Client owns the data. Coach gets access.
The client keeps ownership of their data, you get access. Permissions apply per data type, and agreements between coach and client put this in writing.
Who owns the data?
The client owns their data: always. FlowTrader is a processor under GDPR, you as coach get access rights. If the client deletes their account, the data is gone, including your annotations on it. If you as coach cancel, the client keeps their account and data fully.
What the coach sees: the client decides
During onboarding, the client sets per data type what the coach can see: trades, journal entries, mood barometer, commitments, agreement history. By default only the minimum is visible: the client actively opens up. They can adjust anytime, without asking the coach.
Where is the data stored?
The data is stored with Google Firebase (Google Ireland Ltd.). For operations, AI analysis, payments and emails we use further service providers, and with some of them data may be transferred to the US. Which ones they are is set out in the privacy policy. Processing is by FlowTrader AI: DPAs per Art. 28 GDPR are standard.
Legally sound agreements
An agreement documents: what the coach offers, how often, on what terms, with what obligations on both sides. The client accepts explicitly at start. If you change something as coach (e.g. session frequency or price), a new explicit client confirmation is required. Version history stays fully traceable as PDF.
Data export and deletion
Client can export their data anytime as JSON or PDF. Coach can export agreement histories and client chats for bookkeeping. On account deletion, the GDPR right to be forgotten applies: data is deleted within a traceable period.
Marketing service on behalf of the coach
You can optionally activate our marketing service in the Coach Portal. FlowTrader AI will then send pre-built standard templates (e.g. renewal reminder, re-engagement) to your clients: co-branded as “[your name] via FlowTrader AI”, with your email as reply-to. We are content-responsible for the templates; you simply commission the dispatch (Art. 28 GDPR). You can inspect an audit log of every sent message at any time and pause the service with one click, across the board or per client.