Updated 8 Oct 2026
Privacy Policy
Who is the controller
The controller of your personal data is K&L Rock Simulations s.r.o., registered office Jičínská 226/17, Žižkov, 130 00 Prague 3, Czech Republic, Company ID (IČO) 30034221, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 456224, which operates the Daycano service. In matters of personal data write to us at admin@daycano.com; the proptrayd.com domain is operated by the same company as Daycano. We have not appointed a data protection officer, because the law does not require us to. The service is intended only for persons aged 18 or over and we do not knowingly process the data of persons under 18; if we find that an account was created in breach of this rule, we will cancel the account and delete the data.
What data we process
When you buy a challenge: first name, last name, e-mail, country, and optionally phone and billing address. For payments and payouts: the payment identifier, the amount and the date, for a card payment only the masked card number, and for a payment or payout in cryptocurrency the wallet address and the transaction identifier. During the identity verification before the first payout: an identity document, date of birth and address. While you use the service: your platform login details, trading history, balances, records of rule compliance and communication with support. Automatically: IP address, device and browser type, language, approximate location (country only), information about where you came to the website from (parameters in the link and the referring page), and technical identifiers of your device and network; with your consent also analytics and advertising data. We compare technical device and network identifiers across accounts in order to recognise that one person is creating more accounts than the rules allow, or that someone is trading on another person's account from a single device; we do not sell them and we do not use them for advertising. We need the data we ask you for at purchase and during identity verification in order to conclude and perform the contract: providing it is voluntary, but without it we cannot sell you a challenge, set up an account or pay out a reward. The phone number and the newsletter subscription are entirely voluntary and not providing them has no effect on the service.
Why and on what basis
Performance of the contract (Article 6(1)(b) GDPR): setting up and running the simulated account, evaluating the challenge, verifying your identity, age and country of residence before the first payout, paying out the reward, communication about the account and handling complaints. Compliance with legal obligations (Article 6(1)(c) GDPR): accounting, taxes and checks against international sanctions lists. Legitimate interest (Article 6(1)(f) GDPR): securing the service, preventing fraud and abuse including the detection of multiple accounts held by one person, checking compliance with the program rules, defending legal claims, and measuring the sources of traffic and orders; you can object to this processing. Consent (Article 6(1)(a) GDPR): marketing e-mails and analytics and advertising cookies; you can withdraw your consent at any time and the withdrawal does not affect the lawfulness of the processing carried out before it. We are not a financial institution or an obliged entity under Act No. 253/2008 Coll., on Selected Measures against the Legitimisation of Proceeds of Crime. We ask you for an identity document not because of a legal obligation, but so that the reward is really paid to you and to prevent fraud and the creation of multiple accounts. If we make a copy of your identity document during verification, we do so only with your consent under Section 15a of Act No. 328/1999 Coll.
Automated evaluation
Compliance with the account limits is evaluated automatically by the trading platform: when the daily or overall loss is reached, the system itself closes the positions and the account. The logic is described in the program rules and is the same for all accounts. We also compare accounts, devices and trading activity in an automated way in order to detect conduct that the rules prohibit. The final decision to close an account for a rule breach and on the entitlement to a reward is, however, always made by a human. You will receive every such decision in writing with reasons, you can state your point of view on it, ask for it to be reviewed by a human and appeal against it within 14 days.
Who we pass data to
We pass your data to the recipients listed below. To the trading platform provider (Leverate), which sets up and runs the simulated account. To the payment services provider, which processes the payment of the fee; the full number of your payment card never reaches us. To the provider of the identity verification before the first payout. To hosting and e-mail providers. To Freshworks Inc. (USA), which operates our support chat and help desk, and to Google (reCAPTCHA), which protects the chat form against automated abuse. To analytics and advertising tools (Google Analytics 4, Meta Pixel) only with your consent. If we ever add another analytics or advertising tool, we will list it here before we switch it on. For Google Analytics, Google processes the data on our behalf. For the collection and transmission of data through the Meta Pixel on our website, we and Meta Platforms Ireland Ltd. are joint controllers; Meta is responsible for its further processing under its own policy. We will send you the essence of our arrangement with Meta on request. To accounting and legal advisers and to public authorities where the law requires it. Some recipients are based outside the European Economic Area, in particular in the United States (website hosting, the support chat, analytics and advertising tools); we base such transfers on the European Commission's adequacy decision for recipients certified under the EU-US Data Privacy Framework and, where a recipient is not covered by it, on the standard contractual clauses approved by the European Commission. We will send you a copy of the safeguards used on request at admin@daycano.com. We cannot delete or change data written to a blockchain during a payment or payout in cryptocurrency, because it is outside our control; we can only delete the copy of it in our systems.
How long we keep data
We keep data about your purchase, account and payouts for the duration of the contractual relationship and then for the limitation period for claims arising from it, as a rule 3 years, so that we can defend ourselves in any dispute. We keep invoices and other accounting and tax documents for 10 years from the end of the tax period in which the performance took place, because accounting and tax legislation requires it. We delete the copy of your identity document as soon as the verification is complete and keep only a record that the verification took place, for the duration of the contractual relationship and the limitation periods. We keep the trading history from the simulated account for as long as the account exists and for 3 years afterwards, and communication with support for 3 years. Consent to marketing e-mails is valid until it is withdrawn. We keep analytics and advertising data according to the settings of each tool, in Google Analytics 4 for 14 months at most.
Your rights
You have the right of access to your data, to its rectification, erasure and the restriction of its processing, to data portability, and the right to object to processing based on a legitimate interest. You can object to receiving marketing messages at any time and without giving a reason. You can withdraw your consent at any time: for e-mails through the unsubscribe link in every message, for cookies in the cookie settings on the website. Write to us at admin@daycano.com. We will reply without undue delay, at the latest within one month; for complex or numerous requests we may extend that period by up to two further months and we will let you know if we do. If we cannot reliably verify from the request that it is you who sent it, we may ask for additional information. You can lodge a complaint with the Office for Personal Data Protection (uoou.gov.cz) or with the supervisory authority in your country of residence.
Cookies
We sort cookies and similar browser storage into four categories: essential, functional, analytics and marketing. We use essential ones without consent, because without them the site, or a service you ask for, does not work (sec. 89(3) of Czech Act No. 127/2005 Coll.): they remember, for example, your cookie choice, language, theme, offers you have closed and the support chat once you start it. Functional, analytics and marketing cookies are switched on only with your consent; until you give it, we do not even load their vendors' scripts. Refusing is one click and as easy as accepting. Your choice is valid for 12 months, after which we ask again, and you can change it or withdraw your consent at any time through the Cookie settings link in the footer of every page. So that we can show what you chose, we keep a record of each choice: a random identifier, the time, the version and language of the banner, the categories and vendors you agreed to and which earlier choice it replaces, without your IP address. We keep the record while the choice is valid and for 3 years after it ends. The complete list of cookies, their vendors, purpose and how long they are kept is in the Cookie policy.
Security
Communication with the website is encrypted and only people who need the data for their work have access to it. Suppliers who process data for us, including Google for Google Analytics, are bound by data processing agreements. Meta receives data from the Meta Pixel only on the basis of your consent and under our joint-controller arrangement (see Who we pass data to). Payment card data is processed exclusively by the payment services provider.
Changes to this policy
We may update this policy when the service or the law changes. The current version is always published on this page with the date of the last change.