We don't sell your data. Here's the proof.

01Introduction

What this policy covers, who we are, and which law applies.

This Privacy Policy describes how LogicBanker ApS (hereinafter referred to as the ‘Company’, ‘we’, ‘us’, or ‘our’) collects, uses, shares, and protects your personal data when you use the LogicBanker platform, including the website at logicbanker.com, the LogicBanker mobile applications for iOS and Android, and all related services (collectively, the ‘Platform’). We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (‘GDPR’), the Danish Data Protection Act, and other applicable data protection legislation.

02Data controller

LogicBanker ApS decides how your data is used. Write to [email protected] about anything data-related.

The data controller responsible for processing your personal data is: LogicBanker ApS, Slotsmarken 12, 1. th., 2970 Hørsholm, Denmark, CVR: 39409291. For questions regarding data processing, contact us at [email protected].

03Personal data we collect

Email and progress so the product works, country so the currency is right, usage data so we can fix what is broken. Nothing beyond that.

We collect personal data about you when you register, use the Platform, and interact with our services. The categories of personal data we collect include:

• Account information: email address, username, display name, password (encrypted), date of birth, country of residence, and profile picture.
• Identity verification data: full legal name, government-issued identification documents, and bank account or payment details (collected when required for KYC verification and prize payouts).
• Authentication data: data received from third-party login providers (Google, Apple) when you choose to register or log in via their services, including your name, email address, and profile picture.
• Gameplay and behavioral data: all interactions with Platform features including Pulse responses, tournament decisions, prediction submissions, portfolio trades, AI assistant conversations, chat messages, achievement progress, streak data, and competitive rankings.
• Financial knowledge data: assessment results, learning progress, skill ratings (including Academy Score and Pulse Score), knowledge category mastery levels, and educational progression data.
• Device and technical data: IP address, device type and model, operating system and version, browser type and version, screen resolution, language settings, unique device identifiers, and push notification tokens.
• Usage data: pages visited, features used, session duration, click patterns, navigation paths, referral sources (including UTM parameters), and timestamp data.
• Communication data: messages sent through the Platform’s chat and social features, support inquiries, and feedback submitted to the Company.
• Subscription and payment data: subscription status, plan type, billing history, payment method type (we do not store full payment card details, these are handled by our payment processors).

We do not collect location data beyond your country of residence, your contacts, microphone input, clipboard contents, or an advertising identifier, and we do not access data belonging to other applications on your device. Camera images and face data are processed only if you choose to complete identity verification.

Our primary purposes for collecting your personal data are:

• To provide, operate, and maintain the Platform and deliver the services you have requested.
• To identify, authenticate, and verify you as a user.
• To administer competitions, register prizes, and process cash prize payouts.
• To personalize your experience, including providing tailored content, recommendations, and AI-powered features.
• To collect statistics and analyze how the Platform is used, with the aim of improving the user experience and developing new features.
• To display relevant information, statistics, and insights about your gameplay, performance, and progress.
• To monitor the Platform for abuse, cheating, fraud, or other violations of our Terms and Conditions.
• To create aggregated, anonymized, and de-identified datasets for commercial purposes, including providing insights, benchmarks, analytics, and reports to third-party partners such as financial institutions, educational organizations, and research bodies.
• To develop, train, and improve the Company’s AI models, algorithms, scoring systems, and analytical tools.
• To communicate with you about your account, including service updates, security alerts, and administrative messages.
• To market and promote the Platform, including targeted advertising through third-party advertising platforms.

We will use the email address and push notification tokens you provide to send you the following types of messages:

• Essential messages related to your account, security, and the operation of the service.
• Updates about your progress, including notifications about completed achievements, leaderboard changes, performance reports, and reminders to engage with the Platform.
• Social notifications such as friend requests, updates on your friends’ progress, and interactions with other players.
• Educational messages to help reinforce your learning and enhance your financial knowledge, including insights on market trends and reminders to practice through in-game challenges.
• Announcements about new features, competitions, updates, and promotional offers.

04Legal basis for processing

Four legal grounds under the GDPR: contract, legitimate interest, consent, and legal obligation.

