Mijhar العربية
Home

Privacy Policy

Last updated: October 21, 2026

This page explains what Mijhar and its website collect about you, why, where we keep it, and when we delete it. We wrote it from the data our server actually stores.

In short

  • We do not ask for your email, name or phone number.
  • Your Binance key is stored encrypted, and the key we accept has no withdrawal permission.
  • No ads. We do not sell your data, and we do not track you across apps and websites.
  • You can delete your account inside the app in a few steps, and we delete it right away.

Who we are

Mijhar is an automated crypto trading service that works on your Binance account through a mobile app, with its website at trading.youo.info. We are responsible for the data described here, and you can reach us at [email protected] any time.

What we collect and why

These are all the kinds of data our server keeps, why we keep each one, and when we delete it.

Your Apple or Google account ID

What
An identifier that Apple or Google sends us when you sign in. We do not ask for your email or name. If you sign in with Apple, we also keep an encrypted token from Apple that we need to revoke the link when you delete your account.
Why
To recognize you when you come back to the app.
Deleted
Right away when you delete your account.

Your device and notifications

What
Platform (iOS or Android), app version, your device's push token, notification and sound settings, when you last opened the app, and a public key created by your phone that ties your session and biometrics to the device.
Why
To deliver notifications, know which app version you use, and stop sign-ins from another device.
Deleted
The push token is removed when you sign out on that device or when the push service rejects it. The rest is removed when you delete your account.

Your preferences

What
Language, time zone, appearance (light or dark), and whether amounts may appear on the lock screen.
Why
To show the app and notifications in your language, and compute your day and summary in your time.
Deleted
When you delete your account.

Sign-in sessions

What
A hash of your sign-in tokens with their expiry time, not the tokens themselves.
Why
To keep you signed in safely, and detect any attempt to reuse an old token.
Deleted
They expire on their own, and we delete all of them when you delete your account.

Your Binance key

What
The API key you connect with, stored encrypted with AES-256-GCM, together with its last 4 characters so you can recognize it, its permission check status, and a hash of your Binance account ID.
Generated key
With the recommended method, our server generates an Ed25519 key pair. You paste the public part into Binance, and the private part stays with us, encrypted, and never passes through your phone. If you choose the classic method (API key and secret from Binance), we encrypt the secret the moment it arrives.
Why
To place orders in your account according to your plan and settings. The hashed Binance account ID makes sure one Binance account links to one Mijhar account.
Deleted
When you disconnect or delete your account, we erase the encrypted key and its encryption key right away, so it can never come back.

Your trades and balances

What
Balances, orders and trades we read from Binance or place for you: coin, quantity, prices, fees, profit or loss, the timeline of each trade, your daily balance curve, and your net deposits and withdrawals.
Why
To show your history and statistics, apply your limits, and keep deposits and withdrawals out of your profit.
Deleted
When you delete your account, the link to you is removed, and closed trades stay without any identity for overall statistics (details under Deleting your account).

Your trading settings

What
Trade size, investment cap, maximum open trades, loss and profit style, loss limits, excluded coins, night buying, whether trading is on or paused, and the analyst coins you picked.
Why
So the engine works inside your own limits.
Deleted
When you delete your account.

Your subscription

What
The store (App Store or Google Play), plan, status, start and end dates, auto-renew status, and a hash of the purchase ID. Payment happens entirely at the store, and we never see your card details.
Why
To unlock your plan's features, and stop one purchase from serving two accounts.
Deleted
When you delete your account. The store keeps its own billing records under its own policy.

The free trial

What
Trial start and end dates, and a hashed fingerprint of your device.
Why
So the trial happens once per account and once per device.
Deleted
The trial dates go with your account. We keep the hashed device fingerprint so the trial cannot repeat on the same device. It does not identify you.

Security log

What
A log of sensitive actions such as sign-in, connecting a key, starting or pausing, changing settings and deleting: when it happened, from which device, and part of the IP address only. We cut off the end of the address and keep the first three parts of an IPv4 address (or the equivalent for IPv6), not the full address.
Why
To spot any unusual use of your account, and investigate problems.
Deleted
The service cannot edit this log. It stays after you delete your account, with no link to your identity, for security and fraud prevention.

Technical server logs

What
Logs our server writes about requests and errors, which may include the IP address a request came from. We block keys, sign-in tokens and signed request URLs from being logged.
Why
To fix errors and protect the service from attacks.
Deleted
We keep them for the shortest time we need for that purpose.

