Legal

Privacy Policy

Last updated: June 2026

The short version

Cyrfas is a local-first application. Your trading data, positions, journal entries, and settings live on your Mac. There are no Inner Recess servers receiving your financial data. The only information Inner Recess ever holds about you is your email address and subscription status, managed through Paddle.

Who we are

Cyrfas is developed and distributed by Inner Recess, LLC ("Inner Recess," "we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, and your choices. If you have questions, contact us at hello@innerrecess.com.

Information Inner Recess collects

Inner Recess collects very little directly. The information we may hold is limited to:

We do not collect, receive, or store your brokerage account data, trade history, positions, P&L, journal entries, screener results, or any other financial information you work with inside Cyrfas. That data never leaves your device.

Local data storage

All application data — including portfolio history, trade records, watchlists, strategy definitions, notes, and settings — is stored locally in a database on your Mac. Inner Recess has no access to this data. Backing up this data is your responsibility; we recommend using Time Machine or another backup solution.

API credentials you enter in Cyrfas (brokerage tokens, API keys) are stored in the macOS Keychain on your device. They are never transmitted to Inner Recess.

Third-party services you connect to directly

Cyrfas can connect to external services to retrieve market data, brokerage account information, and AI responses. These connections are made directly from your Mac to the third party — no data passes through Inner Recess infrastructure. Each service's own privacy policy governs how they handle your data.

TastyTrade

Brokerage connection for live positions, orders, and account data. Your credentials are stored in your Keychain and sent directly to TastyTrade's API.

Tradier

Options and equity market data provider. Requests go directly from Cyrfas on your Mac to Tradier's API using your own account credentials.

Finnhub

Financial data and news feed. Requests go directly from Cyrfas on your Mac to Finnhub's API using your own API key.

Anthropic

Powers the Desk Intelligence AI assistant. Prompts and context are sent directly from your Mac to Anthropic's API using your own API key. Inner Recess does not see these requests.

Payment processing — Paddle

All subscription payments are processed by Paddle.com Market Limited ("Paddle"), our merchant of record. When you subscribe to Cyrfas, you are purchasing through Paddle. Paddle collects and stores your payment card details, billing address, and transaction records. Inner Recess does not receive or store payment card information. For details on how Paddle handles your data, see Paddle's Privacy Policy.

Website analytics and server logs

The cyrfas.com website does not use third-party analytics trackers or advertising pixels. Our hosting provider may retain standard server access logs (IP address, page requested, timestamp, referrer, user agent) for a limited period for security and operational purposes. These logs are not used to build profiles or sold to third parties.

Cookies

The cyrfas.com marketing website does not set any tracking or advertising cookies. Paddle may set cookies on checkout-related pages to facilitate payment processing and fraud prevention.

Children's privacy

Cyrfas is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Data retention

We retain your email address and subscription status for as long as your account is active and for a reasonable period thereafter to resolve disputes and comply with legal obligations. To request deletion of your account data held by Inner Recess, contact us at hello@innerrecess.com.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port personal information we hold about you. To exercise any of these rights, contact us at hello@innerrecess.com. We will respond within a reasonable timeframe. For data held by Paddle, you should contact Paddle directly.

Changes to this policy

We may update this Privacy Policy from time to time. Changes are effective when posted, and the "Last updated" date at the top of this page will reflect the revision. Continued use of Cyrfas after changes constitutes acceptance of the updated policy.

Contact

Privacy questions, data requests, or concerns can be sent to Inner Recess, LLC at hello@innerrecess.com.