are purged on our ordinary backup rotation cycle of [backup cycle — confirm].

9. No sale, no sharing for ads, no tracking

• We do not sell your personal information for money or other valuable consideration.
• We do not “share” your personal information for cross-context behavioral advertising (as those terms are defined under California’s CPRA).
• The App contains no third-party advertising, no ad SDKs, and no advertising identifiers.
• We do not track you across other companies’ apps or websites, and the App does not present an App Tracking Transparency (ATT) prompt because it does not track in the ATT sense.
• We do not knowingly process sensitive personal information for the purpose of inferring characteristics about you.

Because we do not sell or share for ads, there is no advertising-related opt-out to offer; however, you retain the privacy rights described in Sections 11–12.

10. Children’s privacy

Constant Signal is a general-audience research/education tool intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18, and in no event from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a minor has provided us personal information, contact admin@constantqj.com and we will delete it.

11. Your privacy rights — California (CCPA/CPRA) and other U.S. states

Depending on your state of residence, you may have the right to:

• Know / access the categories and specific pieces of personal information we have collected about you;
• Delete your personal information (see Section 13 for the in-app flow);
• Correct inaccurate personal information;
• Portability — receive a copy of certain information in a portable format;
• Opt out of sale/sharing — not applicable because we do not sell or share for cross-context advertising (Section 9);
• Limit use of sensitive personal information — not applicable because we do not use sensitive personal information for the purposes that trigger this right;
• Non-discrimination — we will not discriminate against you for exercising any right.

How to exercise: submit a request in-app (Section 13) or email admin@constantqj.com. We will verify your identity using your account/email of record before fulfilling access, correction, or deletion requests. You may use an authorized agent where the law permits, subject to verification. We aim to respond within the timeframes required by applicable law (generally 45 days under CCPA/CPRA, extendable as permitted).

California “Shine the Light”: we do not disclose personal information to third parties for their own direct-marketing purposes.

12. Your privacy rights — EEA / UK (GDPR)

If the GDPR/UK GDPR applies to you, you have the rights to: access; rectification; erasure (“right to be forgotten”); restriction of processing; data portability; object to processing based on legitimate interests; and to withdraw consent where processing is based on consent (without affecting prior processing).

To exercise these rights, use the in-app tools (Section 13) or email admin@constantqj.com. You also have the right to lodge a complaint with your local supervisory authority. [If we target the EEA/UK, confirm whether an EU/UK representative under Art. 27 must be appointed — see open items.]

13. Account deletion (in-app) — how to delete your account and data

Because Constant Signal offers accounts, the App provides a built-in way to delete your account, consistent with Apple’s App Store requirements.

To delete your account and associated personal data: 1. Open the App and go to [Settings → Account → Delete Account] [confirm exact in-app path/label]. 2. Confirm the deletion when prompted. 3. Your account record and associated personal data (name, email/relay, entitlement status) will be removed from our active systems, and residual backup copies will be purged on our normal backup cycle (Section 8), subject to any limited legal-retention exceptions.

You may also request deletion by emailing admin@constantqj.com from the email associated with your account.

Important notes about deletion: - Deleting your account does not automatically cancel your Apple subscription. To stop future charges, manage or cancel your subscription in the App Store / your Apple account settings (Settings → your name → Subscriptions on iOS). Apple’s refund and billing policies govern any charges. - Apple maintains its own records of your Sign in with Apple usage and purchase history, which we do not control. You can review and manage which apps use your Apple ID at [Apple ID settings].

14. How we protect information (security)

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit (TLS), storage in our managed Supabase (Postgres) backend with [encryption at rest / access controls — confirm what Supabase provides and how it is configured], restricted access on a need-to-know basis, and reliance on Apple’s secure Sign in with Apple and In-App Purchase infrastructure.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and authorities as required by applicable law.

15. Governing law

This Policy and any dispute relating to it are governed by the laws of the State of Wyoming, USA, without regard to conflict-of-laws principles, except where mandatory local data-protection law (such as GDPR for EEA/UK residents) provides otherwise.

16. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice in the App. Your continued use of the App after an update means you acknowledge the revised Policy.

17. Contact us

Constant LLC — Privacy Email: admin@constantqj.com Address: Registered address available upon written request (contact admin@constantqj.com)

Related documents: Terms of Use — https://constantsecurities.ai/terms · Privacy Policy — https://constantsecurities.ai/privacy

Appendix A — Apple “App Privacy” Nutrition Label mapping (for App Store Connect)

This appendix maps our actual data practices to Apple’s App Privacy questionnaire so the App Store Connect privacy details can be filled in directly. Constant Signal collects only the categories below; all other Apple data categories should be answered “Data Not Collected.”

Key for “Purpose” (Apple’s defined purposes): App Functionality · Analytics · Product Personalization · Developer’s Advertising or Marketing · Third-Party Advertising · Other. We use only “App Functionality” (and, for crash/diagnostics, “App Functionality” and/or “Analytics” — see note). We do not use data for Tracking (ATT) or Advertising.

Tracking (ATT) declaration: The App does not track users across apps/websites owned by other companies and does not display an ATT prompt.

Reviewer notes to resolve before submission: - Confirm whether Crash Data (and any Performance/Usage data) is linked to the user’s identity or not linked, based on how the diagnostics SDK is configured. - Confirm whether the correct Apple purpose for diagnostics is App Functionality, Analytics, or both. - Ensure the answers above exactly match the SDKs actually compiled into the shipped build (Sign in with Apple, StoreKit 2, and the diagnostics/crash tooling).