Your fingerprint or face never reaches us. Your phone checks it and sends us only a signature proving the check passed.

What we do not collect

We do not collect your email, name, phone number, location, contacts, photos, card details, or your phone's advertising ID.

There are no ads in Mijhar, we do not sell your data to anyone, and we do not track you across apps and websites.

This website uses no cookies and no tracking tools. Fonts load from Google Fonts, so Google receives your device's IP address when they load, as with any site that uses them.

Where we store it and how we protect it

  • All your data lives on a single server dedicated to the service, and the database sits on an internal network that cannot be reached from the internet.
  • The connection between your phone and our server is always encrypted with HTTPS.
  • Your Binance key uses envelope encryption: a data key of its own, and a master key that only the isolated signing service can read. It decrypts the key in memory only, at the moment an order is sent.
  • Backups are encrypted with a different key, and the master key is never part of a backup, so a backup alone cannot reveal any key.
  • There is no admin panel on the internet, and server access is limited to secure SSH keys.

No system is perfectly protected. If a breach ever affects your data, we will tell you without delay, explain what happened, and what you should do.

How long we keep it

  • While your account exists: your account, devices, preferences, settings, subscription and trade history.
  • Until you disconnect: your encrypted Binance key.
  • After you delete your account: closed trades and the security log with no link to your identity, and the hashed trial device fingerprint.
  • Encrypted backups: your older data remains in them until their cycle ends, and your keys inside them cannot be decrypted because the master key is never part of a backup.

Who we share it with

We share the minimum needed, with these parties only, and each is governed by its own policy:

  • Binance: we send your orders signed with your key, and read your balances, trades and key permissions. Your Binance account is governed by Binance's own policy.
  • Apple: Sign in with Apple, delivering notifications to iPhones, and App Store subscriptions.
  • Google: Sign in with Google, delivering notifications to Android phones through Firebase Cloud Messaging, and Google Play subscriptions.
  • Cloudflare: a network that carries your connection to our server and protects it from attacks, so it receives your device's IP address and your requests to the server.

We write the notification text ourselves. On the lock screen it shows the coin name and percentage only, and amounts appear only if you turn them on.

We do not share your data with anyone else, unless a valid legal request requires it, and then only the minimum needed.

Your rights

  • See your data: most of it is right in the app, and you can ask for a full copy by email.
  • Correct and change it: from the settings inside the app.
  • Export your history: as a CSV file from the app.
  • Withdraw consent: turn off notifications or disconnect your Binance key any time.
  • Delete your account: in the app, or by email.

We answer any request within 30 days at most, and usually much sooner.

Deleting your account

You can delete your account inside the app at any time:

  1. Open Mijhar and go to the Account tab.
  2. Scroll to the bottom and tap Delete my account.
  3. Read what we delete and what remains. If you have an active subscription, cancel it first from Manage subscription, because deleting your account does not cancel it.
  4. Confirm with your fingerprint or face, and type DELETE in the box.
  5. We delete your account right away and sign you out of all your devices.

What we delete right away

  • The link to your Apple or Google account, and we revoke the Apple token if you signed in with Apple.
  • Your encrypted Binance key and its encryption key, so it can never come back.
  • Your devices, notification tokens and sessions, so you are signed out everywhere.
  • Your preferences, trading settings, analyst coins and trial details.
  • And we stop any auto trading on your account right away.

What remains and why

  • Your closed trades: kept with no link to your identity, as part of the engine's overall statistics. Nothing that identifies you stays with them.
  • The security log: kept with no link to your identity, for security and fraud prevention.
  • The trial device fingerprint: a hashed value we keep so the free trial cannot repeat on the same device. It does not identify you.
  • Encrypted backups: your older data remains in them until their cycle ends. Your key inside them cannot be decrypted, because the master key is never part of a backup.
  • Billing records at Apple or Google: governed by the store itself.

Your open trades and your money stay in your Binance account as they are, and we no longer manage them after deletion. We also suggest deleting the key from the API Management page on Binance. If you do not have the app, see how to request deletion by email.

Age

Mijhar is for adults aged 18 and over, and we do not knowingly collect data from anyone younger.

Changes to this policy

If we change something important, we tell you inside the app before it takes effect. The last updated date is always at the top of this page.

Contact us

For any privacy question, write to us at [email protected].