Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

• Account Information: When you sign in with Apple or Google, we collect your name, email address, and unique user ID provided by these authentication services.
• Portfolio Data: Stock symbols, quantities, purchase prices, and transaction history you manually enter into the app.
• Payment Information: Subscription payment processing is handled by Apple through in-app purchases. We do not directly collect or store your payment card information.

1.2 Automatically Collected Information

• Usage Data: Information about how you use the app, including features accessed, screens viewed, and time spent in the app.
• Device Data: Device type, operating system version, unique device identifiers, mobile network information.
• Log Data: API call timestamps, request durations, and error logs for troubleshooting purposes.

1.3 Financial Market Data

We retrieve real-time and historical stock market data from third-party financial data providers. This data includes:

• Stock prices (current and historical)
• Company fundamentals (revenue, earnings, P/E ratios)
• Market indices (S&P 500 data for benchmarking)

2. How We Use Your Information

We use the information we collect to:

• Provide Core Functionality: Enable portfolio tracking, stock analysis, optimization recommendations, and backtesting simulations.
• User Authentication: Verify your identity and maintain your account security.
• Subscription Management: Track trial periods, manage subscriptions, and enforce access controls based on your subscription tier.
• Improve the App: Analyze usage patterns to enhance features, fix bugs, and optimize performance.
• Customer Support: Respond to your inquiries, troubleshoot issues, and provide technical assistance.
• Analytics: Monitor API usage, track portfolio performance metrics, and generate aggregated analytics (anonymized).

3. Data Storage and Security

3.1 Local Storage

Some data is stored locally on your device using encrypted storage mechanisms:

• Portfolio holdings and transaction history
• User preferences and app settings
• Cached stock price data for offline access

3.2 Cloud Storage (Supabase)

We use Supabase (a secure, open-source backend platform) to store:

• User account information (email, display name, user ID)
• Subscription status and trial expiration dates
• API usage logs for analytics and rate limiting

All data transmitted to Supabase is encrypted using industry-standard TLS/SSL protocols. Data at rest is encrypted using AES-256 encryption.

3.3 Security Measures

• Encryption: All data transmitted between the app and our servers is encrypted using HTTPS/TLS.
• Authentication: We use OAuth 2.0 through Apple and Google for secure user authentication.
• Access Controls: Database access is restricted to authorized personnel only, with role-based access controls (RBAC) enforced.
• Regular Audits: We conduct periodic security reviews and vulnerability assessments.

4. Third-Party Services

Stocks PM integrates with the following third-party services that may collect information:

4.1 Authentication Providers

• Apple Sign-In: We use Apple’s authentication service to securely sign you in. Apple’s privacy policy applies: https://www.apple.com/legal/privacy/
• Google Sign-In: We use Google’s OAuth for authentication. Google’s privacy policy applies: https://policies.google.com/privacy

4.2 Financial Data Providers

• MarketStack API: We retrieve real-time stock quotes and historical price data from MarketStack.
• Yahoo Finance (yfinance): We use Yahoo Finance APIs for supplementary market data and fundamentals.

These services may log API requests and IP addresses according to their own privacy policies. We do not share personally identifiable information with these providers beyond what is necessary to retrieve market data (stock symbols only).

4.3 Backend Infrastructure

• Supabase: Our backend database and authentication provider. Hosted on AWS with data encryption at rest and in transit. Privacy policy: https://supabase.com/privacy

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or portfolio data to third parties for marketing purposes.

5.2 Limited Disclosure

We may disclose your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share your information.
• Service Providers: With trusted third-party service providers (e.g., Supabase, cloud hosting) who assist in operating the app, under strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or government regulation to comply with legal processes.
• Protection of Rights: To protect the rights, property, or safety of Stocks PM, our users, or others (e.g., fraud prevention).
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

6. Your Data Rights

You have the following rights regarding your personal data:

6.1 Access and Portability

• You can export your portfolio data at any time using the app’s built-in CSV export feature.
• You may request a copy of all personal data we hold about you.

6.2 Correction and Deletion

• You can update your portfolio holdings, preferences, and account information directly in the app.
• You can delete your account at any time from the Profile settings. This will permanently delete your data from our servers.

6.3 Data Retention

• We retain your data for as long as your account is active or as needed to provide services.
• After account deletion, we may retain certain data for up to 30 days for backup purposes, after which it is permanently deleted.
• Anonymized, aggregated analytics data may be retained indefinitely for product improvement.

7. Children’s Privacy

Stocks PM is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that a child under 18 has provided us with personal information, we will promptly delete it. If you believe a child has provided us with information, please contact us immediately.

8. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. By using Stocks PM, you consent to the transfer of your data to jurisdictions that may have different data protection laws than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

9. Cookies and Tracking Technologies

Stocks PM does not use cookies or web tracking technologies. However, our third-party analytics and authentication providers may use their own tracking mechanisms as described in their respective privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will notify you by:

• Displaying a notice in the app
• Updating the “Last Updated” date at the top of this policy
• Sending you an email notification (if applicable)

Your continued use of Stocks PM after changes are posted constitutes your acceptance of the updated Privacy Policy.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request details about the personal information we collect, use, and disclose.
• Right to Delete: You can request deletion of your personal information (subject to certain exceptions).
• Right to Opt-Out: You can opt out of the “sale” of personal information (note: we do not sell your data).
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us using the information below.

12. European Data Protection (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on consent, contract performance, and legitimate interests.
• Data Protection Officer: For GDPR-related inquiries, contact us at the email below.
• Right to Lodge a Complaint: You have the right to file a complaint with your local data protection authority.

© 2026 AppAiTech LLC. All rights reserved.
This privacy policy is provided in accordance with App Store Review Guidelines and applicable data protection laws.