Privacy Policy

Opportunity Inc. ("we", "us", or "our") operates Formiq ("Service"). This Privacy Policy explains what data we collect, how we use it, and how we protect it.

(a) Account Information When you create an account with an email address, or sign in with Google or Apple, we receive your email address, display name, and profile image URL. If you sign in with Apple and choose "Hide My Email", we receive the relay address Apple issues instead of your own. (b) Usage Data We store data you create on the Service, such as chart settings, indicator configurations, trade records, and backtest results. (c) Payment Information Payments made on our website are processed by a third-party payment service. We never store your credit card number. We only retain the customer ID and subscription ID provided by the payment service. For purchases made inside the app, the app distribution platform handles the payment, and we receive only whether a purchase exists and which one. (d) AI Assistant Data When you use the AI assistant or the strategy builder, your message and current chart context (currency pair, timeframe, etc.) are sent to an external AI service to generate a response. Your messages and the responses are stored on our servers to investigate faults and improve the responses, and are deleted when you delete your account. (e) Usage Records We send records of how features are used to an external analytics service. Recorded actions include running a backtest, starting a replay, setting an alert, viewing the purchase screen and its outcome, and opening the app from a notification or widget. Each record carries context such as the currency pair involved, your current plan type, and how many days have passed since your first use. While you are signed in, these records are sent linked to your account identifier, so that one person's use of the app and the website counts as one. They are not anonymous statistics. Records made while you are signed out are not linked to an account. (f) Crash Reports When the app or your browser terminates unexpectedly, we send a record to an external error-reporting service to identify the cause. The record includes your device model and OS version (or browser type on the web), where the error occurred, and the currency pair, timeframe, and data-loading state on screen at the moment of the crash.

We use your information to: 1. Provide, maintain, and improve the Service 2. Sync your data across devices 3. Process payments for Paid Plans 4. Generate AI assistant responses 5. Respond to support requests 6. Analyze usage patterns 7. Prevent abuse 8. Send you email updates about market conditions and new features — only if you have asked us to. These updates are written in Japanese, so the option appears only when you create an account in Japanese; English sign-up does not offer it. Where it is offered, it is asked separately and never ticked for you, and we keep a record of the consent (the date, the address it was given for, the screen it was given on, and the version of this policy in effect at the time). 9. Send notices needed to provide the Service — address verification, password resets, billing, renewal and cancellation notices, material changes, outage and maintenance notices, and changes to our policies. These are integral to the Service and are sent whether or not you have given the consent described above.

The Service uses the following kinds of external services to provide its features, and sends each the data it needs: 1. Authentication service — your account information, to log you in. 2. Database service — stores the user data described in Section 2(b). 3. Analytics service — receives the usage records described in Section 2(e). While you are logged in, they carry your account identifier. 4. Error-reporting service — receives the crash reports described in Section 2(f). 5. Payment service — receives the information needed to process payments for Paid Plans on our website. 6. App distribution platform — for purchases made inside the app, the platform operator handles the payment and manages the purchase. 7. AI service — receives your input and the chart state when you use the AI assistant or the strategy builder. 8. Market data provider — receives the requests that fetch chart data. A request includes your IP address and the currency pair and period being fetched. No account information is sent. 9. Email delivery service — receives your email address and an identifier we assign, to send the email described in Section 3, item 8, and the notices needed to provide the Service. Unsubscribes, and records of delivery and opens, are held there. Each external service handles your data under the privacy policy set by its provider.

1. User data is stored on an external cloud database service. 2. The app also stores settings, trade records, drawings and similar data on your device. If you turn on iCloud sync, these are also stored in your own iCloud. We cannot access the contents of your iCloud. 3. Data is sent and received over encrypted communication (TLS). 4. When you delete your account, all data linked to it is deleted from our servers at that time. Copies in backups are overwritten within 30 days. If you receive our email updates, your address is removed from the mailing list within 30 days. After deletion we keep only a one-way hash of your email address, used to tell whether a free trial has already been used and to record that the address was taken off the mailing list. The exception is the record of your consent to our email updates (your address, and when and how you gave it): Japan's Act on Regulation of Transmission of Specified Electronic Mail requires us to keep it for one month after the address is taken off the mailing list, and it is deleted then. Data on your device and in iCloud can be deleted by you, by resetting or deleting the app. 5. The records described in Section 2(e) and (f) are kept separately from your account, for the retention period each external service sets, and are deleted automatically when that period ends. To ask for them to be deleted, contact us at the address below.

We do not sell your personal information, and we do not provide it to third parties except: - With your consent - To the external services listed in Section 4, limited to what is needed to provide the Service - When disclosure is required by law - When necessary to protect a person's life, body, or property

On the website, we use cookies and browser local storage to: 1. Keep you logged in 2. Save your preferences (chart theme, language, etc.) 3. Analyze how the Service is used The app does not use cookies; it keeps the equivalent information in storage on your device. These are needed to provide the Service and for the measurement described in Section 2(e), and are not used for advertising tracking. The app does not request tracking permission (ATT) and does not collect the advertising identifier (IDFA).

You have the right to: - Access and export your data - Request correction or deletion of your data - Delete your account - Withdraw consent to data processing - Stop receiving email updates at any time, using the unsubscribe link in any such email or by contacting us To exercise these rights, contact us through the contact form at https://formiq.jp/contact.

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR): (a) Legal Basis for Processing We process your personal data based on: - Contract performance — to provide the Service you signed up for - Legitimate interests — to improve the Service, prevent fraud, and ensure security - Consent — for optional features such as the AI assistant and analytics (b) Your GDPR Rights In addition to the rights listed in Section 8, you have the right to: - Data portability — receive your data in a structured, machine-readable format - Restriction of processing — request that we limit how we use your data - Object to processing — object to processing based on legitimate interests - Lodge a complaint — file a complaint with your local data protection authority (c) International Data Transfers Your data may be transferred to and processed in countries outside the EEA (including Japan and the United States) where our service providers operate. These transfers are safeguarded by Standard Contractual Clauses (SCCs) or equivalent measures. (d) Data Retention We retain your personal data only for as long as necessary to provide the Service. When you delete your account, your data is deleted at that time, except as described in Section 5. Anonymized analytics data may be retained indefinitely.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights: (a) Right to Know You have the right to request details about the categories and specific pieces of personal information we have collected, the sources of collection, the business purpose, and the categories of third parties with whom we share it. (b) Right to Delete You may request that we delete any personal information we have collected from you, subject to certain exceptions. (c) Right to Correct You may request correction of inaccurate personal information. (d) Right to Opt-Out of Sale or Sharing We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. (e) Right to Non-Discrimination We will not discriminate against you for exercising any of your CCPA/CPRA rights. (f) Categories of Personal Information Collected - Identifiers (email address, display name) - Commercial information (subscription status) - Internet activity (usage data, chart settings) - Inferences drawn from the above (g) How to Exercise Your Rights Submit a request through the contact form at https://formiq.jp/contact. We will verify your identity and respond within 45 days.

The Service is not intended for users under 16. If we learn that a user is under 16, we will promptly delete their account and data.

We protect your data with: - Encrypted communication (HTTPS/TLS) - Database access control rules - Server-side authentication and authorization - No storage of payment card data (delegated to a PCI DSS-compliant payment service)

We may update this policy and will post changes on the Service. We will notify you of material changes by email or in-app notification.

Operator: Opportunity Inc. Contact form: https://formiq.jp/contact For GDPR inquiries, you may also contact your local data protection authority.