We process your personal data on the following legal bases under the GDPR:

• Contract (Article 6(1)(b)): Processing necessary to perform our contract with you, including providing the Platform, managing your account, administering competitions, and processing prize payouts.
• Legitimate interest (Article 6(1)(f)): Processing necessary for our legitimate business interests, including improving and developing the Platform, ensuring security and preventing fraud, creating aggregated and anonymized datasets for commercial use, developing and improving AI models using anonymized interaction data, providing aggregated insights and analytics to third-party partners, and marketing the Platform. We have conducted balancing tests to ensure our legitimate interests do not override your fundamental rights.
• Consent (Article 6(1)(a)): Processing based on your explicit consent, including sending marketing communications, placing non-essential cookies and tracking technologies, and processing data for targeted advertising through third-party platforms. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legal obligation (Article 6(1)(c)): Processing necessary to comply with legal obligations, including KYC requirements, tax reporting obligations, and responding to lawful requests from public authorities.

05Profiling

We build a skill profile from how you play, to personalise your learning. You can object to it.

We engage in profiling as defined under GDPR Article 4(4). Specifically, we create and maintain profiles about you based on your use of the Platform, including: skill ratings and scores (such as Pulse Score, Academy Score, and category mastery levels) derived from your gameplay performance; behavioral analytics reflecting your engagement patterns, learning progression, and competitive performance; and personalized content recommendations based on your interests and activity. These profiles are used to provide you with a personalized educational experience and to improve our services. We do not currently create broker suitability reports or share profiles through broker-referral accounts. You have the right to object to profiling under Article 21 GDPR. See 'Your rights' below.

06AI and automated processing

AI features send your prompts to third-party providers. Automated scores affect rankings, and you can ask a person to review one.

The Platform uses AI and automated decision-making systems for several purposes, including: generating personalized responses through the W.I.L.L. AI assistant, calculating skill ratings (Pulse Score, Academy Score), matchmaking in tournaments and competitions, generating personalized learning recommendations, detecting fraudulent or suspicious behavior, and creating performance analytics and insights.

Your interactions with AI features, including prompts and conversation history with the W.I.L.L. AI assistant, are processed by third-party AI service providers (including Anthropic, Google, and OpenAI) for the purpose of generating responses. These providers process data as data processors under agreements that include appropriate data protection safeguards.

Automated scoring and ranking systems may affect your position in competitions and leaderboards. You have the right to request human review of significant automated decisions that affect you. Contact us at [email protected] to exercise this right.

07Identity verification and payouts

We only ask for an identity document when you want a cash payout or a verified feature. We store the result, never photographs of you or your document.

Identity verification runs through our verification provider Didit. The flow checks a government-issued identity document, performs a face match and runs a liveness check. From the result we store your verified name, date of birth, nationality, document type, the last four digits of the document number, a hashed document number, and the face match and liveness scores. We do not store photographs of you or of your document. Where a step requires your address, we validate it using Google Address Validation and store the submitted address together with the validation verdict.

To confirm non-professional access to live market data, we also screen your verified name against public registers of financial professionals (FINRA BrokerCheck and SEC IAPD). A possible match is always reviewed by a person and never leads to automatic rejection.

Verification data is used for verification, payouts and legal compliance, and never for marketing. Cash prizes are paid out through Tremendous, which receives the information needed to deliver your redemption link. Verification data is deleted together with your account. We keep only the hashed document number, which cannot be traced back to you and which prevents a deleted account from verifying again with the same document.

08Third-party service providers

A short list of vendors, each bound by a data processing agreement. We do not sell your data.

We share your personal data with the following categories of third-party service providers, who process data on our behalf as data processors:

• Cloud infrastructure and hosting: Hetzner Cloud (primary servers and databases, located in Falkenstein, Germany) and Cloudflare (CDN, DDoS protection, web application firewall).
• Payment processing: Stripe (web and subscription payments), Apple (App Store payments), and Google (Play Store payments).
• AI service providers: Anthropic, Google AI, and OpenAI (for AI-powered features including the W.I.L.L. AI assistant and market analysis).
• Email delivery: SendGrid (transactional and marketing emails).
• Error monitoring and performance: Sentry (application error tracking and performance monitoring).
• Financial data providers: Third-party providers supplying market data, financial information, and economic indicators displayed on the Platform.
• Identity verification: Didit (identity and age verification for prize payouts, including document check, face match and liveness check) and Google Address Validation (address validation where a step requires an address).
• Educational organizations: When you explicitly join a classroom or organization, we may share the educational progress and gameplay information required to operate that group. We do not currently offer broker-linked accounts or broker-referral data sharing.
• Prize payouts: Tremendous (delivery of cash prize redemption links).

