Your account and your data

Creating an account

You sign up at app.luxabit.nl with your first name, last name, email address and a password, and confirm your email address with the link Luxabit sends you. Or choose Continue with Google: then you log in with your Google account, without a separate password or confirmation email, and Luxabit takes your name and email address from Google. Once your account is active, you get a welcome email with where to start. Before you start, you confirm that you are 18 or older and that you understand Luxabit is an educational tool that gives no investment advice. By signing up you agree to the terms of use. When those terms change materially, you are asked to confirm them again.

The free Starter plan needs no credit card.

Confirmation email and password

Your password needs at least 8 characters, a lowercase letter, an uppercase letter, a digit, and a symbol, such as ! ? # or @. While you type it, a checklist below the field ticks off each requirement, both when you sign up and when you choose a new password. A password that appears in a known data breach is refused, even if it meets the requirements.

Didn't get the confirmation email? Check your spam folder first. You can have it sent again with Send it again, both on the screen after signing up and when you try to log in before confirming.

Forgot your password? Choose Forgot password? on the login page and enter your email address. Luxabit emails you a link that takes you to a page where you choose a new password; after saving you go straight to your workspace. The link works once and expires after a while: if it no longer works, request a new one. To protect your privacy, the page gives the same answer whether or not there is an account for the address you entered.

Two-factor authentication

On your account page you can turn on two-factor authentication. Logging in then asks, after your password or Google, for a 6-digit code from an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password. Someone who learns your password still can't get in without your phone.

To turn it on, choose Turn on two-factor authentication, scan the QR code with the app (or type in the key shown below it) and enter the first code. Other devices where you were logged in are logged out and ask for the code the next time. You then get 10 recovery codes. Save them somewhere safe, such as your password manager: they are shown only once. Each code works once, to log in when you no longer have your phone.

Logging in with a recovery code turns two-factor authentication off, and your other recovery codes stop working; set it up again on your account page straight away. Running low on codes? New recovery codes replaces them all. Both that and Turn off ask for a code from your app first. Whenever two-factor authentication goes off, by a recovery code or with Turn off, Luxabit emails you; if you didn't do it yourself, choose a new password straight away.

While the code hasn't been entered, the session sees none of your data, also not through the database directly. Forgot your password as well? After the reset link Luxabit first asks for the code (or a recovery code), and only then lets you choose a new password.

What Luxabit stores

To work, Luxabit keeps what you put in:

• your trading plan;
• your journal: trades, tags, notes and your answers per rule;
• your daily routine: check-ins (whether you trade, your focus and what you pay attention to), reflections and your routine days;
• your progress in the academy: the lessons you started, your answers to their questions and the exercises you marked as done;
• if you turn on reminders: their times and, per device, the address your browser's push service gives out to deliver them (no location or phone number);
• your conversations with the coach and the trade plans recorded in them;
• chart images you add to reviews, and the reviews themselves;
• your language and your usage this month (coach messages and reviews);
• if you turn on two-factor authentication: the key of your authenticator app (kept by our authentication provider) and your recovery codes, stored only as a hash;
• if you connect an exchange (OKX, Bybit or Binance): your read-only API key, encrypted, and the trades imported from it.
• if you connect cTrader: the read-only access you gave Luxabit, encrypted, the number of the account you chose, and the trades imported from it.

What goes to the AI

The coach runs on Claude, the AI model of Anthropic. To answer, it receives your trading plan, the relevant trade data and your messages or notes. Amounts of money are removed from your messages and notes first: the coach works in R and percent only. The position size calculator calculates in your browser: your account size, typed or read from your exchange, is never stored by Luxabit and never sent to the AI.

Dictating in the chat

With the microphone button in the chat you can speak your message instead of typing it, in English or Dutch (the language of the app). Your browser turns the speech into text, usually through the speech service of the browser's maker (such as Google for Chrome or Apple for Safari). Luxabit never receives or stores the audio: only the text, and only when you send it. You can edit the text before sending. The button only appears in browsers that support dictation, such as Chrome, Edge and Safari; your browser asks for microphone access the first time.

Luxabit on your phone

Luxabit works in the browser on your phone, and you can put it on your home screen: it then opens with one tap, full screen, without the browser bars. When you're logged in on a phone, Luxabit offers this once. On Android, tap Install (or Add to Home screen in the browser menu). On an iPhone or iPad, tap the share button in Safari and choose Add to Home Screen. If you close the message, it stays away for a month. Nothing is installed from an app store, and your data stays the same as in the browser.

Dark or light

Luxabit is dark by default. With the switch next to the language (at the bottom of the menu in the app, in the top bar on the website) you choose a light version instead: the sun for light, the moon for dark. The choice applies straight away, to the app and the website alike, and is remembered in your browser with a cookie, so it is not tied to your account: on another device or browser you choose it again.

Payments

Subscriptions are paid through Stripe. You manage your subscription, payment method and invoices from your account page, and can cancel there any time. See Plans and pricing.

Exporting your journal

Use Export CSV in the journal to download every trade as a spreadsheet file. If you move to the free plan, your journal stays available.

Deleting your account

You can delete your account yourself on your account page, by typing your email address to confirm. This permanently deletes your trading plan, journal, daily routine, academy progress, conversations, chart images, reviews and any exchange connection with its stored key, and cannot be undone. A running subscription is stopped immediately, without a refund for the remaining period. Invoices stay with Stripe, as tax law requires.

Read the privacy statement for which data Luxabit processes, who receives it and how long it is kept, and the terms of use for the agreement itself. Questions about your data: support@luxabit.nl.