MarketTradeScenariosHomePlatform FeaturesPhilosophyNext AIHow it worksNCP CreditsFAQ
ThemeDark
Legal

Privacy Policy

Last updated: November 10, 2026

!

The legal documents on this page are governed by the laws of the Republic of Türkiye and are originally published in Turkish. Translations are provided for informational purposes only; the Turkish text prevails in case of any dispute.

1. Scope

This policy explains how your personal data is collected, used, shared and retained when you use the Next Candle website (nextcandle.academy) and mobile apps. Detailed information for users in Türkiye is provided in the KVKK Privacy Notice.

The data controller is the company that operates the Platform, PİH Tasarım Mühendislik ve Üretim Danışmanlığı Ticaret Limited Şirketi ("Next Candle"):

  • Legal name: PİH Tasarım Mühendislik ve Üretim Danışmanlığı Ticaret Limited Şirketi
  • Registered address: Tomtom Mah. İstiklal Cad. Beyoğlu İş Merkezi Apt. No:187 İç Kapı No:147, Beyoğlu/İstanbul, Türkiye
  • MERSIS No.: 0541050453200010
  • Trade registry: Istanbul Trade Registry Office, No. 661095-0
  • Tax office / Tax ID: Beyoğlu / 5410504532
  • Email: nextcandle@upigai.com

2. Data We Collect

  • Account Data: Email address, username, optional display name and profile information, an irreversible hash of your password (the password itself is not stored), two-factor authentication setting, language and time zone preferences.
  • Consent Records: The date, version, IP address and browser/device information of your 18+ declaration and of your acceptance of the Terms of Use and Risk Disclosure; records of when you grant or withdraw the optional Trading Journal permissions (Next AI and Trader DNA).
  • Virtual Trading and Discipline Data: Trades in the virtual account (entry/exit, size, leverage, stop and target values and changes to them), risk and mode settings, alert events, Trading Journal answers, the feeling you choose when closing a trade by hand (only with your consent), report card, XP/level and NCP movements.
  • Trader DNA Record: Your trading and discipline records are also kept in a tamper-proof record encrypted with a key unique to you. Your Trading Journal answers are added to this record only if you give explicit consent. When you delete your account, the key is destroyed and the record becomes unreadable. When you open a trade, the context of that moment is also added to this record: the general market conditions of that minute (e.g., BTC movement and market indicators), the coin's movement just before the trade, and measurements of your own trading behaviour (local time, time since your previous trade, adherence to your plan and mode rules, whether the Trading Journal was completed). This information is used only to give you discipline feedback in your report card and in Next AI; it contains no location, device or health information and is not used for investment advice.
  • Next AI Conversations: The questions you ask Next AI, the answers given and the context summary prepared for the answer (see section 4).
  • Support and Contact: Messages you send via the contact form, bug reports or email, your email address, and your IP address on the contact form.
  • Invitation Data: The invitation code relationship; to prevent invitation abuse, the IP address and browser information at sign-up and a hash of a random identifier created on your device.
  • Notifications: If you turn on notifications in a web browser, your browser's notification endpoint and browser information, so that notifications can be delivered.
  • Technical Data: IP address, browser and device information, server logs and security events.
  • Analytics Data (web only, only with your consent): Page visits, click and scroll behaviour, performance measurements and masked session recordings. No analytics tool is loaded in the mobile apps.

The Platform takes no payments and collects no card, bank or wallet details. The Platform does not accept exchange API keys.

3. How We Use Data

  • To create your account, manage your session and provide Platform features (performance of contract)
  • Virtual trading practice, discipline analysis, report card, XP/level and NCP calculations (performance of contract; scores are calculated automatically, are informational and have no legal effect)
  • To generate Next AI answers
  • With your optional explicit consent: Next AI using your Trading Journal answers and the feeling you choose when closing a trade by hand, and adding them, encrypted, to your Trader DNA record (two separate permissions; you can withdraw them at any time in Settings > Privacy)
  • Account security and prevention of abuse and invitation fraud (legitimate interest)
  • To answer your support requests and send essential service emails
  • If you consent, to measure and improve use of the website (consent)
  • To comply with our legal obligations

We do not use your data for advertising, we do not sell it, and we do not track you across other apps or websites.

4. Next AI (AI Assistant)

When you ask Next AI a question, your question, your conversation history and a summary of your account settings, virtual trading history and discipline statistics are sent to an AI model so that the answer can be personalised. Your email address and password are not sent.