We do not sell your personal data and we have never done so. We do not share your personal data with data brokers.

09Named subprocessors

Every company that touches your data, what they do with it, and where they process it.

The following named subprocessors process personal data on our behalf. Each is bound by a data processing agreement, and transfers outside the European Economic Area are covered by the safeguards described under International data transfers.

Subprocessor	Purpose	Processing region
Hetzner Cloud	Server hosting and primary infrastructure	European Union (Falkenstein, Germany)
Cloudflare	Content delivery network and DDoS protection	European Union and global edge locations
SendGrid	Transactional and service email	United States (data processing agreement in place)
Stripe	Payments and subscriptions	European Union and United States (Standard Contractual Clauses)
Google Analytics	Analytics and conversion measurement, enabled only with your consent	European Union and United States (Standard Contractual Clauses)
Microsoft Clarity	Session analytics and usability measurement, enabled only with your consent	European Union and United States (Standard Contractual Clauses)
Sentry	Error reporting, scrubbed of personal data	European Union (Frankfurt, Germany)
Meta	Advertising measurement and audiences, enabled only with your consent	European Union and United States (Standard Contractual Clauses)
TikTok	Advertising measurement and audiences, enabled only with your consent	European Union and global (Standard Contractual Clauses)
Tremendous	Cash prize payout fulfilment	United States (Standard Contractual Clauses)

10Analytics and advertising

Analytics and advertising tags stay off until you consent, and you can change your mind at any time.

We use the following analytics and advertising services to understand how the Platform is used and to deliver targeted advertising:

• Google Analytics 4 (GA4) and Microsoft Clarity: Collect consented usage and session-usability data including page views, session duration, user interactions, and device information. Data may be transferred to service-provider servers in the United States under appropriate safeguards.
• Meta Pixel (Facebook): Tracks conversions and user interactions for the purpose of measuring advertising effectiveness and delivering targeted ads on Meta platforms. Data is shared with Meta Platforms, Inc.
• TikTok Pixel: Tracks conversions and user interactions for measuring advertising effectiveness and delivering targeted ads on TikTok. Data is shared with TikTok/ByteDance.
• These analytics and advertising tools use cookies and similar tracking technologies. You can manage your preferences through our cookie consent mechanism. See the ‘Cookies’ section below for more information.

11International data transfers

Your data lives in the EU. Anything that leaves is covered by Standard Contractual Clauses.

Your personal data is primarily stored in the European Union, on infrastructure operated by Hetzner Cloud in Falkenstein, Germany. Backups are encrypted at rest and replicated to a second location within the European Union.

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where some of our third-party service providers are located. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including: EU Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions by the European Commission for the recipient country, or the service provider’s participation in recognized certification mechanisms.

For more information about the specific safeguards applied to your data transfers, you may contact us at [email protected].

12Data retention

We keep data while your account is active, then delete it. Some records the law makes us keep longer.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods include:

• Account data: Retained for the duration of your account. On account deletion it is deleted or anonymized within 30 days from our primary systems and within 90 days from encrypted backups, unless longer retention is required by law.
• Gameplay and behavioral data: Retained for the duration of your account. Upon account deletion, personally identifiable gameplay data is deleted or anonymized. Aggregated and anonymized data derived from your gameplay may be retained indefinitely for statistical, analytical, and commercial purposes.
• Financial and transaction data: Retained for a minimum of 5 years after the relevant transaction, as required by Danish bookkeeping legislation.
• KYC and identity verification data: Identity documents are handled under the verification provider's published retention terms and applicable law. LogicBanker retains only the verification result and payout-audit data for as long as necessary for compliance and dispute handling.
• Marketing consent records: Retained for 2 years after consent withdrawal, as evidence of prior consent.
• Server logs and technical data: Retained for up to 12 months for security and troubleshooting purposes.
• Inactive accounts: We contact you by email after 24 months of inactivity and delete the account after 36 months of inactivity.

13Cookies and tracking technologies

Essential cookies always run. Everything else waits for your consent.

