Last updated: 8 August 2026
Stock Options Academy is an educational app that teaches how stock options and derivatives work. It is operated by Asheesh Chanda.
This policy explains what we collect, why, who else sees it, and what you can do about it. We have tried to write it in plain language rather than the usual wall of legal text.
The short version: we ask for a username, a password and your rough education level. We do not ask for your email, your real name, your date of birth, or your phone number. We do not run ads, and we do not track you across other apps or websites. Your username and your point total are visible to other learners on the leaderboard. Nothing else about you is.
Things you give us when you sign up
| What | Why | Where it is stored |
|---|---|---|
| Username (chosen by you) | Identifies your account and appears on the leaderboard | Our server and your device |
| Password | Signing you in | Our server, hashed — never stored or transmitted in a readable form. If you switch on “Stay signed in on this phone”, a copy is also kept in your phone’s own secure storage so your fingerprint, face or device PIN can sign you back in. That copy stays on the device and is never sent to us. Settings → “Signing in” removes it. |
| Education level (a coarse band, e.g. “undergraduate”) | Pitches lesson difficulty and the learning path at roughly the right level | Our server and your device |
Things the app records as you learn
Things we do NOT collect
Our sign-in system is built on a service that expects every account to have an
email address. Because we deliberately do not ask you for one, the app
generates a fake, unroutable placeholder from your username — of the form
yourname@users.optionsschool.invalid. .invalid is a reserved suffix that
cannot exist on the real internet. No mail is ever sent to it, it reaches no
mailbox, and you will never see or type it.
A consequence you should know before signing up: because we hold no real email address for you, there is no “forgot password” link and no way for us to verify who you are. If you lose your password, that account cannot be recovered. Keep it somewhere safe.
On the leaderboard, other learners can see:
That is all. Other learners cannot see your education level, which lessons you have done, what you got wrong, or your streak.
The leaderboard may also contain bot entries — scores generated by us, not real people. These are always labelled as bots in the app. We will never present a bot’s score as a real person’s.
If you would rather not appear on the leaderboard at all, see “Your choices” below.
Our server. Your account and progress are stored on infrastructure provided by Supabase (database, authentication and hosting), acting as our data processor. This is what lets your progress follow you to a new device.
Your device. A copy of your progress is also kept locally so the app works offline and syncs when you are back online. Your app settings (theme, whether reminders are on) stay on your device only, and so does the place you had got to in a lesson or a Q&A.
If you choose to stay signed in on a phone, your username and password are also kept there, in the secure storage the operating system provides for exactly this (the Android Keystore, or the iOS Keychain). They are encrypted, they are released only after your fingerprint, face or device PIN, and they are not included in a backup restored onto different hardware. This is a choice you make, it is off if you never switch it on, and you can remove it at any time in Settings → “Signing in”. Deleting your account removes it too.
Market data. The practice market shows delayed share prices, supplied by Finnhub. Requests go through our own server, which passes on two things: the ticker symbols being priced, and — when you use the search box — the text you typed, so that searching by company name works and not only by exact ticker. Our server keeps no record of either. Your username, your account, and anything about your learning are never sent to Finnhub, and Finnhub is not told who is asking.
We do not sell your data. We do not share it with advertisers. We have no interest in doing either. The app contains no purchases: there is nothing to buy, so we never see or store payment details of any kind.
If you turn on the daily learning reminder, the app schedules it on your device. The reminder is not sent from our server, and we do not learn whether you opened it. It is off-switchable at any time in Settings, and you can also revoke the notification permission in your device settings.
Delete your account entirely. In the app: Profile → Delete account. You will be asked to type your username to confirm. This removes your account, your lessons, your Q&A scores, your points, your streak and your leaderboard entry, from this device and from our server, immediately and permanently. It cannot be undone, and because we hold no email address we cannot restore it or verify a change of mind afterwards.
If you cannot reach the app — you have lost your password, or uninstalled it — email okaysigma31@gmail.com with your username and we will delete the account within 30 days.
Depending on where you live — in particular in the UK, the EU, and parts of the US — you may have additional legal rights to access, correct, export, restrict or erase your data, and to complain to a data protection regulator. Contact us at okaysigma31@gmail.com and we will honour those requests.
Our legal basis for processing, where the GDPR applies, is the performance of our agreement with you (running the account you asked us to create) and our legitimate interest in operating and improving a functioning learning app.
We keep your account and progress for as long as your account exists. If you ask us to delete it, we remove it within 30 days, apart from anything we are required to retain by law. Backups are overwritten on a rolling basis.
This app carries a 3+ content rating on Google Play. That rating is about what is in the app — no violence, no gambling, no purchases, nothing otherwise unsuitable — and it is not the same thing as who the app is for.
Accounts are for learners aged 13 and over. We ask for a coarse education level, but we do not ask for your age or date of birth, and we cannot verify it. If you are under 13, please do not create an account. If you are 13 to 15, you may be below the digital consent age where you live — it ranges from 13 to 16 across the EU — so please involve a parent or guardian before signing up. If you believe someone under 13 has created an account, contact okaysigma31@gmail.com and we will remove it.
Options trading is not a suitable pursuit for children, and this app does not promote it to anyone. It teaches how the instruments work — including how they lose money — and it never enables real trading with real money.
Passwords are hashed by our authentication provider and are never stored in a readable form, including by us. Data in transit is encrypted (HTTPS).
If you switch on “Stay signed in on this phone”, the app keeps your sign-in in the device’s secure storage and puts your screen lock in front of it. Being honest about what that does and does not protect: it stops someone who picks up your unlocked phone, and it means the credential is encrypted at rest and does not travel to a replacement device. It would not stop someone who had already taken full control of the phone itself. We think that is the right trade for an account that unlocks lessons and a points total and holds no money and no payment details — but it is your call, the setting is off unless you turn it on, and Settings → “Signing in” ends it. Database-level access rules mean each account can only read and write its own rows; the only exception is the leaderboard, which exposes nothing but a username and a point total.
No system is perfectly secure, and we will not pretend otherwise. Because we hold so little about you — no email, no real name, no payment details, no location — the damage a breach could do is deliberately limited.
Stock Options Academy is educational only. Nothing in it is financial, investment, tax or legal advice, or a recommendation to buy or sell any security. The practice market uses simulated money and idealised models; no real trade is ever placed and no real money is ever at risk.
If we change this policy in a way that materially affects you, we will say so in the app before the change takes effect. The “last updated” date at the top always reflects the current version.
Questions, requests, or complaints: okaysigma31@gmail.com
This policy is governed by the law of Singapore.