  • Trading Journal: Your Trading Journal answers and the feeling you choose when closing a trade by hand are sent to Next AI and added to its memory only if you give explicit consent. When you withdraw consent this memory is deleted; not consenting does not turn off any feature.
  • Where it runs: The model runs on hardware located in Türkiye under Next Candle's own control. Your data is not sent to third-party AI providers; if the model is temporarily unavailable, Next AI shows an error message.
  • Retention: Your conversations are kept for as long as your account remains open, to show your history and monitor service quality; they are deleted when you delete your account.
  • Model training: Your conversations are currently not used to train AI models. If this changes, you will be informed in advance and your explicit consent will be requested.
  • Automated analysis: Next AI and the Report Card produce automated behaviour analyses from your trade and discipline records (such as revenge trades, cooldown violations and the discipline score). These analyses are only used to coach you; no automated decision with legal or similarly significant effects is made about you. To object to a result, use the "Report" button under an answer or write to nextcandle@upigai.com.
  • Reporting an answer: When you report a Next AI answer, the question, the answer and your optional note are stored for review and are deleted when you delete your account.
  • Report card download and verification: When you download your report card as a PDF or HTML file, a summary of the process data in it (your username, the period, the overall grade, subject scores and attendance) is stored with a verification code. Anyone you share the code or QR with can see only this process summary and the number of entries in your Trader DNA ledger at that time on the verification page; your profit, loss, returns and Daily Journal answers are not shown there. The return percentages in the personal report card exist only in the file you download. Verification records are deleted when you delete your account.

Next AI answers are generated automatically, may be wrong and are not investment advice.

5. Service Providers and International Transfers

We do not sell your personal data. To provide the service we share it with the following providers, only to the extent necessary:

  • DigitalOcean, LLC (servers in Singapore): Hosting of the Platform and database, and backups. Your account and trading data are stored on these servers.
  • Resend (USA; EU sending region): Sending verification, password reset and service emails (your email address and the email content).
  • Google LLC — Google Analytics (USA) and PostHog Inc. — PostHog Cloud EU (Frankfurt, EU): Usage measurement on the website only, and only if you consent to analytics cookies.
  • Binance: Live prices in the charts are fetched by your browser or app directly from Binance's public market data servers; Binance may see your IP address during this connection. No account information is sent to Binance.

Because some of these providers are located outside Türkiye, your data is transferred abroad. Where required by law, data may be shared with competent public authorities.

6. Public Information

Your username or display name and your competition and ranking results may be visible to other users. You can control whether your profile and virtual trades are public under Settings > Privacy. A public profile is required to take part in competitions.

7. Mobile Apps

The iOS and Android apps contain no analytics or advertising tools, and we do not track you across other companies' apps and websites. The apps use the same account and the same servers as the web version.

8. Retention Periods

  • Account, virtual trading, discipline and Next AI data are kept while your account is open and are deleted or anonymised when you delete your account.
  • Database backups are kept for at most about 5 weeks; deleted data also disappears from backups within that period.
  • Support correspondence is kept for a reasonable period after your request is resolved.
  • Analytics data is subject to the relevant provider's retention period (Google Analytics cookies up to 2 years, PostHog up to 1 year).
  • Records subject to a legal retention obligation may be kept, with your identity removed, until the end of that period.

9. Data Security

All connections are encrypted with HTTPS/TLS. Passwords are hashed one-way with bcrypt; session keys are kept in cookies that JavaScript cannot access (HttpOnly). You can turn on two-factor authentication for your account. No system is entirely risk-free; if a breach occurs, we will notify you and the competent authorities as required by law.

10. Your Rights and Account Deletion

Under KVKK and, where applicable, GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. You can withdraw analytics consent at any time via the "Cookie Policy" link at the bottom of the website. You can permanently delete your account and personal data yourself in the app via Settings > Privacy > Delete account. For other requests, write to nextcandle@upigai.com.

11. Children

The Platform is not intended for anyone under 18 and we do not knowingly collect data from anyone under 18. If we learn that someone under 18 has opened an account, we will close it.

12. Changes and Contact

When we update this policy, the date at the top of the page changes; we announce significant changes on the Platform. Questions: nextcandle@upigai.com

Other documentsTerms of UseKVKKRisk DisclosureRefund PolicyCookie PolicyKYC/AMLAPI Security

Test your plan without risking real money.

1,000 USDT paper balance. Review conditions, see the risk, measure the outcome. All trades take place on a virtual account; Next Candle does not currently offer live trading.

Create accountHow it works