The Platform uses cookies and similar tracking technologies to provide and improve our services. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

We use the following categories of cookies: (a) Strictly necessary cookies, required for the Platform to function, including authentication, session management, and security. These cookies cannot be disabled. (b) Analytics cookies, used to collect information about how you use the Platform, including Google Analytics cookies. These help us understand usage patterns and improve the Platform. (c) Marketing cookies, used to deliver targeted advertising and measure campaign effectiveness, including Meta Pixel and TikTok Pixel cookies. (d) Functional cookies, used to remember your preferences and settings, such as language and display preferences.

You can manage your cookie preferences through our cookie consent banner when you first visit the Platform, or through your browser settings at any time. Disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, we rely on our legitimate interest in providing a functional service. For all other cookies, we obtain your consent before placing them on your device.

Advertising tags and paid-click attribution cookies remain disabled until you grant marketing consent. Google Analytics and Microsoft Clarity are enabled only when you grant analytics consent.

14Children’s privacy

You must be at least 13. Under 16 in some countries, a parent has to agree first.

The Platform is not intended for children under the age of 13. Where your country has set a higher age of consent for information society services under Article 8 GDPR, up to 16, we require verifiable parental consent before processing your personal data for any purpose beyond what is strictly necessary to operate the Platform. We do not knowingly collect personal data from children below the applicable minimum age. If we become aware that we have collected personal data from a child under the applicable minimum age without parental consent, we will take steps to delete that data promptly. Schools using our classroom programme operate under a separate and stricter agreement. If you believe a child under the minimum age has provided us with personal data, please contact us at [email protected].

15Protection of personal data

Encrypted in transit and at rest, passwords hashed, access controlled. No system is perfect, and we will tell you if something goes wrong.

We are committed to ensuring that the personal data we collect and process is and remains secure and confidential at all times. We have implemented appropriate technical and organizational measures to protect your data, including encryption of data in transit and at rest, password hashing using Argon2id so that we never hold your password in a readable form, access controls and authentication mechanisms, regular security assessments and monitoring, incident response procedures, and employee training on data protection. Where you sign in through a third-party provider we store only that provider’s identifier, never a password. Despite these measures, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you and the relevant supervisory authority of any personal data breach as required by applicable law.

16Your rights

Access, correct, delete, restrict, port, object, complain. Most of it is self-serve in your settings.

Under the GDPR and applicable data protection legislation, you have the following rights regarding our processing of your personal data:

These include:

• Right of access (Article 15): You have the right to obtain confirmation of whether we process your personal data and, if so, to access that data along with information about the processing.
• Right to rectification (Article 16): You have the right to have inaccurate personal data corrected and incomplete data completed.
• Right to erasure (Article 17): You have the right to have your personal data deleted when it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements.
• Right to restriction of processing (Article 18): You have the right to restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
• Right to data portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to object (Article 21): You have the right to object to processing based on legitimate interests, including profiling. You also have the right to object to processing for direct marketing purposes at any time.
• Right regarding automated decision-making (Article 22): You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you, and to request human intervention.

Many of these rights are self-serve on the Platform: you can export your data, correct your profile details, and delete your account from your account settings. Data exports are provided in a structured, machine-readable format (JSON). To exercise any other right, or if you prefer to write to us, contact us at [email protected]. We will respond to your request within 30 days, and usually within 7. You can find more information about your rights at the Danish Data Protection Agency website at www.datatilsynet.dk.

17Changes to this Privacy Policy

If we change something that matters, we tell you before it takes effect.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. If we make material changes, we will notify you through the Platform or via email before the changes take effect. The updated Privacy Policy will always be available on the Platform with the effective date indicated. We recommend that you review this policy regularly.

18Inquiries and complaints

Write to us first. If we do not resolve it, you can complain to Datatilsynet.

If you have questions regarding this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we process your personal data, please contact us at [email protected] or at the postal address listed below.

You have the right to file a complaint with the Danish Data Protection Authority (Datatilsynet) if you are dissatisfied with how we process your personal data. Contact information: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk. If you reside in another EU/EEA country, you may also file a complaint with your local supervisory authority.

19Contact Information

How to reach us about anything in this policy.

LogicBanker ApS, Slotsmarken 12, 1. th., 2970 Hørsholm, Denmark. CVR: 39409291. Email: [email protected].