Data safety and app privacy: what the developer declared

Both stores ask the developer to say what the app does with a user's data and print the answer on the public page. Google calls it Data safety, Apple calls it App Privacy. On 6 November 2026 this desk read both for the 4 listings of FxPro cTrader and cTrader. The table quotes the declarations; the text explains what each store says about their status.

The declarations, as the pages print them

One row per statement. The Play lines are the Data safety summary; the App Store lines are the label's groups with their categories. Pages read here: FxPro cTrader and cTrader in Nigeria.

What the stores say their blocks are

Every Google Play block opens with the same note: “Safety starts with understanding how developers collect and share your data. Data privacy and security practices may vary based on your use, region, and age. The developer provided this information and may update it over time.” In other words, the declaration is the developer's; Google displays it but did not measure what the app does. On the App Store, the block opens with the developer's name and says the privacy practices “may include handling of data as described below”; the detail view says the information has not been verified by Apple.

Google Play: FxPro cTrader

The block of the app under FXPRO GROUP LIMITED prints these lines: “This app may share these data types with third parties” — “Personal info and Device or other IDs”; “This app may collect these data types” — “Personal info, App info and performance, and Device or other IDs”; “Data is encrypted in transit”; “You can request that data be deleted”. Read literally, the first line says what may leave the app, the second what may be gathered by it, and the last two how it is handled.

Google Play: cTrader: CFD Trading & Charts

The block of the app under Spotware prints these lines: “This app may share these data types with third parties” — “Personal info and Device or other IDs”; “This app may collect these data types” — “Personal info, App info and performance, and Device or other IDs”; “Data is encrypted in transit”; “You can request that data be deleted”. Read literally, the first line says what may leave the app, the second what may be gathered by it, and the last two how it is handled.

App Store: FxPro cTrader

The privacy label of the app published by FxPro Group Limited: under “Data Not Linked to You” it lists 3 categories: Contact Info, Identifiers, Diagnostics. This label has no group for data linked to the user or used to track the user; it lists data not linked to the user only.

App Store: cTrader: CFD Trading & Charts

The privacy label of the app published by cTrader Ltd: under “Data Not Linked to You” it lists 3 categories: Contact Info, Identifiers, Diagnostics. This label has no group for data linked to the user or used to track the user; it lists data not linked to the user only.

Reading the declarations together

On Google Play the first line of each block reads: FxPro cTrader: “This app may share these data types with third parties”; cTrader: CFD Trading & Charts: “This app may share these data types with third parties”. On the App Store the label groups are: FxPro cTrader: Data Not Linked to You; cTrader: CFD Trading & Charts: Data Not Linked to You. The two stores ask different questions in different formats, so the declarations are not identical and are not meant to be. Where two listings of one brand declare different things, this site reports the contrast once, with the date, and leaves the question open: it cannot tell whether the apps differ in what they do, whether the declarations were filled in on different assumptions or whether one is out of date.

The declarations do not answer the common question of what becomes of identity-check documents and photographs and how long they are held. The privacy policy linked from the pages and the account documents are where that would be answered, and neither was read here.

The lines of the Play block, one by one

The lines that occur on the pages read here, with what each says in plain words: “This app may share these data types with third parties” - the developer states that the listed kinds of data may be passed to other companies; “This app may collect these data types” - the developer states that the listed kinds of data may be gathered by the app; “Data is encrypted in transit” - the developer states that data is scrambled while it travels between the phone and the server; “You can request that data be deleted” - the developer states that a user may ask for their data to be erased. “Shared” means passed to another company; “collected” means gathered by the app itself, and the two are asked separately. The block does not say how long data is kept or for what purpose beyond what the policy link states.

What the App Store's category names mean

Apple's label sorts data into named categories. The ones that occur on these pages: Contact Info (name, e-mail address, phone number or other contact details); Identifiers (a user or device identifier); Diagnostics (crash logs and performance data). The category name says what kind of data is meant, not how much of it is collected or what is done with it; the page gives no counts. The three group headings — linked to you, not linked to you and used to track you — say what the developer declares about the link between the data and the user.

What a reader can do with it

Read the declaration before installing, not after. If a category on the label is something you do not want to give, the store page tells you before you have given it. Open the privacy policy the page links to; FxPro cTrader links one on fxpro.com. Look for what the declaration says about deletion: the Play block says whether you can request that data be deleted; the lines read here do not say how. None of this needs an account; it is the one part of an app that the stores make public before you decide.

The limits of the declaration pages

Declarations capture intent at a moment: not an audit, not a certificate and not a promise (Google: “may update it over time”). They tell little about the broker as a company; the account-holding entity, its regulator and the applicable courts are in the account documents.